Password Protect PDF Free

Add a password to a PDF so only people with the password can open it. Includes a built-in strength meter to help you pick a strong one.

About this tool

Protecting a PDF with a password is the simplest way to ensure only intended recipients can open the document. PDFwarp applies industry-standard PDF encryption so your contracts, financial statements, and personal records travel safely — with no desktop software to install.

How it works

  1. Upload your PDF file.
  2. Enter a password. Use at least 12 characters, mixing letters, numbers, and symbols.
  3. Click Protect PDF and download your encrypted document.
  4. Share the password with the recipient through a different channel — never in the same email as the file.

Features

Tips for best results

Length beats complexity

A 16-character passphrase ('coffee-mountain-lamp-seven') is stronger and more memorable than an 8-character scrambled password. Attackers guess common patterns before they guess real words.

Never send password and file together

Email the PDF, text the password — or use a voice call. If both arrive in the same channel, the password might as well not exist. This is the single biggest security upgrade you can make.

Passwords block viewing, not screenshotting

Once your recipient opens the file, they can screenshot, print, or copy any content. Password protection is 'at-rest' security. For true leak protection, flatten sensitive pages to images or use a DRM service.

Save the password before closing the tab

PDFwarp cannot recover a lost password — PDF encryption is designed to be unrecoverable. Drop it in 1Password, Bitwarden, or a secure note before you finish the session.

Under the hood

AES-256, the real thing

Protection is applied with pypdf's AES-256 encryption — the current PDF standard, the same scheme Adobe Acrobat uses for strong protection. The document's content streams are actually encrypted with a key derived from your password; this is not a soft 'please ask for a password' viewer flag that tools can ignore.

What happens to your password

The password exists in server memory just long enough to derive the encryption key and write the protected file, then it's gone — never stored, never written to logs. The uploaded file itself is deleted the moment your download completes, per the same lifecycle as every PDFwarp tool.

The honest limits of PDF passwords

Encryption protects the file at rest — in an inbox, on a lost USB stick, in cloud storage. Once someone you gave the password to opens it, they can screenshot, print, or retype the contents. For leak-proofing beyond that you need DRM tooling, which is a different product category with different trade-offs.

Frequently asked questions

How strong is the encryption?

PDFwarp uses industry-standard PDF encryption that protects against casual access and unauthorized opening. Without the password, the file contents are unreadable.

What makes a good PDF password?

Use at least 12 characters mixing uppercase, lowercase, numbers, and symbols. Avoid dictionary words, names, and anything related to the document or recipient.

What happens if I forget the password?

PDFwarp cannot recover lost passwords — encryption is designed to be unrecoverable without the original password. Store it in a password manager before you forget.

Does password protection stop screenshots or printing?

No. Password protection controls who can open the file, but an authorized viewer can still screenshot, print, or copy content. For stricter controls you need dedicated digital rights management.

How should I send the password to the recipient?

Always send the password through a separate channel from the PDF — text message, phone call, or separate email. Sending both together defeats the purpose of protecting the file.

Can I remove the password later?

Yes — use our Unlock PDF tool. You will need to enter the original password to decrypt the file.

Is my password stored by PDFwarp?

Your password is used briefly on our server to encrypt the PDF, then discarded. Like your file, it is never stored or logged.

Related tools