How to password-protect a PDF (and choose the right restrictions)

Payslips, bank statements, medical records, contracts, ID documents: some documents should never travel unprotected. An email can be forwarded by mistake, an attachment can sit in an inbox for years, a USB stick can get lost. Protecting a PDF with a password ensures that only people who know the password can open it.

This guide explains how PDF protection works, how to apply it online, which restrictions to choose and how to share the password safely.

What password protection does

A protected PDF is encrypted: its content is unreadable without the password. PDFtoWorld uses AES-256 encryption, the algorithm recommended by the current PDF standard. When opening the file, any PDF reader (Acrobat, Preview on Mac, browsers, mobile apps) asks for the password.

On top of the open password, a PDF can carry usage restrictions: blocking printing, text copying or editing.

Protect a PDF, step by step

1. Open Protect PDF and drop your document.
2. Enter the Password, then type it again in Confirm password.
3. Choose the restrictions:
   • Allow printing: tick it if the recipient needs to print;
   • Allow copying text: tick it if they need to copy passages.
4. Click Download to get a file with a "-protected" suffix.

Editing the document and adding annotations are blocked in the protected file; filling in forms and accessibility (screen readers) remain allowed. PDF protection is a Premium tool.

Choosing a good password

Strong encryption is useless if the password can be guessed. A few rules:

• At least 12 characters, ideally a passphrase of several words ("bike-orange-monday-rain").
• No personal information: date of birth, name, phone number, company name.
• A different password for each sensitive file, so one discovered password does not open all your documents.
• Store it in a password manager: there is no way to recover a forgotten password, neither for you nor for us.

Sharing the password without compromising it

The classic mistake: sending the protected PDF and its password in the same email. If the email is intercepted or forwarded, the protection is worthless. Prefer:

• another channel: text message, phone call, encrypted messaging;
• a password agreed in advance with the recipient;
• at the very least, two separate emails.

What restrictions protect (and what they don't)

Printing and copying restrictions are honoured by mainstream PDF readers, but they are not an absolute barrier: anyone who can open and view the document can still photograph it or take a screenshot. They prevent accidental or casual use, not a determined copy.

The open password is the real protection: without it, the content stays encrypted.

When to protect a PDF

Document	Suggested protection
Payslip, tax return	Open password
Contract under negotiation	Password + copying blocked
Confidential read-only document	Password + printing and copying blocked
Form to be filled in by the recipient	Password (form filling still works)

Removing the protection later

To remove the password from a PDF you own and whose password you know, use Unlock PDF.

Frequently asked questions

Which encryption is used?

AES-256, the encryption recommended by the current PDF standard (ISO 32000-2).

What if I forget the password?

The document can no longer be opened. No service can recover a forgotten AES-256 password: keep it in a password manager.

Does the recipient need special software?

No, every recent PDF reader can open a protected PDF: they just enter the password.

Can I protect a PDF that is already protected?

Open it first with its current password (you will be asked for it), then apply the new protection.

Should I compress before or after protecting?

Before. Compress, merge and sign first with Compress PDF or Merge PDF, then protect the final file.