Confidential business files
Add an opening password before sending internal reports, invoices or commercial documents outside the team.
PDF Tools
Protect PDF with Password Online
Add a password to an unprotected PDF, choose common PDF permissions and verify the encrypted result before downloading it. Processing is designed to happen in your browser.
Protect PDF with a password
Add AES-256 encryption in your browser, choose whether users may print, copy or modify the PDF, then verify the protected file before downloading it.
Choose PDF
Maximum 25 MB · up to 100 pages
Security notes
- The protected PDF is newly encrypted in your browser; your password is not intentionally sent to FormatForge.
- Keep a safe original copy. Losing the password can make the protected PDF inaccessible.
- PDF permission flags such as “no copying” are advisory and depend on the PDF reader honoring them.
- Digital signatures may no longer validate after modifying or re-encrypting a signed PDF. Do not protect a signed document unless that consequence is acceptable.
PDF authority guide
A practical guide to password-protecting PDF files
Protect PDF adds password-based encryption to an unprotected PDF when a document must be shared with an additional access barrier. Choose a strong open password, decide which reader permissions are appropriate, create the encrypted copy, and then verify the downloaded file with both a wrong and correct password before sending it to another person.
How to use this tool
- 1
Upload an unprotected PDF and review the document inspection results.
- 2
Choose and confirm a strong password that recipients will need to open the PDF.
- 3
Review printing, copying, editing, annotation and form permissions.
- 4
Create the AES-256 encrypted PDF and verify the downloaded file before sharing.
Real-world value
When this PDF tool is useful
Client document delivery
Protect a PDF that contains customer-specific information before transmitting it through an approved channel.
Archived document copies
Create a password-protected distribution copy while retaining the original master in secure storage.
Controlled document sharing
Set common reader permissions for printing, copying, editing or form use when the recipient's PDF application supports them.
Avoid these issues
Common mistakes
- !Using a short or easily guessed password
- !Sending the password in the same message or channel as the protected PDF
- !Assuming PDF permission flags are equivalent to strong digital-rights management
- !Re-encrypting a digitally signed PDF without checking whether the signature will remain valid
Better results
Professional tips
- ✓Use a unique password of at least 12 characters when the document is sensitive
- ✓Send the PDF and password through separate approved communication channels
- ✓Keep the original unprotected master in an appropriately secured location
- ✓Open the downloaded result in a second PDF reader and test both the password and important interactive content
Engineer's checklist
Prepare, process and verify
Before processing
- •Use the final approved PDF because later editing or re-encryption can invalidate digital signatures and change document bytes.
- •Confirm the PDF is not already encrypted and keep an untouched master copy in secure storage.
- •Choose a unique password and decide how it will be communicated to the recipient through a separate approved channel.
After download
- •Open the downloaded PDF without a password and confirm that access is refused.
- •Open it again with the correct password and verify the first page, final page and page count.
- •Test searchable text, links, forms and the selected print/copy permissions in a conforming PDF reader when those features matter.
Technical considerations
- •AES-256 encryption protects access to the PDF, while individual permission flags such as copying or printing are reader-enforced policy controls.
- •Re-encrypting or modifying a digitally signed PDF changes document bytes and can invalidate the existing signature.
- •A protected PDF can still be disclosed by an authorised recipient through screenshots, printing or other capture methods; encryption does not replace information-governance policy.
Troubleshooting
What to check when processing fails
The PDF is already protected
Use an authorised unlock/decryption workflow first when you know the existing password, then apply the new protection to the resulting source.
The password is rejected
Confirm that the same password was entered in both fields and avoid accidental spaces or keyboard-layout differences.
A permission is not enforced
PDF permission flags depend on the reader application. Test the document in a conforming desktop PDF reader and do not treat permission flags as DRM.
PDF architecture
Understand what changes inside a PDF workflow
A PDF page can combine selectable text, embedded fonts, vector paths, bitmap images, annotations, links and form controls. A PDF utility may preserve those objects, rearrange them, compress their resources or render the page into pixels. Knowing which operation is taking place helps you choose the right tool and verify the result correctly.
Page objects
Text, vectors, images and annotations can remain separate objects until a page is rasterised.
Fonts and text layers
Selectable text depends on embedded fonts, character maps and the original document structure.
Resolution
When a page becomes an image, DPI or render scale controls how much detail is available for small text and diagrams.
Document security
Encryption, permissions and digital signatures can restrict processing or become invalid after modification.
What the operation can change
- Page reordering and merging usually preserve the original page objects.
- Compression may resample images or remove redundant resources.
- Image conversion flattens text, links, forms and vectors into pixels.
- Editing a signed PDF can invalidate its digital signature.
Domain-specific verification
- Check page count, order, orientation and page dimensions.
- Zoom into small text, signatures, tables and engineering lines.
- Confirm whether search, links, forms and bookmarks still work when required.
- Keep the original document when legal, archival or print fidelity matters.
Continue your workflow
Related PDF actions
Step 1
Review PDF metadata →
Check whether sensitive author or software information should be removed before sharing.
Step 2Watermark PDF →
Add visible document status or recipient wording before protection.
Step 3Compress PDF →
Optimise the document before applying the final password protection.
Step 4Unlock PDF →
Work with an authorised protected source when the known password is available.
Questions answered
Frequently asked questions
Does Protect PDF really encrypt the PDF?+
Yes. The Protect PDF workflow applies AES-256 PDF encryption and verifies that the generated file requires the selected open password before it is offered for download.
What is the difference between the open password and owner password?+
The open password is required to open the PDF. An owner or permissions password is used for document permission settings. For many workflows, one strong open password is sufficient.
Can I restrict printing, copying or editing?+
The tool can store PDF permission flags for these actions. Conforming PDF readers generally honour them, but they should not be treated as an unbreakable access-control system.
Will searchable text, links and forms remain?+
The tool encrypts the PDF structure instead of converting pages to images, so these features are intended to remain. Always verify important links, forms and text in the downloaded file.
Can I protect an already encrypted PDF?+
Use an unprotected source PDF. If you are authorised and know the existing password, unlock or decrypt it with an appropriate workflow before applying new protection.
What happens if I forget the password?+
FormatForge does not recover forgotten PDF passwords. Keep the original master and store the password using your organisation's approved password-management process.
Do I need to install any software?+
No. The tool runs in a modern web browser, so there is no desktop application to install.
Does it work on mobile devices?+
Yes, although large documents are usually faster to process on a desktop or laptop with more available memory.
Will the original PDF be changed?+
No. Your original file remains unchanged. The tool creates a new output file for you to download.
Why can a large PDF take longer?+
PDF processing uses your device memory and processor. Scanned, image-heavy and very long documents naturally require more work.
Can password-protected PDFs be processed?+
A locked PDF may need to be unlocked with the correct password before browser-based processing can read or modify it.
Which browsers are supported?+
Current versions of Chrome, Edge, Firefox and Safari provide the best experience.
Explore the complete PDF toolkit
Use FormatForge PDF tools together to organise, clean, convert and optimise documents without installing specialist desktop software.
Privacy and File Handling
The PDF encryption workflow is designed to run in your browser. The document and password are not intentionally uploaded to FormatForge as part of normal protection processing.
For confidential, regulated or legally sensitive documents, follow your organisation's security policy and avoid processing files on shared devices.
Verify the Result Before Sharing
- Try opening the downloaded PDF without a password and confirm that the reader requests one.
- Open it with the correct password and verify the first page, final page and page count.
- Check searchable text, links, forms and selected permissions in the PDF reader your recipient is likely to use.
Browser and PDF Limitations
- PDF permission flags such as no-copy or no-print depend on the reader application honouring them and are not equivalent to DRM.
- Encrypting or otherwise modifying a digitally signed PDF can invalidate the source signature.
- Losing the password can make the protected copy inaccessible; keep the original master and manage passwords appropriately.
Troubleshooting
The source PDF is already password protected
Use an authorised unlock workflow first if you know the current password, then protect the resulting unencrypted source.
The output does not ask for a password
Do not share it. Start again and confirm that the post-encryption verification reports password protection as successful.
Printing or copying is still possible
Test the file in a conforming PDF reader. Permission flags are reader-dependent and should not be treated as strong access control.