# How to password protect a PDF for free: open password against permissions, and what to do if you forget it

> Bank statements, Aadhaar copies, resumes and rent agreements all travel by email and WhatsApp. Here is how to put a real lock on a PDF in a minute, what each setting does, how to pick a password that holds, and the honest answer to “can I get it back?”

Published 2026-10-23 by Toolcloak. 7 minute read. Original: https://toolcloak.com/articles/how-to-password-protect-a-pdf-free-aes-256-open-password-against-permissions-and-what-to-do-if-you-forget-it
Related free tool: [Protect PDF (Add Password)](https://toolcloak.com/tools/protect-pdf)

You are about to send a PDF that has your PAN, your salary, your address or your child’s marksheet in it. Email can be forwarded, WhatsApp chats get backed up, and a shared drive link can travel further than you meant. A password on the file itself is the one protection that goes wherever the file goes. It takes about a minute, and you do not need to install anything.

> **In short**
> - The [Protect PDF](https://toolcloak.com/tools/protect-pdf) tool adds a password that is asked **before the file opens**, using AES-256 encryption.
> - You can also switch **printing, copying text and editing** on or off, and set a separate owner password for those limits.
> - The file is locked **inside your browser**. It is not uploaded, which means nobody, including us, can reset the password for you.
> - A long password made of **random words** beats a short one full of symbols.
> - Send the password by a **different route** from the file. A password pasted under the file in the same chat protects nothing.

## Two different things people call “a PDF password”

Before you press any button, it helps to know that a PDF can carry two separate kinds of lock. The tool handles both, but they behave very differently.

| Lock | What it does | How strong it is |
| --- | --- | --- |
| **Open password** (user password) | The file asks for it before showing a single line. Without it the content stays scrambled. | Strong. This is real encryption. |
| **Permissions** (owner password) | Allows or blocks printing, copying text and editing. | A polite request. Most software follows it, but the text is not hidden. |

*If privacy is your goal, the open password is the one that matters. Permissions are for “please do not edit my brochure”, not for secrets.*

**What each lock can and cannot do**

| Open password | Permissions only |
| --- | --- |
| Hides the content | Sets the rules |
| Needed to read the file at all | The file opens for everyone |
| Uses AES-256 encryption | Print, copy and edit can be switched off |
| Useless to anyone without the password | Tools exist that ignore or remove these limits |

*The tool above asks you for an open password every time, so every file it makes gets the strong kind of lock. The three switches sit on top of that.*

You can see the same split from the other side in our guide on [removing a password from a PDF](https://toolcloak.com/articles/how-to-remove-a-password-from-a-pdf-when-you-know-it-and-what-to-do-when-you-do-not). A file that only blocks printing needs no password to open, while a file that asks for one at the start really is locked.

## How to password protect a PDF, step by step

1. Open the [Protect PDF](https://toolcloak.com/tools/protect-pdf) tool.
2. Choose your PDF, or drop it onto the box.
3. Type the password you want in **Password to open the PDF**, and type it again in the next box. The tool refuses to go on if the two do not match, which saves you from locking a file with a typo.
4. Leave the three switches as they are, or change them (see the next section).
5. Press **Protect PDF** and download the result. It is saved with “-protected” added to the name, so your original file stays untouched.

Try it: [Protect PDF (Add Password)](https://toolcloak.com/tools/protect-pdf). Choose a PDF, type the password twice, and press Protect PDF.

**What happens to your file**

1. **It opens on your device.** The PDF is read **inside the browser**. Nothing is sent to a server.
2. **The password becomes a key.** Your password is used to scramble the pages with **AES-256**.
3. **A new copy is built.** The locked file is a fresh PDF named like `statement-protected.pdf`.
4. **You download it.** Your original is unchanged, so keep it somewhere safe or delete it deliberately.

*Because the work happens on your device, there is no copy of your password or your file anywhere else.*

## The three switches: print, copy, edit

Under the passwords you will find three toggles. Here is what each one means in everyday terms, and what the tool starts with.

| Switch | Starts as | Turn it off when |
| --- | --- | --- |
| Allow printing | On | You want people to read the file but not to make paper copies, for example a draft agreement |
| Allow copying text | On | You do not want paragraphs pasted into other documents |
| Allow editing | **Off** | Leave it off in almost every case. It stops casual changes to amounts, names or dates |

There is also an optional **owner password**. The tool describes it as being needed only to change the limits. In plain words: the open password lets someone read the file, while the owner password is the one that would let you change the print, copy and edit rules later in a PDF editor. If you leave it empty, that is fine for most everyday files.

> **Do not rely on the switches for secrecy:** Anyone who can open the file can read it, and a determined person can often get around the print and copy limits. If the content is private, the open password is your real protection, and the switches are an extra.

## How to choose a password that actually holds

The lock is only as good as the password. Strong encryption cannot help if the password is your date of birth or your phone number, because those are the first things anybody tries.

- **Length beats cleverness.** A long phrase is harder to guess than a short word with a symbol. Our guide on [why length beats symbols](https://toolcloak.com/articles/password-entropy-bits-guesses-and-why-length-beats-symbols) shows the numbers.
- **Avoid anything about you.** Names, birthdays, vehicle numbers, mobile numbers and “Welcome@123” are all bad.
- **Do not reuse** your email or banking password. A file password gets shared with other people, so it should be a one-off.
- **Use random words** if you want something you can say over the phone, such as four or five unrelated words.

**Strength of a random word password (bits of entropy, from a 7,776-word list)**

|  | Value |
| --- | --- |
| 3 words | 38.8 |
| 4 words | 51.7 |
| 5 words | 64.6 |
| 6 words | 77.5 |
| 7 words | 90.5 |

*Each extra random word adds about 12.9 bits, which multiplies the guessing work by roughly 7,800. The words must be picked at random, not chosen because they feel meaningful.*

The [Password Generator](https://toolcloak.com/tools/password-generator) can make a random one for you, and the [Passphrase Generator](https://toolcloak.com/tools/passphrase-generator) makes the word kind. To judge a password you already have, use the [Password Entropy Calculator](https://toolcloak.com/tools/password-entropy-calculator). For more on how these generators work, read [why your password is not weak because it is short](https://toolcloak.com/articles/your-password-is-not-weak-because-it-is-short).

## How to share the file and the password safely

Locking the file is half the job. The other half is the way the password reaches the other person.

**Pick by your situation**

| Box | What it means |
| --- | --- |
| To one known person | Send the file by email. Give the password by phone call or a different app. |
| To an office or bank | Agree a password pattern in advance, then use a new one for each file. |
| To keep for yourself | Use a long phrase and store it in a password manager, not in the file name. |
| To a group | Prefer a share link with its own access control. One password for many people leaks quickly. |

*The common mistake is writing the password in the same email or chat as the file. Anyone who sees one sees both.*

- **Never put the password in the file name**, for example “resume-pass1234.pdf”.
- **Avoid sending it under the file**, in the same thread.
- **Tell the person what it is for**, so they do not ignore it as a phishing message.
- **Change it for each recipient** if the files matter.

## What to protect, and what to do first

Anything with identity, money or health details is worth locking before it leaves your hands.

- **Bank and card statements**, salary slips and tax papers. Our [Salary Slip guide](https://toolcloak.com/articles/salary-slip-format-in-india-what-a-payslip-must-show-how-net-pay-is-worked-out-and-how-to-make-a-pdf-for-free) shows what such a document holds.
- **ID copies** such as Aadhaar, PAN and passport. If you can, write the purpose on the copy as well, or hide digits before sharing.
- **Resumes** with a phone number and home address that go to many recruiters.
- **Rent agreements and medical reports.**

Do your editing first, because most steps get harder once a lock is on. [Merge several PDFs](https://toolcloak.com/articles/merging-pdfs-without-posting-your-documents-to-a-stranger), [split out the pages you need](https://toolcloak.com/articles/how-to-split-a-pdf-into-single-pages-or-equal-parts-and-pull-out-only-the-pages-you-need), [delete the pages you do not want to share](https://toolcloak.com/articles/how-to-delete-pages-from-a-pdf-free-remove-one-page-a-range-or-several-and-keep-the-original-safe) and [compress the file to fit an upload limit](https://toolcloak.com/articles/how-to-compress-a-pdf-why-files-are-so-big-and-how-to-get-under-an-upload-limit). Add your [signature](https://toolcloak.com/articles/how-to-sign-a-pdf-online-free-draw-or-type-your-signature-on-phone-or-laptop-and-when-it-is-legally-enough) before you lock it, not after. Protect the file as the very last step.

## What if you forget the password

This is the part to read before you lock anything you cannot recreate. The password is turned into the key that scrambles the file, and the tool works on your device without keeping a copy. So there is nothing to reset, and nobody can look it up for you.

> **There is no “forgot password” button:** If you lose the password, the content stays scrambled. Keep your original, unlocked file in a safe place until you are sure the locked copy opens, and store the password in a password manager.

Be wary of sites that promise to “crack any PDF password instantly”. A strong password cannot be removed on request, and a weak one can be guessed. That is exactly why a long, random password is worth the few seconds it takes.

## Check that the lock works

1. Open the new “-protected” file on your phone or in a browser. It should ask for the password at once.
2. Type the password. Check that the pages look the same as the original.
3. If you switched printing off, try the print option to confirm it is greyed out.
4. Only then delete or move away the unlocked original if you no longer need it.

Later, if you want the lock off, the [Unlock PDF](https://toolcloak.com/tools/unlock-pdf) tool does that when you know the password. Private by design is the point of both tools.

## Frequently asked questions

### How do I password protect a PDF for free?

Open the Protect PDF tool, choose your file, type the password twice, and press Protect PDF. Download the new file, which asks for the password before it opens. It is saved with “-protected” in the name and your original is not changed.

### pdf par password kaise lagaye?

Protect PDF tool kholiye, apni PDF file chuniye, password do baar likhiye aur Protect PDF dabaiye. Naya file download hoga jo kholne se pehle password maangega. Password ko file ke saath ek hi chat mein mat bhejiye.

### Is the password protection strong?

The tool uses AES-256 encryption, which is a strong standard. How safe the file really is depends on your password, so a long phrase of random words is much better than a short or personal one.

### Is it safe to protect a PDF online?

It is safest when the file never leaves your device. The Protect PDF tool works inside your browser, so your file and your password are not uploaded anywhere.

### Can I recover a PDF password if I forget it?

No. The password is the key to the file and the tool does not keep a copy, so nobody can reset it for you. Keep your unlocked original safe and store the password in a password manager.

### What is the owner password?

It is an optional second password that controls the print, copy and edit limits. The open password lets people read the file. The owner password is what you would use in a PDF editor to change those limits later.

### Can I stop people from printing or copying my PDF?

You can switch printing and copying off in the tool, and most programs will follow that. But these limits are weaker than the open password, so do not rely on them to protect secret content.

### How do I send a protected PDF safely?

Send the file in one place and the password in another, such as email for the file and a phone call or a different app for the password. Never write the password in the file name or under the file in the same chat.