PDF passwords are a common feature that people use in very different ways, some add them to every document they share, others have never thought about them, and many have PDFs they would like to either lock or unlock but are not sure how. This guide covers what PDF encryption actually does, how to add or remove passwords, and the realistic limits of what a password achieves.
Two types of PDF password
PDFs support two distinct password mechanisms, and understanding the difference saves confusion.
An open password (sometimes called a user password) prevents the file from being opened at all without the correct password. The reader must enter it before seeing any content. This is the type most people think of when they hear "password-protected PDF."
A permissions password (sometimes called an owner password) allows the file to be opened freely but restricts what can be done with it, printing, copying text, editing, or form filling may be individually disabled. A document protected only with a permissions password can be opened without a password but certain actions are locked.
Most everyday use cases require only an open password. Permissions passwords are mainly relevant for organisations that need to distribute PDFs widely while preventing modification or extraction of content.
How to add a password to a PDF
PDFWhisk's protect tool adds an open password to any PDF entirely in your browser. Load the file, enter the password you want to use, and download the encrypted copy. The original file is unchanged. Because the encryption happens locally, neither the document nor the password is transmitted to any server.
The same result can be achieved in Adobe Acrobat (File → Properties → Security), or in LibreOffice by exporting to PDF and enabling encryption in the export dialog. macOS Preview does not support adding passwords to PDFs in any straightforward way without third-party tools.
Choosing a password that is worth having
PDF encryption is only as strong as the password itself. A short or predictable password offers minimal protection against anyone who wants to open the file. For genuine security, use at least 12 characters mixing letters, numbers, and symbols. Avoid the obvious choices: dates, names, addresses, or any word that appears in the document itself.
If you are sharing a protected PDF with someone, send the password through a different channel than the file. Emailing both in the same message means anyone who intercepts the email gets both keys. A phone call or a message through a separate app is the standard approach for anything genuinely sensitive.
How to remove a password from a PDF
PDFWhisk's unlock tool removes the password from a PDF you have access to. You need to know the current password, the tool uses it to decrypt the file, then produces an unlocked copy. This is useful for PDFs you protect for distribution but want to work with internally without the friction of repeated password prompts.
You can also unlock a PDF on a Mac by opening it in Preview, entering the password when prompted, and then exporting as PDF without the encryption option, though Preview does not always offer a clean way to strip passwords depending on the version of macOS.
What PDF passwords protect against
An open password protects against anyone who stumbles across the file and tries to open it casually. If an email is intercepted, a laptop is stolen, or a file is accessed from a shared folder, the password prevents immediate access to the content.
What it does not protect against: a determined attacker with the right tools and time, anyone you share the password with then deciding to share the file onward, or someone with PDF editing software who extracts the content page by page through less direct means.
For everyday use, sending a payslip, a draft contract, or a personal document over email, a strong password provides meaningful and practical protection. For genuinely high-value secrets, the right approach involves additional controls at the platform level, not just the file level.
PDF passwords and printed copies
A password only protects the digital file. If someone with access to the password prints the PDF, the printed copy has no protection. For confidential documents, this is worth thinking about when deciding who to share the password with, particularly if the document will be printed for meetings or external distribution.
When to use a watermark instead of a password
Passwords control who can open a document. Watermarks mark who received it. For documents you need to distribute widely but want to trace, a personalised watermark ("Prepared for: John Smith, May 2026") is often more practical than a shared password that every recipient has to enter. Adding a watermark and keeping access open, while distributing to a controlled list, achieves tracking without the friction of password management.
For highly confidential documents, combining both, a password and a recipient-specific watermark, gives you both access control and traceability.