Whether you’re sending a sensitive contract by email, storing confidential records in the cloud, or sharing a file that shouldn’t be freely copied — password-protecting a PDF is one of the most practical ways to control who can access your documents. And yet many people don’t know that PDF passwords come in two completely different types, or that encryption strength actually matters.
This guide explains the two types of PDF passwords, how to choose the right encryption strength, and how to apply password protection on every major platform — with practical security advice at the end.
The Two Types of PDF Passwords
This is the part most people don’t know: PDF supports two entirely separate password mechanisms with very different purposes.
1. Open Password (User Password)
This is the “door key.” Without this password, the PDF simply cannot be opened — not even the first page. It completely blocks unauthorized access to the document’s content.
- Use it for: confidential reports, financial data, documents containing personal information
- The recipient must know the password to open the file
- Best practice: send the PDF and the password through different channels (email for the file, SMS for the password)
2. Permissions Password (Owner Password)
This password doesn’t block opening the file — it restricts what people can do with it. The document opens and reads normally, but actions like printing, copying text, or editing are disabled. The permissions password is needed to unlock those restrictions.
- Restrictions you can set: no printing, no text copying, no editing, no annotations
- Use it for: published reports, exam papers, design files you don’t want freely reproduced
- Important caveat: permissions passwords are relatively easy to bypass with professional tools. Don’t rely on them for high-security content.
Using Both Passwords Together
You can apply both simultaneously: the document requires a password to open, and once opened, it has restricted permissions. This gives you two layers of protection.
Choosing Encryption Strength
PDF encryption has evolved significantly over the years. Here’s what’s available:
- 40-bit RC4 (PDF 1.1–1.3): Obsolete and trivially crackable. Never use this.
- 128-bit RC4 (PDF 1.4–1.5): Older and weaker. Not recommended.
- 128-bit AES (PDF 1.6–1.7): Acceptable for general use, still the default in many older tools.
- 256-bit AES (PDF 2.0 / Acrobat X+): Current gold standard. Use this whenever possible.
For anything sensitive, choose 256-bit AES. It’s supported by all modern PDF tools and represents the current security standard.
Method 1: Online Tools
Best for occasional use when convenience matters most.
- Open our online PDF encryption tool (link at the end of this article).
- Upload the PDF you want to protect.
- Enter your password (use a strong one: at least 12 characters, mixing uppercase, lowercase, numbers, and symbols).
- Confirm the password by entering it again.
- Select encryption strength (choose 256-bit AES if available).
- Click “Encrypt” and download the protected PDF.
- Open the file in a PDF viewer to confirm it requires a password.
Privacy note: Online tools require uploading your file to a server. Use reputable services and confirm they don’t store your files or passwords. For highly sensitive documents, use an offline tool instead.
Method 2: Mac Preview
Preview can apply an open password completely offline for free.
- Open the PDF in Preview.
- Go to File → Export as PDF…
- Check the “Encrypt” checkbox (click “Show Details” if you don’t see it).
- Enter and confirm the password, then click Save.
Preview uses 128-bit AES encryption. This is fine for general use; use Acrobat if you need 256-bit AES.
Method 3: Adobe Acrobat (Most Complete)
Acrobat gives you full control over encryption level, open password, permissions password, and granular permission settings.
- Open the PDF in Acrobat.
- Go to File → Properties → Security, or click Tools → Protect → Encrypt → Encrypt with Password.
- In the security settings dialog:
- Set Compatibility to “Acrobat X and later (AES-256)”
- Check “Require a password to open the document” and enter your open password
- To add restrictions: check “Restrict editing and printing,” set a permissions password, and configure which operations are allowed
- Click OK and save the document.
Method 4: Microsoft Office and Windows
- Word/Excel/PowerPoint: When saving as PDF, click Options in the Save dialog and look for “Encrypt the PDF document with a password.”
- PDF24 Creator (free): Open the PDF, navigate to Security settings, and configure both open password and permissions password separately.
Password Security Best Practices
Setting a password is just the first step. Here’s how to make sure it actually protects you:
- Use strong passwords: Minimum 12 characters, mixing uppercase, lowercase, numbers, and symbols. Avoid names, birthdays, or dictionary words.
- Separate the file and password: Never send the password in the same email as the protected PDF. Use SMS, phone, or a different communication channel.
- Use a password manager: Tools like 1Password or Bitwarden store passwords securely so you don’t have to remember them or write them down unsafely.
- Rotate passwords for long-term sensitive files: Update passwords on important stored documents periodically.
- Understand the limits of permissions passwords: Restrictions on printing and copying can be bypassed by determined users with the right tools. Don’t rely on them alone for truly sensitive content — use an open password for actual confidentiality.
Do it in your browser — the file never leaves your device: PDF Tools
