Free PDF Password Protector
Add password protection and encryption to your PDF files for secure sharing. Free, fast, and works entirely in your browser with no sign-up required.
Updated
About Browser-Based PDF Protection
Real AES-128/256 encryption is applied right here in your browser — the file is never uploaded. The protected PDF requires your password to open in any standard PDF reader.
Upload PDF File
Drag and drop a PDF file here, or click to select
Password Tips
- Use a strong password with at least 8 characters
- Include uppercase, lowercase, numbers, and symbols
- The user password is required to open the document
- The owner password grants full admin access to change permissions
- Store your passwords securely -- they cannot be recovered
- 256-bit AES provides the highest level of encryption
- All processing happens in your browser -- files are never uploaded
Frequently Asked Questions
What is Protect PDF?
Protect PDF is a free online tool that adds password protection to your PDF files to prevent unauthorized access.
Is Protect PDF free?
Yes, it is completely free with no registration required. All encryption happens client-side in your browser.
Is my PDF data safe?
Yes, all password protection is applied locally in your browser. Your PDF files and passwords are never sent to any server.
Does the PDF Password Protector work on mobile devices?
Yes, the PDF Password Protector is fully responsive and works on smartphones and tablets. You can use it on any device with a modern web browser -- no app download required.
Do I need to create an account to use this tool?
No account or registration is needed. Simply open the PDF Password Protector in your browser and start using it immediately. There are no sign-up walls or usage restrictions.
Is there a file size limit?
Since the PDF Password Protector processes files in your browser, the size limit depends on your device's memory. Most devices can handle PDFs up to 50-100MB without issues.
How do I use the PDF Password Protector?
Simply enter your input in the provided field, adjust any settings to your preference, and the tool will process it instantly. You can then copy the result to your clipboard or download it.
Which browsers are supported?
The PDF Password Protector works in all modern browsers including Chrome, Firefox, Safari, Edge, and Opera. For the best experience, use the latest version of your preferred browser.
What is the difference between a user password and an owner password on a PDF?
A PDF can carry two distinct passwords that do different jobs. The user password, sometimes called the open password, is what a reader types to view the document at all; without it, the file will not open. The owner password, also called the permissions password, controls the restrictions on the file -- printing, editing, copying -- and lets an administrator change or remove those limits later. A PDF can have an owner password even when anyone is allowed to open it freely. In this tool the user password is required and the owner password is optional, so you can lock the document fully or just govern what readers may do. One rule covers both: if you forget either password there is no recovery. Set your user and owner passwords here, store them in a password manager, and download the protected copy.
What is the difference between 128-bit and 256-bit AES encryption for PDFs?
Both 128-bit and 256-bit AES are strong, widely trusted encryption standards; the number refers to the key length used to scramble the document. 256-bit AES uses a longer key, making it the more future-proof and harder-to-brute-force choice, which is why it is often labeled maximum security. 128-bit AES offers broader compatibility with older PDF readers and devices that may not support the newer standard, while still being extremely difficult to crack in practice. For most everyday documents either level is far beyond what an ordinary attacker could break. Choose 256-bit when you want the strongest available setting and your recipients use modern viewers; choose 128-bit if you need to support legacy software. This tool lets you pick either level on the Security tab before you process and download your file.
Does this tool apply real PDF encryption, or just mark the file as protected?
It applies real encryption. The tool runs qpdf -- the same open-source engine used in many server-side PDF pipelines -- compiled to WebAssembly so it executes inside your browser tab, with no native libraries and no upload required. It writes standard AES-128 or AES-256 encryption exactly as the PDF specification defines it, so any compliant reader such as Acrobat, Preview, Chrome or Edge will ask for your password before showing a single page. The permission flags you choose are written into the document's encryption dictionary at the same time. Because everything runs locally, your file and your password never leave your device; the only practical limit is your browser's memory on very large documents.
How do I make a strong PDF password that is hard to guess?
A strong password is long and mixes character types. The single most important factor is length, because each extra character multiplies the number of combinations an attacker must try; aim for at least twelve characters when the document is sensitive. Combine uppercase and lowercase letters, numbers, and symbols rather than relying on a single dictionary word, and avoid obvious choices like names, birthdays, or sequences such as 1234. A memorable passphrase of several unrelated words with a few substitutions is both strong and easier to recall. This tool includes a live strength meter that rates your user password from Weak to Strong as you type, scoring length and character variety so you can see instantly whether it is solid. The minimum accepted length is four characters, but eight or more with mixed types is far safer. Type your password above and watch the meter.
Which PDF permissions can I control, and what does each one restrict?
Beyond the open password, this tool lets you allow or deny several actions independently, so you can shape exactly what a reader is permitted to do once the file is open. Printing controls whether the document can be sent to a printer or saved as a paper or PDF copy. Copying text governs whether readers can select and copy content to paste elsewhere. Modifying decides whether the document's contents can be edited. Annotating sets whether readers may add comments, highlights, or markups. Form filling determines whether interactive form fields can be completed. Each toggles separately, so you can, for example, let people read and print a report while blocking copying and editing, or allow form filling on a document you otherwise lock down. Open the Security tab, set each permission to match how you want the file used, then process and download it.
Related Tools
Free PDF Merger Online
Combine multiple PDF files into a single document. Free, fast, and works entirely in your browser with no sign-up required.
Free PDF Splitter Online
Split a PDF into multiple files by pages or ranges. Free, fast, and works entirely in your browser with no sign-up required.
Free Image to PDF Converter
Convert images including JPG, PNG, and WebP to well-formatted PDF documents instantly. Free, fast, and works entirely in your browser with no sign-up required.
Free PDF Page Remover
Remove specific pages from any PDF document quickly and save the updated file. Free, fast, and works entirely in your browser with no sign-up required.
About the PDF Password Protector
The PDF Password Protector is a free, browser-based tool for adding password and permission settings to a PDF before you share it. You drag in a single PDF, choose a user password to open the file, optionally set a separate owner password, pick an encryption level, decide which actions readers are allowed to take, and download a new copy. It is built for anyone who emails sensitive documents — invoices, contracts, medical forms, statements, internal reports — and wants to control who opens them and what they can do once inside.
Everything happens locally. The file you upload is read into memory by your browser and processed there with the qpdf engine, compiled to WebAssembly; it is never sent to a server, and your passwords are never transmitted or stored. There is no sign-up, no email wall, and no software to install, so a confidential draft stays on your own device the whole time.
How to protect a PDF
Working through the tool follows four tabs — Upload, Security, Summary, and Result:
- Upload — drag and drop a PDF, or click to select one. The tool reads the page count and file size so you can confirm you have the right document.
- Security — set the user password (required to open the file) and confirm it. You can also add an optional owner password for administrative access, and choose 128-bit AES for broader compatibility or 256-bit AES for the strongest setting.
- Choose document permissions — printing, copying text, modifying, annotating, and form filling can each be allowed or denied independently, so you can, for example, let people read and print a report but block copying or editing.
- Summary then Result — review your choices, process the file, and download it with a
_protectedsuffix added to the filename.
A live password strength meter rates your user password from Weak to Strong based on length and whether it mixes uppercase, lowercase, numbers, and symbols. The tool enforces a minimum of four characters, but eight or more with a mix of character types is far harder to guess.
What "user" and "owner" passwords mean
PDF security uses two distinct passwords, and knowing the difference helps you set permissions sensibly:
- The user (open) password is what a reader types to view the document at all. Without it, the file will not open.
- The owner (permissions) password controls the restrictions — printing, editing, copying — and lets an administrator change or remove them later. A PDF can have an owner password set even when anyone is allowed to open it.
One rule applies to both: if you forget the password, there is no recovery. The document cannot be reopened by us or anyone else, so store it in a password manager rather than relying on memory.
How the encryption works
The encryption is the real thing, not a metadata flag. The tool runs qpdf — the same open-source engine behind many server-side PDF pipelines — compiled to WebAssembly so it executes inside your browser tab. It applies standard AES-128 or AES-256 encryption exactly as the PDF specification defines it, which means any compliant reader (Acrobat, Preview, Chrome, Edge) will demand the password before rendering a single page, and the permission flags you choose are written into the document's encryption dictionary.
Because it all runs locally, your file is never uploaded, and the password never leaves your device. The trade-off is memory: very large PDFs are limited by what your browser can hold rather than by a server's capacity.
One caveat worth understanding about PDF permissions generally: the open password is cryptographic and genuinely blocks access, whereas the permission flags (no printing, no copying) are enforced by the reader honouring them. Well-behaved readers respect them; that is how the format is designed. If you need restrictions that hold up against a determined party, an open password is the control that actually enforces itself.
Upload your PDF above, set your passwords and permissions, and download the protected copy — all without your file ever leaving your browser.