Filery

Password-Protect PDF

Lock a PDF with AES-256 encryption and control permission flags.

Choose PDF file or drop it anywhere on this page PDF Processed on your device — never uploaded

How to password-protect pdf

  1. Open a PDF.
  2. Set a user password if you need to prevent casual opening, and an owner password to enforce permission flags.
  3. Choose what recipients may do with the document, then protect and download.

About this tool

PDF passwords do two different things that are easy to confuse. A user password is genuine encryption: without it, the file is ciphertext and no viewer can display it. An owner password is more like a set of preferences: it tells compliant PDF viewers not to print or copy, but it does not encrypt the content, so non-compliant tools simply ignore the flags.

For a document that genuinely must not be read by unauthorised people, set a strong user password. For a document where you want to suggest restrictions to ordinary users in normal viewers, set permission flags with an owner password. Understanding the distinction avoids false confidence in protection that looks more robust than it is.

Encryption and password entry happen locally in your browser. A password you type here is not logged or transmitted.

Questions

What is the difference between the user and owner passwords?
The user password gates access — without it, the PDF will not open. The owner password controls permissions — printing, copying, modifying. Setting only an owner password with no user password means anyone can open the file, but the viewer enforces the permission flags. The practical problem: compliant readers enforce those flags, but a non-compliant tool ignores them. An owner password without a user password is not a security boundary; it is a polite request.
Is AES-256 actually strong?
Yes, for the user password: a file encrypted with a strong user password and AES-256 (PDF 1.7, revision 6) cannot be read without the password. The owner-password-only permissions model is weaker, as explained above.
Are my passwords safe? Is anything sent to a server?
Nothing is sent anywhere. The encryption runs in your browser using qpdf compiled to WebAssembly. The passwords you type never leave your device.