How to Password-Protect a PDF and What Permissions Do

To password-protect a PDF, set an open password: anyone who wants to view the file must type it, and the document is encrypted with AES-256. Docmint's Protect PDF tool does this in your browser, and also lets you add an optional owner password that restricts printing, copying and editing. The open password is the real protection; permission restrictions are only advisory.

What is the difference between the open password and the owner password?

A PDF can carry two passwords. The open password, sometimes called the user password, is required to view the file at all. Without it, the content cannot be decrypted and the PDF will not open.

The owner password controls permissions. It tells PDF viewers which actions to allow, such as printing, copying text or editing, and it is needed to change those settings later. If you set only an owner password, anyone can open the file, but compliant viewers will limit printing and editing.

What do PDF permissions really do?

Permissions are instructions to the viewer, not locks on the content. Well-behaved PDF readers respect them and gray out the print or copy commands. But a file that opens without a password has to be readable by the viewer, so someone determined can use software that ignores the flags, take screenshots or simply retype the text.

That makes permissions useful for discouraging casual changes and signaling intent, for example on a contract you want people to read but not edit. They are not a way to keep content secret. If the information must stay private, set an open password and only share it with the people who should read the document.

How strong is AES-256 encryption in a PDF?

Docmint uses AES-256 as defined in PDF 2.0 (revision 6), the strongest encryption in the PDF standard, and it is supported by all modern PDF readers. The algorithm itself is not the weak point. In practice, the security of a protected PDF depends almost entirely on the password: a short or predictable password can be guessed by software that tries millions of options, while a long, random one cannot realistically be guessed.

How to choose a strong password

A passphrase of four or more random words is easier to remember and far harder to guess than a short string of symbols. Avoid names, birthdays, company names and anything that appears in the document itself. If you use a password manager, let it generate and store the password for you.

There is no recovery. If you forget the open password, nobody can open the document, including Docmint. Keep an unprotected original in a safe place, or store the password somewhere you trust before you send the file.

How to password-protect a PDF with Docmint

Encryption runs locally with JavaScript and WebAssembly, so your document is never uploaded.

1. Open the Protect PDF tool and drop in the PDF you want to lock.
2. Enter an open password. This is the password needed to view the file.
3. Optionally set an owner password and choose which permissions to restrict, such as printing, copying and editing.
4. Click Protect PDF. The file is encrypted with AES-256 and downloaded immediately.

To protect several PDFs at once, drop them together. The same settings are applied to each, and you receive a ZIP with all the protected files.

How should you share the password?

Never send the password in the same email as the PDF. If that mailbox is compromised or the message is forwarded, both pieces travel together and the encryption achieves nothing. Send the file by email and the password through a different channel, such as a text message, a messaging app or a phone call.

For recurring exchanges, such as monthly reports to the same client, agree on a passphrase in advance through a separate channel and change it from time to time.

Other ways to add a password to a PDF

Several tools you may already have can encrypt PDFs. Microsoft Word can encrypt a PDF when you save a document in that format, macOS Preview can add a password when exporting, and full desktop PDF editors offer detailed security settings. These are all reasonable choices. Docmint is useful when you want to protect an existing PDF on any device without installing software, or protect a batch of files with the same settings.

Common mistakes to avoid

1. Protecting the file before you have finished editing it. Compress, merge, sign or flatten first, and add the password last.
2. Relying on permissions alone for confidential information. Without an open password, anyone can read the content.
3. Using the same short password for every document you send.
4. Deleting your only unprotected copy and then losing the password.

If you often compress and protect together, describe the job to the assistant on Docmint's home page, for example "compress it and add a password", and it runs both steps as one pipeline.