AM Jarvis

Protect PDF: Add a Password With AES-256 Encryption

Add an open password to a PDF with AES-256 encryption, so only people who know the password can read it.

Protect PDF with a password

Drop a PDF here or click to choose PDF files. Checking the converter…

Your file is sent over HTTPS to our conversion server, converted, and deleted: the upload as soon as the job ends, the result 30 minutes after it is ready. Nothing else is sent.

In short

Drop a PDF into the box, type a password twice, check the strength meter and click Protect PDF. You download a copy encrypted with AES-256 that asks for the password before it opens. Share the password through a different channel than the file, and keep your original: a forgotten password cannot be recovered.

On this page
  1. How to password protect a PDF
  2. Finish the document before you protect it
  3. What the protection does
  4. When a password is the right tool
  5. Choosing a password that holds up
  6. Sharing the password safely
  7. Where your file and password go
  8. Worked example: monthly client reports
  9. Troubleshooting

Email attachments get forwarded, cloud links get shared further than intended, and laptops get lost. A password on the PDF itself protects the document wherever the file ends up: without the password, the content is encrypted and unreadable. It is a sensible step for invoices with bank details, payroll documents, contracts, client reports and anything with personal data.

This tool adds an open password to your PDF using AES-256, the strongest encryption the PDF standard offers. Anyone who opens the file is asked for the password first.

How to password protect a PDF

  1. Drag your PDF onto the box above or click to choose it. If the file already has a password or restrictions, a note tells you; unlock it first with Unlock PDF if you want to change the password.
  2. Type a password in Password and the same password in Type it again. Use Show to check for typos.
  3. Watch the strength meter. It rates the password as Weak, Fair, Good or Strong from its length and the mix of characters. The tool needs at least 6 characters; aim for Good or Strong.
  4. Click Protect PDF. You see the upload, your place in line and the progress.
  5. The protected copy downloads when Your file is ready appears. Use Download PDF if it does not start.
  6. Open the new file once and type the password, to be sure it works before you send it.

Finish the document before you protect it

Once a PDF is encrypted, most tools need the password before they can change it. Do the other jobs first:

  • Sign it with Sign PDF or fill in form fields.
  • Combine it with attachments such as terms or a price list using Merge PDF, so the recipient types one password, not three.
  • Shrink it with Compress PDF if it is close to an email size limit. Encryption barely changes the file size, so a 30 MB file stays 30 MB.
  • Name it well. The protected copy keeps a version of your file name, and the name is visible without the password. Do not put personal details in it.

What the protection does

  • Encrypts the content. Text, images and fonts are encrypted with a 256 bit AES key derived from your password. Without it, the file cannot be read.
  • Asks for the password on opening. In every PDF reader: Adobe Acrobat Reader, Chrome, Edge, Firefox, Preview on a Mac and the viewers on iPhone and Android.
  • Does not add separate print or copy restrictions. This tool sets an open password. Once someone has the password, they can read the document fully.
  • Works in current readers. AES-256 is supported by PDF readers released in the last ten years or so. A very old reader may not open the file at all.

When a password is the right tool

A password on the file is best when the PDF has to leave your control: an email to a client, a document uploaded to a portal, a file on a USB stick. It protects the content even after it is forwarded, copied or stored somewhere you cannot see.

It is less useful inside systems that already control access. A file in a shared drive folder that only two people can open does not gain much from a password, and it adds friction every time someone opens it. For documents that change often, sharing a link with access rights is usually easier, because you can revoke it later. A password on a PDF, by contrast, cannot be taken back once the file and password have both been sent.

Choosing a password that holds up

AES-256 itself cannot be broken in practice, so the password is the weak point. An attacker with the file can try passwords offline as fast as their computer allows. That makes length the most important factor:

PasswordMeterVerdict
march2026WeakA word plus a date, guessed quickly
Invoice#58FairShort, follows a common pattern
harbor-lamp-velvet-42StrongFour unrelated words plus digits: long and easy to say on the phone
t9#Vq2%mLx8$wR4pStrongRandom and long, but hard to share by voice

A passphrase of four or more unrelated words is usually the best choice for a PDF, because you often need to tell someone the password. The free password generator creates random passphrases and passwords and shows their estimated strength. Avoid anything printed on the document itself, such as the invoice number, a date or the client's name.

Sharing the password safely

Encryption only helps if the password does not travel with the file. If both are in the same email, anyone who gets that email can open the PDF.

  • Send the PDF by email and the password by text message, phone call or a messaging app.
  • For a regular client, agree on a passphrase once, in person or by phone, and reuse it for that client's documents.
  • Never put the password in the file name or the email subject.

Two practical notes: some company email filters hold back encrypted attachments because they cannot scan them, so tell the recipient to expect the file. And the recipient's phone may need the password typed each time, so a passphrase they can type easily saves frustration.

Where your file and password go

The PDF and the password are sent together over HTTPS to our conversion server, which encrypts the file. The password is part of this one job and goes away with it. The upload is deleted as soon as the job ends, and the protected copy 30 minutes after it is ready. Nothing else is sent. Because the server sees the unprotected file for a moment, very sensitive documents may be better protected locally, for example with File > Export as PDF and Encrypt in Preview on a Mac, or with Adobe Acrobat.

Worked example: monthly client reports

An agency sends each client a PDF report with rankings, traffic and ad spend every month. For each client, it agrees a passphrase once by phone, protects each month's report with it here, and sends the file by email with a short note that the password is the usual one. Clients get the same habit every month, and a forwarded email does not expose the numbers. If those reports include keyword positions, AM Jarvis Rank Tracker records Google positions daily by country and city, with history and drop alerts, so the report numbers come from one place.

Troubleshooting

"The two passwords do not match"

The two boxes differ. Click Show, compare them, and retype.

The PDF already has a password

Unlock it first with its current password, then protect the unlocked copy with the new one.

The recipient cannot open the file

Check that they are typing the exact password, including capitals. If they use a very old PDF reader, ask them to open it in a browser such as Chrome or Edge, or update the reader.

The file is refused as too large

The size limit is shown in the drop box. Compress the PDF first, or split it into parts that each get the same password.

"The upload did not go through"

The page could not reach the conversion server. Check your connection and click Try again. If a message says the converter is unavailable, it is paused for a moment: click Check again after a minute or two.

You forgot the password

It cannot be recovered, by us or anyone else. Use your unprotected original and protect it again. That is why the tool never replaces your original file.

Frequently asked questions

How secure is a password protected PDF?

With AES-256 and a long password, the content cannot be read without the password in any practical amount of time. The password is the weak point: short or guessable passwords can be found by trying many options, so use a passphrase of four or more random words.

Can I recover a forgotten PDF password?

No. The password is not stored anywhere, and AES-256 cannot be bypassed. Keep the unprotected original in a safe place, so you can create a new protected copy if a password is lost.

Will the recipient need special software?

No. Adobe Acrobat Reader, Chrome, Edge, Firefox, Preview on a Mac and the built-in viewers on iPhone and Android all open AES-256 protected PDFs after the password is typed. Only very old readers may not support it.

Can I stop people from printing or copying the PDF?

This tool adds an open password only. Once a reader has the password, they can read, print and copy. Print and copy restrictions are honored only by some PDF readers and are easy to remove, so they should not be relied on for security.

Is my password sent to your server?

Yes, it has to be, because the server encrypts the file with it. It travels over HTTPS with the file, is used for that one job and goes away with it. The upload is deleted when the job ends and the protected copy 30 minutes after it is ready.

How do I change the password on a protected PDF?

Remove the current password with Unlock PDF, typing the old password, then protect the unlocked copy here with the new password. Delete the unlocked copy afterwards, and tell the recipients the new password through a separate channel.