How to Password Protect a PDF Free in 2026

To password protect a PDF for free, open it in a tool you already have, such as Microsoft Word, Mac Preview, or LibreOffice, and choose the encrypt or set-password option before saving a new copy. Modern PDF encryption uses the AES standard (ISO), and choosing a strong, unique password matters more than any other setting. This guide explains how PDF protection works, the difference between 256-bit and 128-bit encryption, how to add and remove a password on files you own, and the mistakes that quietly leave documents exposed. Key claims are backed by sources you can check.

What Is PDF Password Protection?

PDF password protection encrypts the contents of a PDF so that it can only be opened, or in some cases edited and printed, with the correct password. When a PDF is encrypted, the page content, images, document metadata, bookmark titles, and even hyperlink addresses are all scrambled, so nothing readable is left inside the file (PDFlib encryption knowledge base). Without the password, the file is just unreadable ciphertext.

There are two types of password. A user password (also called an open password) is needed to open the document at all. An owner password (also called a permissions password) leaves the file readable by anyone but restricts actions such as printing, copying, or editing. For genuine confidentiality, you want a user password.

Advertisement

256-bit vs 128-bit Encryption: Which Should You Use?

Modern PDFs are encrypted with AES, the Advanced Encryption Standard. The numbers 128 and 256 refer to the length of the key in bits. AES-128 uses a 128-bit key and 10 rounds of processing, while AES-256 uses a 256-bit key and 14 rounds, which makes it exponentially stronger (Kovetz PDF encryption standards guide).

For most everyday documents, AES-128 remains secure. For sensitive or long-term material, AES-256 is the recommended choice, and because there is usually no noticeable speed difference, there is little reason to pick the lower level when 256-bit is available. The PDF 2.0 specification reflects this direction: it added support for AES-GCM and deprecated the old RC4 algorithm, which no longer offers adequate security (PDF Association on PDF 2.0 encryption).

One compatibility note: 128-bit AES works with Adobe Reader 5.0 and later, while 256-bit AES needs Adobe Reader 9.0 and later. Since those versions are many years old, nearly every current reader supports AES-256.

How Do You Add a Password to a PDF for Free?

You do not need paid software. Here are three free methods using tools you probably already have.

If you need to combine several documents into one before protecting it, use our free Merge PDF tool first. If the file is large, our Compress PDF tool can reduce its size before you encrypt and send it.

How Do You Remove a Password From a PDF You Own?

If you know the password and no longer need the protection, removing it is straightforward and legal on your own files.

• Mac Preview: Open the PDF, enter the password, then choose File, Export, and save a new copy with the Encrypt option unticked.
• Free online tools: Services such as PDF24 remove password protection once you enter the correct password, with no watermark or account required (PDF24 unlock tool).

An important limit: these tools are not password crackers. As PDF24 states, you must know and enter the current password, because the tool cannot decrypt a protected PDF without it. Only remove protection from documents you own or are authorized to modify.

Disclaimer: Removing security from a document you do not own or lack permission to change may breach the law or a contract. This article covers removing passwords from your own files only and is general information, not legal advice.

When Should You Use Password Protection?

Password protection is worth using whenever a PDF contains information that would cause harm if the wrong person read it. Common cases include:

• Financial statements, tax documents, and invoices with bank details
• Contracts and legal agreements before they are finalized
• Medical records and other health information
• Identity documents, payslips, and anything with a national ID or passport number
• Any file you send by email or upload where a leak would be damaging

For routine, non-sensitive documents, encryption adds friction with little benefit, since recipients then need the password too. Match the protection to the sensitivity of the content.

What Are the Most Common PDF Password Mistakes?

Encryption is only as strong as the way you use it. The most common mistakes are:

• Weak passwords. Names, dates of birth, and common words can be broken by dictionary attacks. Use a long, unique password (Win2PDF document security notes).
• Reusing the user and owner password. These should be different, so that permission controls and file access are not tied to the same secret.
• Relying only on an owner password. An owner (permissions) password still lets anyone open and read the file. For confidentiality you need a user password.
• Sending the password with the file. Share the password through a separate channel, such as a phone call or message, not in the same email as the PDF.
• Using outdated RC4 encryption. RC4 is deprecated in PDF 2.0. Choose AES, ideally AES-256, when your tool offers the option.

Get those right and a free, AES-256 encrypted PDF with a strong password offers protection comparable to encrypting the file with a general-purpose tool like gpg or openssl.

What Else Do People Ask?

How do I password protect a PDF for free?

You can password protect a PDF for free with tools you likely already have. In Microsoft Word, use Save As, then Tools, then General Options to set a password. On a Mac, open the PDF in Preview, choose File then Export, and tick Encrypt. LibreOffice can export a password-protected PDF from any document. Choose a strong, unique password, because the encryption is only as strong as the password protecting it.

Is AES-256 better than AES-128 for PDF encryption?

AES-256 uses a 256-bit key with 14 rounds, while AES-128 uses a 128-bit key with 10 rounds, so AES-256 is stronger and is the recommended choice for sensitive or long-term documents. AES-128 remains secure for most everyday purposes. Since there is usually no noticeable performance difference, there is little reason to pick the lower level when 256-bit is available.

Can I remove a password from a PDF I own for free?

Yes, if you know the password. Free tools such as PDF24 remove password protection from a PDF once you enter the correct password. On a Mac you can open the PDF with the password in Preview and export a new copy without encryption. These tools are not password crackers and cannot unlock a file you do not have the password for.

Is a password-protected PDF actually secure?

A PDF encrypted with AES-256 and a strong password offers security comparable to encrypting the file with a general-purpose tool like gpg or openssl. The weak point is almost always the password. Short or common passwords can be broken by dictionary attacks, so a long, unique password is what makes the encryption effective.

What is the difference between a user password and an owner password?

A user password, also called an open password, is required to open and read the PDF. An owner password, also called a permissions password, controls restrictions such as printing, copying, or editing while still letting anyone open the file. For real confidentiality you need a user password, and it should be different from the owner password.