Password-Protect & Encrypt a PDF

What encryption changes inside the file, and what it does not

Protecting a PDF encrypts its contents, not its container. The strings and the content streams — the text, the drawing instructions, the embedded images — are enciphered. The document's skeleton is not: the object numbering, the page tree and the cross-reference table have to stay readable, because a reader must be able to find the objects before it can ask for a password to decrypt them.

The consequence is that some facts about a protected document remain visible to anything that opens the file without the password. How many pages it has, roughly how large each one is, whether it contains attachments. Depending on how the file was produced, parts of the document information dictionary can be readable too — which is worth remembering if you named the file, or its title metadata, after the thing you are trying to keep private.

Encrypt the payroll summary by all means. Do not also call it redundancies-final.pdf, because the filename was never inside the encrypted part.

Why this tool encrypts rather than setting permission flags

This is the distinction that decides whether a password is doing what you think it is.

A user password is enforced by mathematics. Without it, the content streams cannot be deciphered, so there is nothing to display — a reader that ignored the prompt would still have nothing but ciphertext.

PDF also defines a second mechanism, and it works quite differently. Permission settings — no printing, no copying, no editing — are flags recorded in the document, and a compliant reader honours them. That is an agreement between well-behaved software and the file, not a lock. Software that chooses not to honour the flags can display and extract the content, and the specification's own permission model has always worked this way.

That is why this tool does not offer them. A flag any reader can disregard signals intent at best, and describing it as protection would be misleading. The password set here is the enforced kind. If the content must not reach someone, the answer is to withhold the password — or not to send them that content in the first place.

A worked example: sending a payroll summary

A four-page summary going to one recipient outside the organisation. Apply a user password, so the file cannot be opened without it.

Then get the password to them by a different route from the file. Emailing a protected PDF and its password in the same message, or in an immediate follow-up to the same address, protects against essentially nothing — anyone who can read one can read the other. Send the document by email and the password by phone, or through a messaging app, or agree it in person beforehand.

Choose the password for the situation. This is a one-off shared secret with a short useful life, not an account credential, and one you have to read aloud over a phone line needs to survive being read aloud. A short phrase of unrelated words does that better than a dense string of symbols.

Record it in a password manager as you set it. There is no recovery path and nothing retained here — uploaded files are deleted within 24 hours — so the copy you keep is the only copy that will exist.

What a password cannot do for you

Encryption controls who can open a document. It has no influence on what happens next.

A recipient who opens the file can photograph the screen, retype the figures, or save an unprotected copy by printing it back to PDF. Anyone you gave the password to can pass it on. None of that is a failure of the encryption; it is simply outside what encryption addresses.

So match the tool to the actual worry. If particular passages must not be readable by the recipient at all, they should not be in the file you send — remove them properly with Redact PDF, which takes the content out rather than covering it. If the concern is a draft circulating as though it were final, a visible mark across every page does more than a password ever will, and Add Watermark applies one.

And when a protected file has to enter a system that indexes or previews attachments, it will usually need unprotecting first — Unlock PDF removes the encryption when you have the password.