Sending a PDF with sensitive information? A password ensures that only the intended recipient can open it. Whether you are sharing a financial report, a legal agreement, or a confidential proposal, password-protecting a PDF takes less than a minute and adds a meaningful layer of security.
This guide explains the two types of PDF passwords, when to use each, and how to protect any PDF for free.
The Two Types of PDF Passwords
PDF supports two distinct password mechanisms that serve different purposes.
1. Open Password (Document Password)
An open password controls who can open the file. Anyone without the password sees only an error when they try to open the document.
Use this when: You are sharing sensitive documents and want to ensure only authorized recipients can read them. The recipient needs the password before they can see anything.
2. Permissions Password (Owner Password)
A permissions password does not restrict opening - anyone can open the file - but it restricts what they can do with it. The document owner can prevent:
- Printing the document
- Copying text or images
- Editing content
- Extracting pages
- Adding annotations
Use this when: You want the document to be readable but not modifiable or printable. For example, a price list you share with clients but do not want them to copy into a competing quote.
You can apply both passwords to the same document: an open password to control access, plus a permissions password to limit what authorized recipients can do.
Encryption Strength: What It Means
PDF passwords are backed by encryption. The strength of that encryption matters:
128-bit AES (PDF 1.6 and 1.7): The minimum acceptable standard. Adequate for most business use cases. Compatible with all modern PDF readers.
256-bit AES (PDF 2.0): Stronger encryption, recommended for highly sensitive documents. Supported by Adobe Acrobat and most modern readers.
Most free tools use 128-bit encryption. LocalPDF Protect applies strong encryption appropriate to your document.
How to Password Protect a PDF with LocalPDF
Step 1: Open uselocalpdf.com/tools/protect.
Step 2: Upload your PDF by dragging it onto the page or clicking the upload area.
Step 3: Enter your open password. Choose a strong password: at least 12 characters, mixing uppercase and lowercase letters, numbers, and symbols.
Step 4: Optionally configure permissions - whether to allow or restrict printing, copying, and editing.
Step 5: Click Protect.
Step 6: Download your password-protected PDF.
The entire process runs in your browser. The password and your file content never reach any server.
Choosing a Strong PDF Password
A weak password can be cracked by brute force. PDF password cracking tools exist and are freely available. Here is what makes a PDF password strong:
Length matters most. An 8-character password can be cracked. A 16-character password is practically uncrackable with current technology.
Use a passphrase. A sentence like BlueMountains!Jump#2024 is both strong and memorable.
Avoid predictable patterns. Names, birthdays, dictionary words with a number appended, and keyboard patterns (qwerty, 12345) are tried first by cracking software.
Use a password manager. If the password is complex enough to be secure, it may be hard to remember. Store it in a password manager (1Password, Bitwarden, KeePass) and share it with recipients via a secure channel - never in the same email as the PDF.
How to Securely Share the Password
Sending the password in the same email as the protected file defeats the purpose. If someone intercepts that email, they have both the file and the key.
Better approaches:
- Send by a different channel. Share the password by text message, phone call, or a secure messaging app.
- Use a pre-shared password. Establish a standard password with a regular collaborator, agreed in advance.
- Use a password manager's sharing feature. Apps like 1Password and Bitwarden allow secure password sharing.
Can PDF Passwords Be Broken?
Yes - with varying difficulty depending on the password strength. Modern password-cracking software can test billions of password combinations per second on standard hardware.
- A 6-character password: crackable in seconds to minutes
- An 8-character password: crackable in hours to days
- A 12-character password using mixed character types: may take years
- A 16+ character passphrase: effectively uncrackable with current technology
This is why password length is the most important factor. Encryption strength matters less than password quality.
What Password Protection Does Not Do
Password protection is not a complete security solution. It is important to understand its limitations:
- It does not encrypt the file name or metadata visible in some file systems.
- It does not prevent the recipient from sharing the password with others.
- It does not protect against screen capture - a recipient can always photograph their screen.
- It can be removed by the legitimate recipient using tools like LocalPDF Unlock.
Password protection is best understood as a deterrent and access control mechanism - not an absolute barrier.
Removing a PDF Password
If you need to remove a password from a PDF you own, use LocalPDF Unlock. Enter the current password to prove ownership, and the tool removes it, saving an unlocked copy.
Conclusion
Adding a password to a PDF is a fast, effective way to control access to sensitive documents. Use a long, complex password, share it through a separate channel, and choose 256-bit encryption when available. For most business purposes, a well-chosen password backed by strong encryption provides adequate protection. For truly sensitive data, combine password protection with other security measures appropriate to the sensitivity of the information.