How to password-protect a PDF before sending it

2026-07-13

Email is not a private channel — a message can sit forwarded in someone's inbox, synced to a phone, or backed up in ways you don't control, for years. If a PDF has anything sensitive in it (a signed contract, a payslip, medical results, financial statements), adding a password is a cheap, one-time step that means the file is useless to anyone who doesn't have the password, even if it ends up somewhere it shouldn't.

Adding a password

Our Protect PDF tool encrypts your file with 256-bit AES — the same encryption standard used by professional PDF software, not some lightweight "lock" that any PDF reader ignores. Upload the file, choose the password you want required to open it, and download the encrypted copy. There's no separate "owner" password to manage in this MVP — one password controls opening the file, which covers the overwhelmingly common case of just wanting the contents kept private.

How to share the password safely

Protecting the PDF only works if the password doesn't travel the same easy-to-intercept path as the file. Don't put the password in the same email as the attachment — send it through a different channel: a text message, a phone call, or a messaging app. For a recurring recipient (like an accountant you send payslips to every month), agree on a password scheme once rather than reinventing it each time.

Removing the password later

Once the file has reached its destination safely, or if you're archiving it somewhere already secure, you might want to remove the password so it's easier to open without re-typing it every time. Our Unlock PDF tool does exactly that — enter the current password once, and it gives you back an unlocked copy. It only removes protection when you supply the correct password; it doesn't attempt to crack or guess passwords on files you don't have legitimate access to, and it's only legal to use on your own files or ones you have rightful access to.

A password you set is a password only you control

We don't store the password anywhere — it's used only in memory to encrypt or decrypt the specific file for that one job, then discarded. That also means if you forget the password you set, there's no way for us to recover it, so keep it somewhere safe (a password manager, not a sticky note) before you send the file off.