How to Password Protect a PDF for Free in Your Browser

To password protect a PDF, encrypt it with an open password, called the user password, that must be entered before the file will display. The free Encrypt PDF tool from Priya LifePDF does this in your browser using 256-bit AES encryption, and your document is not uploaded anywhere.

The tool also lets you set an owner password and permission settings. Those work differently from the open password, and it is worth understanding the difference before you rely on them.

How to password protect a PDF with Priya LifePDF

1. Open the Encrypt PDF tool and drop in your PDF, or click to browse. The tool encrypts one file at a time.
2. Under Password Settings, type a password in User Password (to open document). Use the eye button beside the field to check what you have typed.
3. If you also want to restrict what people can do with the file, enter a different password in Owner Password (to change permissions).
4. Under Document Permissions, untick any action you want to restrict: printing, modifying, copying, annotating, filling forms, accessibility or assembly. Everything is allowed by default.
5. Click Encrypt PDF.
6. Click the download button to save the encrypted copy. It is saved with _encrypted added to the file name.

Before sending the file, open the encrypted copy in your usual PDF reader and check that it asks for the password.

User password, owner password and permissions: what each one does

The encryption itself

The tool uses qpdf, an open-source PDF library, compiled to run in the browser. It always applies 256-bit AES encryption; there is no weaker option to choose by mistake. You must enter at least one of the two passwords, and what you get depends on which ones you set.

User password only

Anyone who wants to open the file needs the password. Once it is open, they can print, copy and edit as normal. The permission checkboxes have no effect in this case, because no separate owner password is set.

User password and a different owner password

The file needs a password to open, and the permissions you unticked are recorded in it. Someone who opens it with the user password gets the restricted access; the owner password is meant for the person who controls the document.

Owner password only

This is the setting most often misunderstood. With no user password, the file opens for anyone without a password. The permission restrictions are applied, but nothing stops a person reading the content.

Why permissions are not real protection

Permission settings are instructions to the PDF software, asking it to disable printing, copying or editing. It is up to each program to obey them. Many readers and editors can ignore them, and restrictions on a file that opens without a password can be removed with standard tools, including our own Remove Restrictions. Treat permissions as a polite signal about how a document should be used. Only the user password keeps the content from being read.

One practical note: the accessibility permission governs whether assistive software, such as a screen reader, may extract the text. Leave it allowed unless you have a clear reason not to.

Tips for strong PDF passwords, and common mistakes

• Use a long passphrase. AES-256 is only as strong as the password protecting it. Short passwords and common words can be guessed by software that tries many passwords against a copy of the file. A passphrase of several unrelated words is easier to remember and much harder to guess.
• Send the password separately. Do not put it in the same email as the attachment. Phone the recipient, send a text message, or use a different messaging channel.
• Keep an unencrypted master copy. Store the original somewhere secure. A forgotten PDF password cannot be recovered, and Priya LifePDF does not keep a copy of your passwords.
• Remove what the recipient should not see first. Encryption hides nothing from someone who has the password. Redact confidential passages before encrypting (see how to redact a PDF properly), and consider Sanitize PDF to strip comments, attachments and metadata.
• Do not rely on permissions alone. If the content is confidential, always set a user password.
• Changing it later. To remove the password from a copy, use Decrypt PDF, which needs the current password. To adjust restrictions, use Change Permissions.

Is the PDF or the password sent to a server?

No. The encryption runs locally in your browser tab. Your document and the passwords you type are not uploaded. The encryption engine is a WebAssembly file that your browser downloads from the Priya LifePDF site when you first use the tool; that is a download of software to your device, not an upload of your file.

You can check this yourself by following our guide on how to check if a PDF tool uploads your files. For why it matters with confidential documents, see is it safe to upload PDFs to online converters?

Example: sending a confidential document to a partner

A small biotech company needs to send a draft technical report to a contract manufacturer before a meeting. The report contains unpublished process details, and it will travel by email and sit in inboxes on both sides.

Before sending, the project lead keeps the original in the company's document system, encrypts a copy with a user password made of several unrelated words, and emails the encrypted file. The password is given to the recipient in a phone call. If the email is forwarded to the wrong person or an inbox is compromised, the attachment cannot be read without the password.

Encryption has limits here. It protects the file in transit and in storage, but once the recipient opens it, they can share what they read. It is not an electronic signature, an audit trail or a replacement for your organisation's approved file-transfer or email security policies, and Priya LifePDF is not a validated GxP system. If your company has rules for sending confidential information, those rules come first.