How to Password-Protect a PDF (and Remove the Password Later)

Some documents deserve a lock: signed agreements, salary letters, medical results, scans of identity papers. Email inboxes get shared, cloud folders get misconfigured, and a PDF that looked private sitting on your desktop can travel further than you intended the moment you hit send. Password protection is the practical answer — and it does not require Adobe’s subscription or any upload of the very file you are trying to keep private.

This guide covers both ends of the lock: adding AES-256 protection with the free Protect PDF tool, and removing a password you no longer need with Unlock PDF — both running entirely in your browser.

Part 1: Adding a password

Step 1: Open the Protect PDF tool

Open Protect PDF and drop your file. The first time you use this tool, it fetches the encryption engine once (~1.3 MB) — a standard security library downloaded to your browser. Your file and your password never leave the device; the encryption itself runs locally, so the password you type is never transmitted, logged, or stored anywhere.

Step 2: Set the password to open the file

The main field is the password to open the file — what recipients must type before the document displays. It is entered twice to catch typos, because a mistyped password on an encrypted file is not recoverable: AES-256 has no “forgot password” link.

Choose a password that is genuinely hard to guess:

• Length beats cleverness. Four or five unrelated words (paper-river-lantern-9) are stronger than a mangled short word.
• No birthdays, license plates, or document names. Attackers try those first.
• Share it through a different channel than the file. Emailing the locked PDF and its password together protects nothing — send the password by phone or a separate message.

An optional advanced setting lets you set a separate owner password — a second password for editors who manage permissions on the file. Leave it blank unless you specifically run a workflow that needs one; by default it matches the open password.

Step 3: Encrypt and download

Press Encrypt PDF. The result is a standard AES-256 encrypted PDF that opens in Adobe Reader, Preview, Chrome, Edge — every mainstream viewer — prompting for the password you chose. Anyone without it sees nothing but a login prompt. Keep the unlocked original on your own machine; the locked copy is for sharing.

Part 2: Removing a password

When you’d want to

You protected a file last year, and now it goes into an archive where the password only gets in the way. You locked a draft, and it is finally approved for the open wiki. Or you simply inherited a file whose password everyone on the team knows anyway — the lock no longer adds information, just friction.

How to unlock

Open Unlock PDF, drop the encrypted file, and type the file’s current password. Press Unlock PDF and a decrypted copy downloads as a standard, open-freely PDF. As with encryption, the first use fetches the engine once; after that it comes from your browser’s cache, and everything runs locally.

One boundary is stated clearly on the tool itself: this works on files you own — the password is required, this is not a cracker. Removing protection you do not have the password for is neither possible here nor appropriate anywhere.

Tips for working with encrypted PDFs

• Keep a password record. AES-256 cannot be bypassed; a lost password means a locked-out file, permanently. A password manager entry costs ten seconds and saves the document.
• Protect the copy, not the original. Send the encrypted download; keep your working original unlocked so you never need to decrypt just to fix a typo.
• Layer defenses for sensitive material. Encryption controls who opens the file; a visible identity mark deters redistribution once it is open. Combine Protect PDF with Watermark PDF for documents you both lock and stamp.
• Verify before sending. After encrypting, open the locked copy and confirm the password prompt appears — thirty seconds of checking beats a resend with apologies.

Troubleshooting

Wrong password error when unlocking. The password is checked against the file’s actual encryption — there are no partial matches. Check for keyboard layout, trailing spaces, and case; the password is exactly what was set.

The encrypted file won’t load in the protect tool. Files already encrypted must be unlocked before re-protecting with a new password. Unlock first, then run the unlocked copy through Protect PDF again.

The engine download stalls. It is a one-time ~1.3 MB fetch; on a slow connection, give it a moment. Once cached, the tools work offline — the encryption never needed a server to begin with.

Does encryption make the file bigger? Negligibly — a few hundred bytes of encryption envelope on a document measured in megabytes.

Can I choose weaker encryption for compatibility? There is one setting: AES-256, the current standard. Every modern viewer supports it, so there is no reason to reach for older, broken schemes.

A locked PDF is a small, complete privacy habit: set a strong password, share it separately, keep the original unlocked. Protect PDF and Unlock PDF make the whole cycle a thirty-second browser task — with your documents and your passwords staying on your device throughout.