How to put a password on a PDF before you send it
By the PdfDady team · Updated · 6 min read
To password protect a PDF, you encrypt it with a password of your choice. Anyone who opens it then has to type that password before they see anything. Do it before the file leaves your hands, and send the password by a different route from the file itself.
Our Protect PDF tool encrypts the file with AES-256 in your browser, so neither the PDF nor the password is uploaded. The steps take a minute. The part that actually decides how safe the file is, is the password you pick and how you share it, so most of this guide is about that.
When a password is worth adding
A password protects a document while it travels and while it sits in places you don't control: someone's inbox, a shared drive, a phone that gets lost. It's worth adding when you send:
- salary slips, Form 16 or ITR acknowledgements to a landlord, lender or new employer,
- bank statements for a loan or visa application,
- copies of your Aadhaar, PAN or passport that have to go by email,
- medical reports, or anything with your address, date of birth and account numbers together.
You have likely received files like this. Banks send statements locked, and UIDAI's e-Aadhaar PDF opens only with a password made from your name and year of birth. The same idea works for files you send.
Add the password
- Open Protect PDF and add your PDF (one file, up to 100 MB, not already password-protected).
- Type your password twice. The tool warns you if it's short.
- Optionally, restrict printing, copying or editing (more on this below).
- Press Protect PDF and download
protected.pdf. - Open
protected.pdfonce yourself, with the password, to check it works before you send it.
The content isn't changed. Text, links and bookmarks are all kept. Only the file is encrypted.
Keep your original, unprotected file somewhere safe on your own device. If you forget the password, the protected copy can't be opened, and neither we nor anyone else can recover it.
Choosing a password that does the job
AES-256 is strong encryption. What protects your file in practice is the password, because someone with a copy of the file can try guesses as fast as their computer allows, with nobody to stop them after five wrong attempts.
That makes some popular choices weak:
| Weak choice | Why |
|---|---|
123456, password, qwerty | First on every guessing list |
| Your name plus birth year | Anyone with your ID copy knows both |
| Your mobile number | Often printed on the same document |
A short word, even with a symbol (Ravi@1) | Short passwords fall quickly to guessing |
What works better is length. NIST, the US standards body whose password guidance is widely followed, now asks for at least 15 characters where a password is the only protection, and tells systems to accept spaces and long passwords rather than force a mix of symbols. Three or four unrelated words, like mango kettle river pencil, is long, easy to type on a phone and hard to guess. Avoid famous phrases, film dialogues and song lines.
If you send documents to the same person regularly, such as your CA, agree on a long password once, in person or on a call, and use it for every file.
Share the password separately
The most common mistake is putting the password in the same email as the attachment. Anyone who gets into that inbox, or receives the email by mistake, gets both.
Better options:
- Email the file, and send the password by SMS or a phone call.
- Send the file on WhatsApp, and tell the password on a call.
- Agree the password in advance, so nothing about it is ever written next to the file.
Also avoid writing a hint in the email ("password is your PAN"). If the person knows it, they don't need the hint. If a stranger reads it, the hint is all they need.
Restrictions: printing, copying and editing
Protect PDF can also block printing, copying or editing for people who open the file with the normal password. You set a second, separate permissions password that lets you lift those limits later.
Be realistic about what this does. Most PDF readers respect the restrictions, but some software ignores them, and anyone can photograph a screen. Use restrictions to discourage casual copying of something like a draft agreement, not to protect a secret. The open password is the real protection.
If you want people to read a document but you're worried about the copy being reused, a visible mark does more than a restriction. Our Add Watermark tool can stamp "For KYC only" or "Copy for home loan application, Nov 2026" across each page. See our guide on watermarking documents before sharing. Add the watermark first, then the password, because the watermark tool doesn't accept password-protected files.
What a password doesn't do
- It doesn't protect the file after it's opened. The person you send it to can save an unprotected copy, print it or forward it. Send sensitive documents only to people you trust with them.
- It doesn't hide part of the document. If the recipient only needs your name and the last four digits of an account, remove the rest with Redact PDF before you protect it.
- It doesn't work everywhere. Many upload portals can't open encrypted PDFs and will reject them or show blank pages. For portal uploads, use the unprotected file and delete any extra copies afterwards.
Problems and fixes
The recipient says the password is wrong. Passwords are case-sensitive, and phone keyboards often capitalise the first letter or add a space. Spaces in a passphrase count too. Tell them exactly what to type, including spaces.
The file won't open on an old computer. AES-256 is supported by current PDF readers, but very old ones (from before Adobe Reader X, released in 2010) may not open it. Ask the recipient to open it in a current browser or PDF app.
The tool refuses the file. It is already password-protected. If it's yours and you know the password, remove it first with Unlock PDF, then add your own.
You need to change the password later. Unlock the file with the current password, then protect the unlocked copy with the new one.
Questions people ask
Can I password protect a PDF on my phone?
Yes. Protect PDF runs in your phone's browser. Add the file from your storage, set the password and save protected.pdf.
Is AES-256 safe enough for bank documents?
The encryption is strong. Whether the file is safe depends on the password. A long passphrase shared separately is good protection. A birth date is not.
Can PdfDady recover a forgotten password?
No. The password is never stored or sent anywhere, and there is no way to recover it. Keep your original file.