Sometimes you’re on the other side of the problem: instead of unlocking a PDF, you need to lock one. Maybe you’re sending a contract, sharing a document with personal details, or archiving something sensitive. Adding a password is straightforward, but a little thought about how and whether to do it will save you trouble later — including the very common trouble of forgetting the password you set.
First, decide what you’re protecting against
Before adding a password, ask what you actually want to prevent. As explained in open password vs. permissions password, PDFs support two different protections:
- An open password encrypts the file so it can’t be viewed without the password. Use this when the content itself is sensitive and you want to control who can read it at all.
- A permissions password lets anyone open the file but restricts printing, copying, or editing. Use this when you’re comfortable with people reading the document but want to discourage reuse or modification.
For most people protecting a genuinely sensitive document — a tax return, a medical record, an ID scan — the open password is what matters. Permissions restrictions are weaker by nature and are better thought of as a polite “please don’t,” not a hard barrier.
Ways to add a password
You have several options depending on your tools:
Using unlockpdf free. The companion lock PDF tool adds an open password to a PDF right in your browser, with no upload — the same privacy-first approach as the unlocker. You choose the file, set a password, and download the protected copy.
On a Mac with Preview. Open the PDF, choose File → Export, tick Encrypt, and set a password. macOS applies strong encryption automatically.
In Adobe Acrobat. Use File → Protect Using Password, then choose whether the password is required to open the document or only to edit it.
On Windows with Microsoft Word or Print to PDF. If you’re creating the PDF from a Word document, you can set a password on export via File → Info → Protect Document → Encrypt with Password before saving as PDF.
Whichever route you choose, modern tools use AES encryption behind the scenes, so you rarely need to pick an algorithm — see PDF encryption explained for what’s happening under the hood.
Choose a strong password (this is the part that matters)
Here’s the single most important point: your password, not the algorithm, is what actually protects the file. A document with AES-256 encryption and the password document1 is not secure, because anyone guessing common passwords will get in almost instantly. The encryption is only as strong as the secret protecting it.
A good PDF password is:
- Long — aim for a passphrase of several words, or at least 12–16 characters. Length beats complexity.
- Unpredictable — avoid names, dates, the recipient’s company, or anything guessable from the document itself.
- Not reused from your important accounts — a shared PDF password shouldn’t be your email password.
A memorable passphrase like copper-lantern-42-riverbank is both strong and easier to communicate than a random jumble, if you’ll need to share it verbally.
Sharing tip: never send the password in the same email as the protected file. Use a separate channel — a text message, a phone call, or a password manager’s secure share feature. A locked file and its key in the same message defeats the purpose.
Don’t lock yourself out
The flip side of strong protection is that a strong password on a modern PDF is, by design, effectively unrecoverable if you lose it. Before you protect a file:
- Save the password in a password manager, tied to the file name, the moment you set it.
- Keep an unprotected original in a secure location, so the encrypted version is a shareable copy rather than your only copy.
- Double-check the password works by reopening the protected file before you send it or delete the original.
This is the mirror image of the advice in our forgot your password guide: the best time to prevent a lockout is the moment you create the lock.
When you probably shouldn’t add a password
Passwords add friction, and friction has a cost. Consider skipping the password when:
- The file is already stored somewhere access-controlled (an encrypted drive, a secure cloud folder with proper permissions). A second password may add little beyond something else to forget.
- You’ll be sending it to many people and coordinating passwords becomes a support burden.
- The document isn’t actually sensitive — protecting a public flyer just makes it annoying to open.
Security is about matching the protection to the risk. A password on a truly sensitive document is worth the friction; a password added out of habit often isn’t.
The bottom line
Password-protecting a PDF is easy in almost any modern tool, and you can do it privately in your browser with the lock PDF tool. The parts that actually matter are the decisions around it: choose the right kind of protection for your goal, pick a genuinely strong password, share it separately from the file, and make sure you won’t lock yourself out. Get those right and the encryption does its job — quietly and reliably.