PDFs often contain information you would not want a stranger to see: salary slips, bank statements, Form 16, medical reports, copies of Aadhaar or PAN cards, and business quotations. Email gets forwarded, WhatsApp chats get backed up and laptops get lost. Adding a password to a PDF is a simple step that keeps the content unreadable to anyone who does not know the password. This guide explains how to lock a PDF, how to choose and share the password safely, and what PDF protection does and does not do.
How PDF password protection works
When you protect a PDF with an open password (also called a user password), the content of the file is encrypted. Without the password, a PDF reader cannot display the pages. Ocr4you's Protect PDF tool uses AES-256 encryption, the strongest standard supported by PDF readers, and it runs entirely in your browser, so the unprotected file never leaves your device.
PDFs can also have an owner password or permission settings that ask readers to block printing or copying. Those restrictions depend on the reader software respecting them and are easy to bypass, so treat the open password as the real protection.
Step-by-step: add a password
- Open Protect PDF on your phone or computer.
- Select the PDF you want to protect.
- Type a password, and type it again to confirm.
- Click Protect and download the encrypted file.
- Test it: open the downloaded PDF. Your reader should ask for the password before showing anything.
Keep your original, unprotected file in a safe place, or delete it if you only need the protected copy.
Choosing a good password
Encryption is only as strong as the password. AES-256 cannot practically be broken, but a short or predictable password can be guessed by trying common choices.
- Use at least 12 characters. Longer is better.
- A passphrase of several random words, like mango-river-pencil-74, is strong and easy to type.
- Avoid your name, date of birth, phone number or vehicle number, which are exactly what someone would try first.
- Use a different password for different recipients if the documents are unrelated.
- Need ideas? Password Generator creates random passwords in your browser.
Banks in India often protect statements with a predictable pattern, such as the first letters of your name plus your date of birth. That is convenient, but it is weak protection; if you forward such files, consider protecting them again with a stronger password.
Sharing the password safely
The most common mistake is sending the password in the same email as the file. If that email is forwarded or the account is compromised, the protection is useless. Instead:
- Send the file by email and the password by SMS, a phone call or a different messaging app.
- Agree on a password in person for recurring documents, for example with your accountant.
- Never post the password in the same WhatsApp group where the file is shared.
Removing the password later
If you know the password and want an unprotected copy, for example to upload to a portal that cannot open encrypted files, use Unlock PDF. Enter the password and download a normal PDF. The tool is meant for files you are authorised to open; it does not crack unknown passwords, and you should not try to open documents that are not yours.
When to protect, and when not to
| Protect it | Do not protect it |
|---|---|
| Salary slips, Form 16 and ITR copies sent to a CA or lender | Files you upload to government or exam portals (they usually reject encrypted PDFs) |
| Bank statements, KYC copies, medical reports | Public brochures, menus, price lists |
| Business quotations, contracts and HR files | Documents that others must merge, compress or edit |
Other ways to protect sensitive content
- Redact before sharing. If the recipient does not need certain details, such as your full Aadhaar number, black them out permanently with Redact PDF. Drawing a black box in a normal editor often leaves the text underneath.
- Send only the needed pages. Use Extract PDF Pages rather than sending a full statement. See our splitting guide.
- Remove metadata. PDFs can contain the author's name and software details; edit or clear them with PDF Metadata Editor.
Common questions
Will the recipient need special software?
No. Every common PDF reader, including Chrome, Edge, Adobe Acrobat Reader and the built-in readers on Android and iPhone, can open AES-256 protected PDFs after the password is entered.
I forgot the password
Strong encryption means there is no back door. Keep the original file or store passwords in a password manager.
Does protection stop screenshots?
No. Anyone who can open the file can photograph or screenshot it. Protection stops people who do not have the password, not people you have shared it with.
Signing before you lock the file? Read how to sign a PDF online.
Try it now: Protect PDF is free to start and works on mobile and desktop.
Open Protect PDF