PDFree › Blog › How to Password Protect a PDF

How to Password Protect a PDF
(Free, AES-256, No Upload)

3-minute read · Updated June 2026

Need to lock a PDF with a password before emailing it? Encrypting a PDF ensures that only someone who knows the password can open it. Here's how to password protect any PDF for free in under one minute — with AES-256 encryption, and without uploading your document anywhere.

Step-by-step: add a password to a PDF using PDFree

1. 1
   Open PDFree Protect — no login needed

   Go to pdfree.io/protect-pdf/. The tool runs in your browser — nothing to install or create an account for.

2. 2
   Add your PDF

   Click "Choose files" or drag your PDF onto the page. The file is loaded into browser memory only — not uploaded to any server. Your document never leaves your device.

3. 3
   Type a strong password

   Enter the password you want to use. For strong protection: use at least 12 characters, mix uppercase and lowercase letters, add numbers and symbols. The password is processed entirely in your browser — PDFree never sees it.

4. 4
   Click "Protect PDF" and download

   The AES-256 encrypted PDF downloads to your device immediately. You can now email or share it — only someone who knows the password can open it.

What does PDF password protection actually do?

When you add a password to a PDF, the document is encrypted using AES-256 — the same encryption standard used by banks and government agencies. The encryption scrambles the file contents so that without the correct password, the file appears as random bytes that cannot be read, copied, printed, or extracted.

Important: a password-protected PDF is still a standard PDF file. Anyone with a modern PDF viewer (Adobe Acrobat, macOS Preview, Foxit, any browser) can open it — they will just be prompted for the password first.

When to use PDF password protection

• Contracts and legal documents: Before emailing a signed contract, encrypt it and share the password by phone or a separate message.
• Tax returns and financial statements: Bank statements, payslips, and tax documents contain sensitive data — encrypt before storing in cloud folders or sending to accountants.
• Medical records: Patient records and health documents should be restricted to authorized readers.
• Passport scans and ID copies: Identity documents are prime targets for theft — always encrypt before sending by email.

Is it safe to encrypt a PDF on a website?

With most online PDF tools, no — they upload your document to their servers to process it. Your password and your confidential PDF are transmitted to a third party.

PDFree is different. The entire encryption process runs in your browser using JavaScript and WebAssembly (pdf-lib). Your PDF and your password are never transmitted anywhere. PDFree literally cannot see either — the encryption keys are generated and applied entirely on your device. This is verifiable: PDFree is open source (GNU AGPLv3).