Password Protect PDF Online — AES-128 Encryption, Free

Why Controlling PDF Access Matters

A PDF without access controls is an open document. Once sent, anyone who receives it can open, copy, print, or modify the contents — regardless of your intent. Password protection changes this by requiring a credential to open the file, restricting what an authorized viewer can do with it, or both.

This matters for any document containing personal data, financial figures, proprietary content, or legally sensitive material. Whether you are emailing a contract to a client, sharing a report with a business partner, or storing employee records in a shared system, password protection ensures the document behaves the way you intend.

Beyond the open password, PDF encryption supports permission restrictions that operate independently. You can allow a recipient to read a document while preventing them from printing it, copying text from it, or making any modifications — without requiring them to enter a separate password to open it.

How to Password Protect a PDF

• Step 1: Upload your PDF — Drag and drop or select your document. Files up to 100 MB are supported.
• Step 2: Configure protection — Set an open password and choose which actions to restrict: printing, content copying, and document modification can each be toggled independently.
• Step 3: Download the protected PDF — Your encrypted file is ready to share securely. No account required.

Key Features

• Open password protection — require a password to view the document at all
• Granular permission controls — restrict printing, text copying, and modification independently
• AES-128 encryption — file contents are encrypted, not just locked behind a UI prompt
• No sign-up required — protect and download in seconds without creating an account
• No watermarks — the protected output is unmodified beyond the encryption layer
• 100 MB file support — suitable for large documents and presentations
• Password never stored — credentials are not logged or retained after the session ends

Understanding PDF Password Types

PDF encryption uses two distinct password mechanisms, and the difference determines which one your use case requires.

The open password (also called the user password) controls access to the document entirely. A recipient without this password cannot open the file in any PDF viewer. This is the right choice for confidential documents shared externally, where unauthorized access is the primary risk.

The permissions password (also called the owner password) controls what an authorized viewer can do after the document is open. You can allow the file to be opened without any password while still preventing printing, copying, or editing. This is useful for distributing read-only materials — training documents, proprietary reports, or published content — where broad access is acceptable but manipulation is not.

Both passwords can be set simultaneously: one to gate access, the other to enforce what recipients can do with the content once inside.

Use Cases

• Protect financial reports and budgets before emailing to external stakeholders
• Encrypt NDAs and contracts sent to parties outside your organization
• Lock HR documents — payslips, performance reviews, and employee records
• Prevent copying of proprietary training materials or procedure manuals
• Secure personal identity documents before uploading to cloud storage
• Restrict printing of confidential proposals or client presentations

Frequently Asked Questions

What encryption standard is used? The tool applies AES-128 encryption. The password is required to decrypt the file contents — it is not a surface-level access lock that can be bypassed without the credential in a standard PDF viewer.

Can the password be removed later? Yes, if you know the original open password. Use a PDF unlock tool with the correct credential to remove protection. Without the password, removing AES-128 encryption from a properly protected PDF is not feasible through standard means.

What happens if I set permissions but no open password? The document opens without requiring a password, but the restrictions you specified apply. Recipients can read the file but cannot perform the actions you have restricted — printing, copying, or editing.

Is my password stored or accessible after the session? No. The password is used during the encryption operation and is not stored, logged, or retained. Files are discarded after conversion.

Can I protect a PDF that already has a password? The file must be unlocked before re-encrypting with new settings. Upload the unlocked version to apply new protection parameters.

For applications that need to apply PDF passwords, permission restrictions, or AES encryption programmatically in .NET, IronPDF provides a C# API for document protection, granular permission control, and batch encryption.