How to Protect a PDF with a Password: What It Actually Does

You're about to email a contract to a client. It contains personal information, pricing details, and confidential terms. A password on the PDF is the simplest way to add a barrier before it's opened — but "password protected" covers a wide range of actual security, and it's worth understanding what you're getting before you rely on it.

Two kinds of PDF password protection

• Open (user) password: Required before the document can be opened at all in a compliant PDF reader. This is the meaningful barrier.
• Permissions (owner) password: Doesn't block opening the file — it signals restrictions on printing, copying, or editing to whatever PDF reader is being used. Whether those restrictions are actually enforced depends entirely on the reader; some respect them, some don't. Treat this as a deterrent, not a lock.

What encryption PDFly actually uses

PDFly's Protect PDF tool encrypts your file using the PDF Standard Security Handler with RC4, 40-bit encryption — the original encryption format built into the PDF specification since version 1.1. It's worth being direct about what that means: 40-bit RC4 is old and, by modern standards, weak. It's not comparable to the AES-256 encryption used in current-generation software, and a determined attacker with the right tools can brute-force a 40-bit key without much difficulty. The main things in its favor are compatibility (virtually every PDF reader ever made, including very old ones, can open it) and that it stops the large majority of people who might casually open a file they shouldn't — a coworker glancing at a shared drive, someone who found a USB stick. It is not the right choice for defending a document against someone specifically targeting it with real resources.

In practical terms: PDF password protection here raises the bar against casual, opportunistic access. It does not provide the kind of protection you'd want against a motivated attacker with technical skill and time. If a document genuinely needs to withstand a targeted attempt to open it, a password on a PDF isn't the right tool for that job on its own — pair it with restricted access to where the file is stored, or use a platform offering modern encryption specifically designed for that threat level.

How to password protect a PDF

1. Open PDFly's Protect PDF tool.
2. Upload your PDF.
3. Enter and confirm the password required to open the document.
4. Choose permissions — allow printing, copying, or editing if needed. Remember these are enforced inconsistently across readers.
5. Click "Protect PDF" and download your encrypted document.

Choosing a password that matches what this actually protects against

Since the encryption itself is the weak link rather than the password, a longer or more complex password doesn't meaningfully change how hard the file is to force open — but it still matters for a different reason: it's the only thing stopping someone from simply guessing it and typing it in. With that in mind:

• Don't reuse a password from an account or another document — if it leaks from one place, don't hand an attacker a second target.
• Avoid the obvious: names, dates, "password," or anything easily guessed about you or the document's subject.
• Share it separately from the file itself — a text message or phone call, never the same email thread as the attachment.
• Store it somewhere retrievable. There's no way to recover a lost password from an encrypted PDF, by PDFly or anyone else.

Password protection vs. redaction

These solve different problems and it's worth not confusing them. A password restricts who can open the whole document — everything inside is still there, just locked behind a password. Redaction permanently removes specific sensitive content from the document itself, regardless of who eventually opens it. If a document needs both — limited access and specific details permanently gone — redact first, then password-protect the result.

Frequently Asked Questions

Is PDFly's password protection unbreakable?

No. It uses the PDF Standard Security Handler with RC4, 40-bit encryption — good for stopping casual, opportunistic access, but weak by modern standards and not something you should rely on against a determined, technically capable attacker.

Will permission restrictions actually stop someone from printing or copying?

It depends on the PDF reader. Most modern readers respect these settings, but not all do — treat permission restrictions as a deterrent rather than a guarantee.

Can I remove a password from a PDF later?

Yes — use an unlock tool with the password to remove it.

What if I forget the password?

There's no way to recover a lost PDF password. Always store it in a safe place, since neither PDFly nor anyone else can retrieve it for you.