How to password-protect a PDF

You're about to email a document with a payslip, a bank statement, or a client's personal details. Email isn't private, and forwarded attachments have a habit of ending up where they shouldn't. The fix is to password-protect the PDF so only someone with the password can open it — and you can do that encryption entirely on your own machine, without uploading the file.

What password-protecting a PDF really does

Adding an "open password" (the user password) genuinely encrypts the PDF's contents. Without the password, the file is unreadable scrambled data — not just hidden behind a prompt. Modern PDF encryption uses AES, the same family of algorithm banks and governments rely on. So this isn't security theatre; done properly, it's real protection.

The strength of that protection, though, comes down almost entirely to one thing: your password.

The limits you should know about

• A weak password is a weak lock. AES encryption doesn't help if the password is "1234" or a dictionary word — those can be guessed. Use a long, unpredictable passphrase (a password generator helps).
• You must share the password separately. Never email the password in the same message as the file — send it via a different channel (a text, a call).
• There's no recovery. If you lose the password, the file is genuinely unrecoverable. That's the point of real encryption.

How to password-protect a PDF locally

Uploading a confidential file to an online "PDF protect" service to secure it is self-defeating — you've exposed the document to protect it. KeepItLocally's Protect PDF tool encrypts in your browser, so the file never leaves your device:

• Open Protect PDF and add your file.
• Choose a strong password — long and unique. Store it in your password manager.
• Encrypt and download. The protected copy requires the password to open.

Removing a password you do know

If you have a protected PDF whose password you know and you want a convenient unlocked copy (for example, one you keep opening yourself), you can strip the password with Unlock PDF — also entirely local. It only works when you can already open the file; it is not a way to break into a document you don't have the password for.

Why local encryption is the right default

The whole reason to protect a PDF is that its contents are sensitive. Routing that file through a third-party server first undermines the goal. Encrypting locally means there is no upload, no server copy, and no retention policy to trust — verifiable in your browser's Network tab, and it even works offline.