Password protect a PDF before you send it

Protect PDF sets two separate things, and people often conflate them. The open password is real encryption. Without it, the pages, text and images in the file are unreadable to anyone, including the PDF viewer. This is the part that keeps a stolen or misdirected attachment private.

The four checkboxes under What readers may do are permissions. They are flags stored inside the file that tell viewer software what the document author would like to allow. Print the document and Copy text and images are checked by default; Change the content and Add comments and fill forms are not. Unchecking one does not add any encryption. It records a request.

The Owner password (optional) field ties the two together. Whoever opens the file with the owner password gets full rights regardless of the checkboxes. If you leave it blank, the tool uses your open password as the owner password too, so any viewer will hand full rights to anyone you gave the open password to.

If your goal is to stop the recipient printing or copying, uncheck Print the document and Copy text and images, and set a different Owner password that you keep to yourself, so the open password alone does not unlock full rights inside a viewer. Then understand the limits.

Most desktop and browser viewers respect the flags, so the print command is grayed out and text cannot be selected. Some viewers ignore them entirely. Nothing in the file can stop someone from taking a screenshot, photographing the screen, or retyping what they read. And the owner password is not the last word: any software that can decrypt the file can write it out again with no flags at all. Unlock PDF on this site does exactly that, and the password you gave the recipient to open the file is enough for it.

There is also a side effect worth knowing. Unchecking Copy text and images also clears the accessibility flag, so a viewer that enforces permissions will block screen readers from reading the text aloud. If any recipient relies on assistive technology, leave copying allowed.

Treat the restrictions as a polite fence, not a lock. The open password is the only part that protects the content from someone who should not have it.

The tool accepts any password of four characters or more, but four characters is a floor, not advice. AES-256 is only as strong as the password guarding it, and short passwords can be found by trying combinations. For a document you would be sorry to see leak, use a long passphrase.

Send the password by a different route than the file. If both travel in the same email, anyone who reads that email has both. A text message, a phone call, or a message in an app the recipient already uses all work.

Keep your original. The password never leaves your device, which is the point, but it also means nobody can reset it. If you lose it, the protected copy is closed for good. The output is a new file ending in -protected.pdf, and your unprotected original is untouched, so store that somewhere safe rather than deleting it.

AES-256 needs Acrobat or Adobe Reader 9 or later, and current browsers and up-to-date desktop viewers open these files as well. Very old or minimal viewers may not. If your recipient is on locked-down or older software, suggest they try opening it in a browser.

Two things sit outside the encryption. The file name is not encrypted, so do not put the secret in it. And a mail filter cannot read inside an encrypted PDF, which is why some corporate mail systems quarantine or reject encrypted attachments. If a recipient says the file never arrived, that is the first thing to ask about.

Finally, the password protects the file, not the relationship. Someone who has the password can open it, re-save it without one, and forward it. Encryption guards the copy in transit and at rest on a lost laptop; it is not a way to control what a trusted recipient does afterward.