How to Protect a PDF with a Password (Free)

Some documents should not be readable by anyone who happens to receive them in a forwarded email or stumbles across them on a shared drive. Contracts, payroll records, personal files, legal correspondence, and medical documents all belong to a category of things you want to share with a specific person — and only that person. Adding a password to a PDF is the simplest way to enforce that.

A password-protected PDF can still be shared by email, uploaded to a portal, or saved to cloud storage. Anyone who opens the file will be asked for the password before they can see anything. Without the correct password, the content is completely inaccessible. The process of adding that protection takes about 30 seconds and requires no software or account.

How to add a password to a PDF for free

Filero's Protect PDF tool lets you set a password on any PDF file instantly.

1. Open the Protect PDF tool.
2. Upload your PDF by clicking or dragging it onto the page.
3. Enter your chosen password in the password field.
4. Click Protect PDF.
5. Download your password-protected PDF.

Once protected, anyone who opens the PDF — on a computer, phone, or tablet, using any PDF reader — will be prompted to enter the password before the document opens. Without the correct password, the file's contents are completely inaccessible.

How to choose a strong password for your PDF

The protection is only as strong as the password you choose. A weak password can be guessed or brute-forced, which defeats the purpose entirely. Here is what actually makes a PDF password strong:

• Length matters most — aim for at least 12 characters. Every additional character multiplies the time required to crack the password exponentially.
• Mix character types — combine uppercase letters, lowercase letters, numbers, and symbols. A password like Rm7!kqP2vz#L is vastly harder to crack than password123.
• Avoid obvious choices — your name, the recipient's name, the company name, dates of birth, or the word "password" are all poor choices. These are the first things any brute-force attack tries.
• Do not reuse passwords — use a unique password for each sensitive document, especially when different recipients need access to different files.
• Use a password manager — tools like 1Password, Bitwarden (free and open-source), or the built-in password managers in Chrome and Safari can generate and store strong passwords for you. You do not need to memorise them — you just need to store them safely.

One final, crucial point: never include the password in the same email as the PDF. If that email is intercepted or forwarded, both the file and the key to open it are exposed. Send the password separately — via a text message, a phone call, or a different messaging app.

How to share a password-protected PDF safely

Adding a strong password is step one. How you share that password is equally important. The most common mistake is attaching the protected PDF to an email and typing the password in the same message body. That effectively negates the protection — if someone can read the email, they can open the file.

Instead, share the password through a different channel from the one you used to send the file. If you emailed the PDF, text the password to the recipient's phone. If you uploaded the file to a shared drive, call them with the password. Even a separate email containing only the password — with no attachment — is better than putting both in the same message. For particularly sensitive documents, consider using an encrypted messaging app like Signal to send the password.

Also avoid putting the password in the email subject line. Subject lines are often visible in notification previews and may be logged by email servers in ways that the message body is not.

How to remove a password from a PDF

If you know the password and want to remove the protection — for example, after a confidential review period has ended and you want to share the document more freely — use Filero's Unlock PDF tool. Upload the protected PDF, enter the current password, and download an unlocked version. This is also useful if you want to run a password-protected PDF through another tool, such as compressing it or merging it with another file.

PDF password protection vs encryption — what is the difference?

In practice, when you add a password to a PDF, you are also encrypting it — the two happen together. The PDF standard supports AES encryption: older PDF versions use 128-bit AES, while PDFs created with newer tools including Filero use 256-bit AES. AES-256 is the same encryption standard used to protect classified government data. Without the password, the encrypted content is computationally infeasible to read — the password is not just a gate, it is the key that makes the data readable at all.

It is worth knowing there are actually two types of PDF passwords: an "open password" that prevents anyone from opening the file at all, and a "permissions password" (sometimes called an owner password) that restricts actions like printing, copying text, or editing while still allowing the file to be opened and read. Filero sets an open password — the most restrictive type — meaning recipients must enter the password just to view the document.

Password protection vs other PDF security options

• Password protection — prevents anyone without the password from opening the file. Best for documents shared with a known recipient where you control access. Use Protect PDF for this.
• Watermark — does not restrict access but marks the document as confidential, draft, or proprietary. Anyone who receives the file can open it, but the watermark is visible on every page. Use Watermark PDF for this — it is a good complement to password protection, not a replacement for it.
• Digital signatures — these verify the identity of the signer and confirm the document has not been altered since signing. They are about authenticity rather than access control. Use Sign PDF if this is what you need.

For maximum security, you can combine all three: watermark the document, add a password, and sign it. That way the document is access-controlled, visibly marked, and verifiably authentic.

Frequently asked questions

What happens if I forget the password?

If you forget the password, you will not be able to open the PDF — and neither will anyone else. There is no recovery option, no "forgot password" link, and no backdoor. The encryption is genuine and complete. This is why it is essential to record the password somewhere safe — a password manager, a secure note, or a printed copy stored securely — before sending the protected file. If you lose the password to an important document, the only practical options are to locate the original unprotected file and re-protect it, or to try a password recovery tool (which only works for short, simple passwords).

Can the recipient open the PDF on any device?

Yes. Password-protected PDFs are part of the standard PDF specification and are supported by every PDF reader — Adobe Acrobat, Apple Preview, Google Chrome's built-in viewer, and mobile apps on iOS and Android. The recipient does not need any special software. They just open the file as they normally would and enter the password when prompted. It works exactly the same way on Mac, Windows, iPhone, and Android.

Is my file kept private?

Your file is processed on a secure server and deleted immediately after you download the protected version. The password you set is used only to encrypt the file during processing and is never stored, logged, or retained. Filero has no access to the contents of your protected PDF after the download link is generated.

Can I restrict editing or printing without requiring a password to open?

The Filero Protect PDF tool sets an open password, which requires a password to open the document at all. Restricting specific permissions — like printing or copying text — without a full open password requires a separate permissions password, which is a different feature. For most practical use cases, an open password is exactly what you need to prevent unauthorised access.

How strong is PDF password encryption?

PDF files protected with AES-256 encryption are extremely strong by any practical measure. Breaking the encryption without the password would require a brute-force attack that, even with significant computing resources, would take longer than the age of the universe to complete against a strong password. The weak point is always the password itself, not the encryption algorithm. A short, simple password can be guessed quickly; a long, random one cannot. Follow the password strength tips above and the protection is more than sufficient for any standard business or personal use.

Will a password-protected PDF open in every PDF reader?

Yes. AES-encrypted PDF passwords are a standard part of the PDF specification, so they are supported universally. Adobe Acrobat, Apple Preview, Microsoft Edge, Google Chrome, Foxit, PDF Expert on iOS, and every mainstream PDF reader will prompt for the password when the file is opened. There are no compatibility issues between different operating systems or devices — a PDF protected on a Windows machine opens correctly on an iPhone or an Android tablet, and vice versa.

Ready to try it?

Use Filero's free Protect PDF tool. No account needed, works on any device.

More guides