Password-Protect & Encrypt a PDF

What encryption changes inside the file, and what it does not

Protecting a PDF encrypts its contents, not its container. The strings and the content streams — the text, the drawing instructions, the embedded images — are enciphered. The document's skeleton is not: the object numbering, the page tree and the cross-reference table have to stay readable, because a reader must be able to find the objects before it can ask for a password to decrypt them.

The consequence is that some facts about a protected document remain visible to anything that opens the file without the password. How many pages it has, roughly how large each one is, whether it contains attachments. Depending on how the file was produced, parts of the document information dictionary can be readable too — which is worth remembering if you named the file, or its title metadata, after the thing you are trying to keep private.

Encrypt the payroll summary by all means. Do not also call it redundancies-final.pdf, because the filename was never inside the encrypted part.

Owner passwords are enforced by the reader, not by the file

This is the distinction that decides whether a password is doing what you think it is.

A user password is enforced by mathematics. Without it, the content streams cannot be deciphered, so there is nothing to display — a reader that ignored the prompt would still have nothing but ciphertext.

An owner password works differently. The permission settings it carries — no printing, no copying, no editing — are flags recorded in the document, and a compliant reader honours them. That is an agreement between well-behaved software and the file, not a lock. Software that chooses not to honour the flags can display and extract the content, and the specification's own permission model has always worked this way.

Use owner passwords for what they are good at: signalling intent, preventing casual reuse, stopping the accidental print run. Do not rely on one to keep material from a determined recipient. If the content must not reach them at all, the answer is a user password, or not sending them that content in the first place.

A worked example: sending a payroll summary

A four-page summary going to one recipient outside the organisation. Apply a user password, so the file cannot be opened without it.

Then get the password to them by a different route from the file. Emailing a protected PDF and its password in the same message, or in an immediate follow-up to the same address, protects against essentially nothing — anyone who can read one can read the other. Send the document by email and the password by phone, or through a messaging app, or agree it in person beforehand.

Choose the password for the situation. This is a one-off shared secret with a short useful life, not an account credential, and one you have to read aloud over a phone line needs to survive being read aloud. A short phrase of unrelated words does that better than a dense string of symbols.

Record it in a password manager as you set it. There is no recovery path and nothing retained here — uploaded files are deleted within 24 hours — so the copy you keep is the only copy that will exist.

What a password cannot do for you

Encryption controls who can open a document. It has no influence on what happens next.

A recipient who opens the file can photograph the screen, retype the figures, or save an unprotected copy by printing it back to PDF. Anyone you gave the password to can pass it on. None of that is a failure of the encryption; it is simply outside what encryption addresses.

So match the tool to the actual worry. If particular passages must not be readable by the recipient at all, they should not be in the file you send — remove them properly with Redact PDF, which takes the content out rather than covering it. If the concern is a draft circulating as though it were final, a visible mark across every page does more than a password ever will, and Add Watermark applies one.

And when a protected file has to enter a system that indexes or previews attachments, it will usually need unprotecting first — Unlock PDF removes the encryption when you have the password.