How to Protect PDF with Password: Step-by-Step in 2027

Quick answer: To password-protect a PDF, use MintSaaS PDF tools, Adobe Acrobat (Protect → Encrypt), or free tools like Smallpdf, ILovePDF. Set two passwords: a "document open" password (required to view) and a "permissions" password (restricts printing, copying, editing). Use strong passwords (12+ chars). For enterprise, use certificate-based encryption. Note: PDF password protection is not unbreakable — determined attackers can bypass it. For truly sensitive data, use dedicated encryption tools or DRM.[1][3][4]

Password-protecting PDFs is a common security measure for sensitive documents. In 2027, with increasing data privacy regulations, protecting PDFs is more important than ever — but understanding its limitations is equally important.

Types of PDF passwords

1. Document Open Password (User Password)

Required to open/view the PDF
Encrypts the entire document
Without it, the file can't be read
Strong protection (if password is strong)

2. Permissions Password (Owner Password)

Required to change security settings
Restricts: printing, copying, editing, form filling
Doesn't encrypt the document (can be bypassed)
Weaker protection (can be removed with tools)

Combined protection

Use both: Open password + Permissions password
Open password: prevents unauthorized viewing
Permissions password: prevents unauthorized modification
Best practice for sensitive documents[3]

How to password-protect a PDF

1. MintSaaS PDF tools

Upload PDF
Select "Protect PDF"
Enter password (open password)
Set permissions (print, copy, edit)
Download protected PDF

2. Adobe Acrobat

Open PDF in Acrobat
Tools → Protect → Encrypt with Password
Set "Document Open" password
Set "Permissions" password
Choose restrictions:

Printing: None, Low resolution, High resolution
Copying: Not allowed / Allowed
Editing: Not allowed / Allowed
Form filling: Not allowed / Allowed

Save

3. Free online tools

Smallpdf: Protect PDF (free tier)
ILovePDF: Add password protection
Sejda: Password protect with permissions
PDF2Go: Encrypt PDF

4. Command line (qpdf)

bash

# Add open password
qpdf --encrypt userpass ownerpass 256 -- input.pdf output.pdf

# Add permissions restrictions
qpdf --encrypt userpass ownerpass 256 \
  --print=none --modify=none --extract=n -- input.pdf output.pdf

5. Python (pypdf)

python

from pypdf import PdfReader, PdfWriter

reader = PdfReader("input.pdf")
writer = PdfWriter()

for page in reader.pages:
    writer.add_page(page)

# Add password
writer.encrypt(
    user_password="open_password",
    owner_password="owner_password",
    permissions_flag=0b0000  # No permissions
)

with open("protected.pdf", "wb") as f:
    writer.write(f)

6. Mac Preview

Open PDF in Preview
File → Export as PDF
Check "Encrypt"
Enter password
Save

Note: Mac Preview only supports open password, not permissions.

Encryption levels

PDF encryption standards

Standard	Key length	Security	Compatibility
RC4 40-bit	40 bits	Weak (crackable)	PDF 1.3+
RC4 128-bit	128 bits	Moderate	PDF 1.4+
AES 128-bit	128 bits	Strong	PDF 1.6+
AES 256-bit	256 bits	Very strong	PDF 1.7+ (Acrobat X+)

Recommendation: Use AES 256-bit for maximum security. Ensure recipients have compatible PDF readers.[3]

Permission restrictions

What you can restrict

Printing: None, low-res (150 DPI), high-res
Copying text/images: Allow or deny
Editing: Allow or deny (content modification)
Form filling: Allow or deny
Commenting/annotations: Allow or deny
Document assembly: Allow or deny (page insertion/deletion)

Limitations of permissions

Permissions password can be removed with free tools
PDF readers may not enforce permissions
Determined attackers can bypass restrictions
Permissions are a deterrent, not strong security

For truly sensitive data: Use document-level encryption (AES 256) + open password. Don't rely on permissions alone.[3][4]

Best practices for PDF passwords

Password strength

Minimum 12 characters
Mix uppercase, lowercase, numbers, symbols
Avoid dictionary words
Use a password manager
Don't reuse passwords across documents

Password management

Store passwords securely (password manager)
Share passwords via secure channel (not email)
Use different passwords for different documents
Rotate passwords for long-term archives
Document password recovery process

Enterprise considerations

Use certificate-based encryption (PKI) for high security
Implement DRM (Digital Rights Management) for sensitive content
Use document management systems (DMS) with access control
Audit access logs
Implement data loss prevention (DLP) policies[3][4]

Limitations of PDF password protection

What it protects against

Casual unauthorized access
Accidental sharing
Basic data leakage

What it doesn't protect against

Determined attackers (password can be cracked)
Screen capture (user can photograph screen)
Print to PDF (if printing allowed)
Metadata (may still be readable)
Brute force (weak passwords)

Alternatives for high security

DRM: Digital Rights Management (Adobe LiveCycle, LockLizard)
Information Rights Management (IRM): Microsoft Azure RMS
Secure document sharing: DocSend, Digify (track views, revoke access)
Dedicated encryption: VeraCrypt, GPG for file-level encryption[3][4]

Removing password protection

If you know the password

Open PDF with password
Remove security (Acrobat: Protect → Remove Security)
Save unprotected PDF

Command line

bash

# Remove password with qpdf
qpdf --password=secret --decrypt input.pdf output.pdf

If you forgot the password

Open password: Very difficult to recover (brute force)
Owner password: Can be removed with free tools (qpdf, PDFCrack)
Prevention: Always store passwords in a password manager

Password recovery tools

PDFCrack: Open-source password cracker
Elcomsoft: Commercial recovery tools
John the Ripper: Password cracking (with PDF plugin)

Note: These tools are for recovering YOUR OWN passwords, not for unauthorized access.[3]

Frequently Asked Questions (FAQ)

How do I password-protect a PDF?

Use MintSaaS PDF tools, Adobe Acrobat (Protect → Encrypt), or free tools (Smallpdf, ILovePDF). Set an open password and/or permissions password, then save.[3]

What's the difference between open password and permissions password?

Open password: required to view the PDF (encrypts document). Permissions password: required to change security settings (restricts printing, copying, editing). Use both for maximum protection.[3]

Is PDF password protection secure?

Moderately. AES 256-bit encryption is strong, but password protection can be bypassed if the password is weak. Permissions (restrictions) can be removed with free tools. For truly sensitive data, use DRM or dedicated encryption.[3][4]

Can I remove a password from a PDF?

Yes, if you know the password: open the PDF, remove security settings, save. If you forgot the owner password, tools like qpdf can remove it. If you forgot the open password, recovery is very difficult.[3]

What encryption should I use?

AES 256-bit (PDF 1.7+). It's the strongest option available in PDF. Ensure recipients have compatible readers (Adobe Acrobat X+, most modern readers).[3]

Can password-protected PDFs be opened on mobile?

Yes, most mobile PDF readers (Adobe Reader, Apple Books, Google Drive) support password-protected PDFs. Enter the password when prompted.[3]

How do I share a password-protected PDF securely?

Share the PDF and password through separate channels. E.g., send PDF via email, password via SMS or phone call. Never include the password in the same message as the PDF.[3][4]

What is DRM for PDFs?

DRM (Digital Rights Management) provides stronger protection than passwords: prevents screen capture, printing, copying, and can revoke access remotely. Used for highly sensitive documents. Options: Adobe LiveCycle, LockLizard, Vitrium.[3]

Sources

[1] Adobe — Protect PDF: https://www.adobe.com/acrobat/how-to/protect-pdf.html

[2] qpdf — Encryption: https://qpdf.readthedocs.io/en/stable/cli.html#encryption-options

[3] MintSaaS Image Compressor: https://www.mintsaas.net/products/image-compressor

[4] Web.dev — Core Web Vitals: https://web.dev/vitals/

[5] MintSaaS PDF Compressor: https://www.mintsaas.net/products/pdf-compressor

Free tools on MintSaaS

Try our free tools to put this guide into practice: