How to Password Protect a PDF — Free and Private

Whether it's a contract, a payslip, or a personal document — adding a password to a PDF takes 30 seconds and ensures only the right people can open it. Here's how to do it for free, without uploading your file anywhere.

How to add a password to a PDF

1. Open Protect PDF on RightPDFKit.
2. Upload your PDF (drag & drop or click to browse).
3. Enter a strong password — mix letters, numbers and symbols.
4. Click Protect & Download. Done.

The protected PDF uses 128-bit AES encryption — the same standard used in banking and enterprise software. Anyone attempting to open it without the password will be blocked.

Is my file safe to encrypt here?

Yes — RightPDFKit encrypts your PDF entirely inside your browser using JavaScript and the PDF-lib library. Your file is never uploaded to any server. The encryption happens on your device and the protected PDF downloads directly to you.

How to create a strong PDF password

• Use at least 12 characters
• Mix uppercase, lowercase, numbers and symbols
• Avoid common words, names or dates
• Store it in a password manager (1Password, Bitwarden)

How to remove a password from a PDF

Use the Unlock PDF tool — upload the protected PDF, enter the correct password, and download an unprotected version. Only someone who knows the password can remove it.

What if I forget my PDF password?

If you forget the password, the PDF cannot be recovered — that's the nature of strong encryption. Always store passwords somewhere safe before protecting important documents.

Why the password matters more than the encryption

AES-256 encryption is mathematically unbreakable by brute force at current computing power. A modern GPU cluster attempting every possible 256-bit key would take longer than the age of the universe to succeed. The encryption itself is never the weak point — the password always is.

A short, common password ("password1", "company2024", your pet's name) can be cracked in seconds by dictionary attacks. The algorithm protecting the file is irrelevant if the password is guessable. This is why password strength determines the real-world protection of an encrypted PDF — not the encryption standard.

How to choose a strong PDF password

• Length over complexity — a 16-character random password is vastly stronger than an 8-character one with special characters. Every extra character multiplies the search space exponentially.
• Avoid dictionary words — "Tr0ub4dor&3" is famously weak despite looking complex. Random character strings are stronger.
• Use a password manager — generate and store PDF passwords in 1Password, Bitwarden or similar. Never in a text file next to the PDF.
• Never reuse — if the same password protects multiple PDFs and one is compromised, all are exposed.
• Send the password separately — email the PDF, text the password. Never in the same message.

When to use password protection vs other security measures

What password protection does not protect against

Understanding the limits is as important as understanding the benefits:

• Screenshots — anyone who opens the PDF with the password can screenshot every page. Password protection prevents opening, not viewing by authorised parties.
• Printouts — once opened, the document can be printed unless you also set print restrictions via a permissions password.
• Weak passwords — a poorly chosen password provides minimal real protection despite the AES-256 label.
• Device compromise — if the recipient's device is compromised, the attacker sees whatever the recipient sees.