Password-protecting a PDF properly
· 5 min read
Encrypting a PDF is worth doing and easy to do in a way that achieves nothing. The difference is which password you set and how you choose it.
The two protection levels
A user password locks opening: nobody reads the file without it. An owner password permits opening but restricts printing, copying or editing, and it is honour-system protection, adequate for signalling intent and useless against determined tooling. When confidentiality actually matters, set the user password.
Choosing the password
Length beats cleverness: four unrelated words outlast p@ssw0rd tricks. Never send the password through the same channel as the file; the email carries the PDF and a message carries the password. And write it somewhere durable that is not the filename.
An encrypted PDF with a lost password is genuinely unrecoverable. There is no reset flow, and that is the entire point of the feature.
What encryption does not do
It does not watermark, so anyone with the password can print and forward freely; pair it with a watermark if copies need attribution. It does not compress, so the size stays roughly the same. And a protected file must be unlocked before other tools can edit it.
The ten second check
After protecting, open the new file and type the password once. Confirming that it opens, and that the password you think you set is the one that works, turns the single catastrophic failure mode of encryption into a non-event.
Frequently asked questions
Is PDF encryption actually secure?
AES at 128 bits with a decent password is not casually breakable. The weak link is the password rather than the mathematics.
Can I recover a lost PDF password?
No. There is no reset mechanism, which is what makes the encryption worth having.
Does the password get sent anywhere?
Not here. The key is derived on your device and the document is encrypted in the browser tab.