You have a PDF that should not be opened by just anyone: an invoice, contract draft, HR form, bank statement, tax document, or client proposal. After reading this, you’ll know how to add a password for free, which settings matter, what to check before sending it, and how to avoid the most common “I locked myself out” mistakes.
What PDF password protection actually does
A password-protected PDF can use two different kinds of passwords, and they are often confused.
An open password prevents someone from opening the file at all unless they know the password. This is the one you want for private documents such as payroll forms, ID scans, financial records, or confidential drafts.
A permissions password lets people open the PDF but restricts actions such as printing, copying text, editing pages, or adding comments. This is useful for polished documents you want people to read but not easily modify. It is not the same as true confidentiality, because the file can still be viewed.
For sensitive files, use an open password. If the tool also lets you restrict printing or editing, treat that as an extra layer, not the main protection.
A strong PDF password should be long enough that it is not guessable. In practice, use at least 12 characters, and preferably 16 or more for business or legal documents. A good format is a short phrase with mixed characters, such as:
`Blue-River-49-Lamp!`
Avoid passwords based on the recipient’s name, your company name, a birthday, a phone number, or the word “password” with a number added. Those are easy to guess and easy to mistype into multiple versions.
Before you lock the PDF, prepare the file properly
Password protection should usually be the last step. Once a PDF is encrypted, many tools cannot compress, merge, split, edit, sign, or OCR it unless you first unlock it. Do all cleanup before adding the password.
Start by opening the PDF and checking these items:
A common workflow is: edit pages, sign if needed, compress if needed, rename the file, then password-protect it.
Free ways to password-protect a PDF
There are several free methods, depending on your device. The exact names of buttons vary slightly by software version, but the settings are usually similar.
Option 1: Use a free online PDF password tool
This is the simplest method if you do not want to install software. The general process is:
Use this option for ordinary business documents, invoices, forms, or drafts. For highly sensitive records, such as medical files, legal evidence, or documents containing full ID numbers, many people prefer an offline method because the file never leaves their computer.
Before uploading, make sure the PDF is the final version. If you later need to edit or compress it, you may have to unlock it and repeat the password step.
Option 2: Use Preview on Mac
Mac users can password-protect a PDF for free using Preview.
Now close the file and reopen the new version. Preview should ask for the password. If it opens without asking, you probably exported the wrong file or saved an unencrypted copy.
One useful Mac habit: keep the unprotected original in a secure local folder until the recipient confirms they can open the protected version. After that, delete the unprotected copy if you no longer need it.
Option 3: Use LibreOffice Draw on Windows, Mac, or Linux
LibreOffice is free desktop software and works well if you want an offline method.
After exporting, compare the protected version with the original. Check page breaks, signatures, logos, tables, and any form fields. LibreOffice can be excellent for many PDFs, but complex layouts sometimes move. If the PDF is a final contract or designed proposal, test carefully.
Option 4: Use Microsoft Word only if the PDF started as a Word document
If your document was originally a `.docx`, protect it before exporting to PDF.
This protects the Word file. Depending on your setup, the exported PDF may not always carry the same open-password behavior, so test the final PDF separately. If the PDF opens without asking for a password, use a dedicated PDF encryption method instead.
Do not convert a finished PDF back to Word just to password-protect it unless you are willing to review formatting line by line. Tables, columns, headers, footers, and page numbers may change.
Choosing the right settings
If the tool gives you several security options, choose them deliberately.
Require a password to open
Turn this on for private content. This is the most important setting. If you only restrict editing but do not require a password to open, anyone with the file can still read it.
Restrict printing
Use this if the document is for review only. Choose high-resolution printing if the recipient is allowed to print a clean copy, such as a signed agreement. Choose low-resolution printing or no printing if you want to discourage distribution.
Be realistic: if someone can view a document, they may still be able to photograph the screen or use other workarounds. Printing restrictions are useful friction, not absolute control.
Restrict copying text and images
Turn this on for proposals, paid templates, private reports, or draft manuscripts. Leave it off if the recipient needs to copy account numbers, addresses, legal clauses, or technical details accurately.
For accessibility, be careful with copy restrictions. Some screen readers and assistive workflows may need text access. If the recipient uses accessibility tools, ask before locking down copying.
Restrict editing and page extraction
Use this for contracts, policy documents, certificates, and final reports. It helps prevent casual page removal or changes. If the recipient must annotate the PDF, fill form fields, or add a signature, allow those actions.
A good setting for many business files is:
How to send the password safely
Do not send the PDF and the password in the same email. If someone gets access to that email, they get both the locked file and the key.
Use two separate channels. For example:
Keep the message short. Do not include hints that reveal the password pattern.
Good:
“Here is the protected PDF. I’ll send the password by text.”
Not ideal:
“The password is your last name plus the invoice year and an exclamation mark.”
If you send protected PDFs regularly, use a consistent but safe process. For example, call the recipient the first time, agree on a password phrase, and use a different password for each project or month. Do not reuse one password for every client.
Common mistakes and how to fix them
The recipient says the password does not work
First, check for typing issues. PDF passwords are usually case-sensitive. `River2025!` and `river2025!` are different.
Ask the recipient to copy and paste the password if you sent it digitally. If you gave it by phone, spell out confusing characters:
If possible, test the exact file you sent by downloading it from your sent email or file-sharing link. Sometimes people protect one copy but accidentally attach an older unprotected or differently protected version.
The PDF opens without asking for a password
You may have set a permissions password instead of an open password. Recreate the protected PDF and look specifically for “require password to open,” “document open password,” or “encrypt.”
Also check whether your PDF viewer cached the password during the same session. Close the viewer completely, reopen it, or test on another device.
The file is too large after protection
Encryption itself usually is not the main cause of a huge file. Scanned images, high-resolution photos, and embedded graphics are more likely responsible.
Unlock or return to the original file, compress it, then password-protect the compressed copy. For scanned documents meant for reading on screen, try 150 DPI and grayscale if color is not needed. For documents with colored stamps, charts, or ID images, keep color but compress moderately so text stays sharp.
The recipient cannot fill or sign the PDF
Your permission settings may block form filling, commenting, or signing. Re-export the PDF and allow form filling or annotations. If the document must be signed, consider sending an unlocked signing version through a signing workflow, then password-protect the final signed copy afterward.
You forgot the password
There is no reliable “undo” button if you used proper encryption and did not save the password. This is why you should keep an unprotected original in a secure local folder until you are certain the protected copy is accepted.
For work files, use a password manager and name entries clearly, such as:
`PDF password - Client ABC - Lease draft - 2026-02`
Avoid storing passwords in the same folder as the protected PDFs.
A practical workflow that works
For most people, the cleanest free workflow is simple: finish the PDF, reduce the file size if it is too large, rename it clearly, add an open password, then test it before sending. Send the password through a different channel and keep the unprotected original only as long as necessary.
If your PDF is too large for email before you lock it, start with Compress PDF, then apply password protection to the smaller final file. This avoids the frustrating loop of locking a file, realizing it is too big, unlocking it, compressing it, and locking it again.