Password-protect a PDF:the password never leaves your device
Lock your PDF with a passphrase and choose what readers can do: print, copy, or edit. The encryption is done by your own browser, not by us.
The encryption runs in your browser. The file and the password both stay on your device, so there is nothing for us to store or leak.
Free to use: one PDF at a time, up to 50 MB. 10 free files a day across every tool, and no watermark on the protected file.
Drop your PDF
Drag and drop a PDF or click to browse.
Pick a password
Confirm it. Choose what readers can do (print, copy, or edit).
Encrypt & download
Click Encrypt. The locked PDF downloads right away. Readers will be asked for the password to open it.
How to password-protect a PDF
Three steps cover the job. Below are the parts people ask about: how strong the lock really is, the two kinds of PDF password, what encryption cannot do for you, and what to do when the file is already locked.
Put a password on a PDF
Drop the file on the upload card, type a password, and type it again to confirm. Four characters is the minimum the tool accepts, though a real passphrase is a much better idea.
Click Encrypt and the locked copy downloads with -protected added to the file name. Your original stays on your device, untouched and still openable without a password.
Lock a PDF without uploading it to a server
A file worth locking is usually a file you do not want sitting on someone else's disk. Most online protect tools take the upload, encrypt it there, and hold a copy for some hours before deleting it. They also see your password on the way through.
Here the encryption runs inside the browser tab. The bytes and the passphrase never travel, so there is no server copy to delete and no password in anyone else's logs.
How strong the encryption actually is
The lock is the standard PDF password encryption built into the format, so Acrobat, Preview, Chrome and every other reader will prompt for it. The strength follows the PDF version of the file you upload, because that is what the format allows.
Files written as PDF 1.6 or 1.7, which covers most documents from modern software, get 128-bit AES. Files saved as PDF 1.4 or 1.5 get the 128-bit method those versions support, and anything older falls back to 40-bit. If a file matters a lot, re-save it from a current app first so it carries a recent version number.
Owner password vs user password
PDFs have two passwords. The user password is the one that opens the document. The owner password unlocks full rights over it: printing, copying, editing. A file can have one, the other, or both.
This tool asks for one password and uses it for both roles. That means the person who can open the file also holds owner rights, so the permission boxes below are a polite request to the reader app rather than a hard lock. The real protection is that nobody gets in without the password.
Choose what readers can do: print, copy, edit
Three checkboxes cover the common cases. Printing is allowed by default. Copy and paste and editing are both off by default, which is what most people want when they send a signed contract or a statement.
Adding comments and filling in form fields stay allowed either way, so a locked form is still usable by the person you sent it to.
See also: Fill a PDF form
What a password does not stop
Encryption controls who can open the file. It does nothing about what happens after that. Anyone who has the password can take a screenshot, print to PDF, retype the contents, or forward the file and the password together.
It also does not hide anything from someone who already has the unlocked copy. If specific words must never be readable, take them out of the document before you lock it.
See also: Redact a PDF
Send a protected PDF by email
Send the file and the password by two different routes. A password in the same email as the attachment protects nothing, since one leaked inbox gives up both. Message the passphrase, say it on a call, or agree it in advance.
Protect a bank statement or a payslip
These are the documents people most often need to lock, and the ones they should least want to hand to a stranger's server. The whole job here happens in the tab, so the statement never leaves your machine on the way to being encrypted.
See also: Split a bank statement by month
Do your edits first, lock the file last
Once a PDF is encrypted, most tools cannot read it any more, including ours. Merge, sign, number the pages, compress, and then protect the finished document. Otherwise every change means unlocking and locking again.
See also: Compress a PDF
Sign a PDF and then protect it
Signing and locking answer different questions: a signature says who agreed, a password says who may open. Place the signature first, save, then run the signed file through this tool.
See also: Sign a PDF
Add a password to a PDF that already has one
The upload card will not read an encrypted file, so a file that is already locked has to be unlocked first. Remove the old password, then run it through here with the new one.
See also: Unlock a PDF
Stamp the pages and lock the file
A password and a visible stamp do different jobs. The stamp tells a reader that the copy is confidential or a draft, the password keeps other people out. If you want both, add the stamp first and encrypt afterwards.
See also: Add a watermark
Protect a PDF on a phone or tablet
The tool is a web page, so there is no app to install. Pick the PDF from your files, cloud drive app, or a chat attachment, type the password, and the locked copy lands in your downloads folder.
If you lose the password
Nobody can get the file back for you. No copy of your document or your passphrase exists here, so there is nothing to reset. Keep the original unlocked file somewhere safe, and treat the encrypted copy as the one you hand out.
Password protection, answered
How do I password-protect a PDF online?
Drop your PDF, type a password twice, choose what readers may do (print, copy, edit), then click Encrypt. The locked PDF downloads right away and anyone who opens it is asked for the password first.
Where does the encryption happen?
In your browser. The PDF bytes and the password stay on your device, and nothing is sent to a server to do the work.
What encryption is used?
Standard PDF password encryption, the kind every reader understands. The exact method follows the PDF version of the file you upload: files written as PDF 1.6 or 1.7, which is what most modern software produces, get 128-bit AES. Older files get the 128-bit or 40-bit method their version supports.
What if I forget the password?
There is no recovery. Nothing about your file is kept here, so the password cannot be reset or looked up. Write it down somewhere safe before you send the file on, and keep the unlocked original.
Can I remove the password later?
Bring the locked file and its password to our unlock tool and download a copy with the encryption stripped off. Any reader can also do it: open the file with the password and use Save a copy or print to PDF.
Does the protected PDF have a watermark?
Never. FileHook does not stamp anything on your output, on any plan. If you want a visible stamp on the pages, that is a separate job for the watermark tool, which only adds text you typed yourself.
Is there a limit on how many files I can protect?
Ten a day on the free plan, shared with every other tool, resetting at midnight UTC. One PDF at a time, up to 50 MB each. The free plan covers 10 finished files a day, shared across every tool, resetting at midnight UTC, and Pro removes the count. The encryption itself runs on your machine.
Need the password gone again?
If you have the passphrase, our unlock tool strips the encryption back off in the same browser tab.
Edit a PDF nowUnlock PDF
Remove the password from a PDF you can already open. The password stays on your device.
OpenAdd Watermark
Stamp text across every page. Adjustable opacity, rotation, position.
OpenRedact PDF
Drag a black box over anything sensitive. The text is removed for good, not just covered.
OpenEdit PDF
The full editor: inline text, shapes, signatures, forms and page ops. No signup to start.
Open