How to Password Protect a PDF Free 2026

You have a PDF with sensitive data and need to lock it down before sending. Maybe it’s a contract, tax return, or medical record. Whatever the case, you shouldn’t need to pay $240/year for Adobe Acrobat just to add a password.

I tested 9 different tools over the past two weeks – online services, desktop apps, command-line utilities, and built-in OS features. Some were surprisingly good. Others claimed “military-grade encryption” but used outdated 128-bit RC4 that anyone can crack in 5 minutes.

If you’re working with PDFs regularly, check out our complete roundup of the best free PDF editors – it covers editing, annotating, and all the basics. This guide focuses specifically on password protection and encryption.

Quick Comparison Table

Tool	Type	Encryption	File Limit	Batch	Best For
Smallpdf	Online	AES 128-bit	2/day free	No	Quickest option
iLovePDF	Online + App	AES 256-bit	1/day free	Pro only	Mobile users
PDF24	Online + Desktop	AES 256-bit	Unlimited	Yes	No limits, no signup
LibreOffice	Desktop	AES 256-bit	Unlimited	Via macro	Offline privacy
PDFtk	Command-line	AES 128/256-bit	Unlimited	Yes	Developers, automation
Preview (Mac)	Built-in	AES 256-bit	Unlimited	No	Mac users, zero install
Microsoft Word	Desktop	AES 256-bit	Unlimited	No	Already have Office
Google Docs	Online	None (sharing only)	N/A	No	Not recommended
QPDF	Command-line	AES 256-bit	Unlimited	Yes	Linux users, scripting

What You Need to Know About PDF Encryption

Before picking a tool, here’s the thing: not all PDF passwords are equal. There are two types, and mixing them up is a common mistake.

Open password (user password) blocks the file from being opened at all. Without the password, the PDF is unreadable. This is what most people mean when they say “password protect.”

Permissions password (owner password) lets anyone open the PDF but restricts printing, copying, or editing. Sounds useful, right? Problem is, these restrictions can be removed with free tools in about 30 seconds. I’m not exaggerating. If you need real security, always set an open password.

Encryption strength matters too. AES 256-bit is the current standard. Some tools still default to 128-bit AES or even RC4 encryption from the early 2000s. RC4 with 40-bit keys? Crackable in under a minute on a laptop from 2020.

PDF24 – Best Overall (Free, No Limits)

PDF24 is the one I keep coming back to. German-made, completely free, no account needed, no daily limits. It feels too good to be true, but I’ve been using it for about 8 months and the catch is… there isn’t one. They make money from their business tools.

How to use it

1. Go to pdf24.org and click “Protect PDF”
2. Drop your file (or click to upload)
3. Type your password
4. Hit “Protect PDF” and download

The whole process takes maybe 15 seconds. Files are deleted from their servers after one hour. They also have a desktop version for Windows that works offline if you don’t want to upload anything.

I ran a test: protected a 45MB PDF with PDF24, then tried opening it in Adobe Reader, Chrome, Firefox, and Preview on Mac. The password prompt appeared in all four. Encryption: AES 256-bit. Solid.

The desktop app adds batch processing. I threw 23 invoice PDFs at it, set one password, and had them all locked in under a minute. Try doing that with most online tools.

What’s not great

The interface looks like it was designed in 2015. Functional but not pretty. The online version doesn’t show you the encryption level before you download, so you have to verify with another tool if you’re paranoid about it.

Smallpdf – Fastest for One-Off Use

Smallpdf’s protect tool is the most polished interface I tested. Upload, type password, download. No settings to fiddle with, no options to confuse you. It just works.

The free tier gives you 2 document actions per day. That’s total across all Smallpdf tools, so if you used one to compress a PDF earlier, you only have one left.

One thing I noticed: Smallpdf uses AES 128-bit encryption by default, not 256-bit. For most purposes this is fine – 128-bit AES is still considered secure and won’t be cracked anytime soon. But if you’re protecting classified-level documents, you might want a tool with 256-bit.

Processing speed was impressive. A 78MB PDF (a scanned architectural plan) was encrypted and ready to download in 11 seconds. Files are deleted from their servers after one hour.

iLovePDF – Best for Mobile

iLovePDF does AES 256-bit encryption and works well across devices. Their mobile app on both iOS and Android handles password protection natively, which is useful when you need to lock a PDF from your phone before emailing it.

Free tier: 1 task per day (more restrictive than Smallpdf). The premium plan runs $4/month billed annually, which is reasonable if you do this regularly.

I like that iLovePDF lets you set both an open password and a permissions password separately. Most free tools only offer the open password. If you need to send a PDF that anyone can view but nobody can print, this is your tool. Just remember what I said earlier about permissions passwords being bypassable.

The one annoyance: on mobile, the app pushes premium upgrade prompts after every action. Not aggressive enough to be a dealbreaker, but noticeable.

LibreOffice – Best Offline Desktop Option

LibreOffice is free, open-source, and runs on Windows, Mac, and Linux. The PDF export has built-in encryption that most people don’t even know about.

How to protect a PDF with LibreOffice

1. Open the PDF in LibreOffice Draw (yes, Draw – it handles PDFs)
2. File > Export as PDF
3. Click the “Security” tab
4. Click “Set Passwords” and enter your open password
5. Optionally set a permissions password and choose restrictions
6. Click Export

The encryption is AES 256-bit. Your file never touches the internet. For sensitive financial or medical documents, this matters.

There’s a catch, though. LibreOffice re-renders the PDF when it opens it. If your original PDF has complex formatting, fancy fonts, or form fields, the output might look slightly different. I tested with 5 different PDFs: 3 looked identical, 1 had minor font spacing changes, and 1 (a form-heavy tax document) had some alignment shifts.

For simple text documents and scanned pages, it works perfectly. For heavily formatted files, test before sending.

Preview on Mac – Zero Install Required

If you’re on a Mac, you already have this. Preview can encrypt PDFs natively, and honestly, it’s one of the best-kept secrets in macOS.

Steps

1. Open the PDF in Preview
2. File > Export
3. Check the “Encrypt” checkbox
4. Type your password twice
5. Save

That’s it. AES 256-bit encryption. No software to install, no uploads, no limits. Works on any size file.

The limitation: Preview only does open passwords. You can’t set permissions passwords or restrict printing/editing independently. For most people sending sensitive files, the open password is all you need anyway.

One quirk I found: if you use File > Save instead of File > Export, Preview overwrites the original file. Always use Export and save to a new filename. I learned this the hard way with an invoice I then had to re-download.

Microsoft Word – If You Already Have Office

This method is a bit roundabout, but if you have Word 2016 or later (including Microsoft 365), it works.

1. Open the PDF in Word (it converts to editable format)
2. File > Save As > choose PDF
3. Options > check “Encrypt the document with a password”
4. Enter your password

Same caveat as LibreOffice: Word converts the PDF to its own format first, then re-exports. Formatting changes are possible. In my testing, Word actually handled complex layouts better than LibreOffice, but both occasionally shifted things around.

The encryption is AES 256-bit. No file size limits. Works offline.

I wouldn’t go out and buy Office just for this, obviously. But if it’s already on your machine, this is faster than opening a browser.

PDFtk – Best for Developers and Automation

PDFtk (PDF Toolkit) is a command-line tool that’s been around forever. If you need to password-protect PDFs as part of a script or automated workflow, this is the standard choice.

pdftk input.pdf output protected.pdf user_pw mypassword owner_pw ownerpass encrypt_128bit

Or with AES 256-bit (PDFtk Server, the commercial version):

pdftk input.pdf output protected.pdf user_pw mypassword owner_pw ownerpass encrypt_aes256

The free version (PDFtk Free) supports 128-bit encryption. The Server version ($3.99 one-time) adds AES 256-bit. Both work on Windows, Mac, and Linux.

For batch processing, a simple bash loop handles hundreds of files:

for f in *.pdf; do pdftk "$f" output "protected_$f" user_pw secretpass; done

I used this to protect a folder of 147 client reports in about 40 seconds. Doing that manually with an online tool would have taken all afternoon.

QPDF – Best for Linux Users

QPDF is another command-line option, open-source, and it handles AES 256-bit encryption out of the box with no paid tier.

qpdf --encrypt mypassword ownerpass 256 -- input.pdf protected.pdf

It’s in the default repositories for most Linux distros. sudo apt install qpdf on Ubuntu/Debian, brew install qpdf on Mac.

QPDF is more actively maintained than PDFtk and handles edge cases better in my experience. Corrupted PDFs that made PDFtk choke were processed fine by QPDF. It also preserves the original PDF structure exactly, so no formatting surprises.

Not gonna lie, the syntax is slightly less intuitive than PDFtk, but you’ll use it once, save the command, and copy-paste it forever.

Google Docs – Why It Doesn’t Work

I’m including this because “password protect PDF Google Docs” gets a ton of searches. Here’s the reality: Google Docs cannot password-protect PDFs. You can restrict sharing permissions on Google Drive, but that’s tied to Google accounts, not actual PDF encryption. Anyone who downloads the file gets an unprotected PDF.

If someone sends you a “protected” PDF through Google Drive, it’s not encrypted. The sharing settings just limit who can access it on Drive. Once downloaded, it’s wide open.

For actual encryption, use any of the other tools in this guide. If you’re a Google Workspace user, your best bet is downloading the PDF, protecting it with a tool that doesn’t require Adobe, and re-uploading.

How to Choose the Right Tool

Here’s my honest recommendation based on two weeks of testing:

For most people: PDF24. Free, unlimited, AES 256-bit, no account needed. The interface isn’t flashy but it gets the job done. I’d start here and only look elsewhere if you hit a specific limitation.

For one quick file: Smallpdf. Faster interface, but limited to 2 uses/day and only 128-bit encryption.

For sensitive documents: LibreOffice, Preview (Mac), or QPDF. Your file stays on your computer. Period. No upload, no server, no trust required.

For bulk processing: PDFtk or QPDF via command line. Nothing else comes close for handling dozens or hundreds of files.

On your phone: iLovePDF app. It’s the only mobile option that doesn’t feel broken.

Tips for Strong PDF Passwords

The encryption is only as good as the password. A few things I’ve learned:

Use at least 12 characters. Mix uppercase, lowercase, numbers, and symbols. “Contract2026!” is weak. “kT9$mR2!pQ4&xL” is strong but impossible to remember. A passphrase like “correct-horse-battery-staple” (4+ random words) is both secure and memorable.

Don’t send the PDF and the password through the same channel. Email the PDF, text the password. Or use a password manager to share it. Sending both in the same email thread defeats the purpose.

Keep a record of which passwords protect which files. Losing the password on an AES 256-bit encrypted PDF means losing the file. There’s no recovery. I’ve seen people lock themselves out of their own tax documents this way.

FAQ

Can I password protect a PDF for free?

Yes. PDF24, LibreOffice, Preview (Mac), QPDF, and PDFtk Free all let you add password protection at no cost. Online tools like Smallpdf and iLovePDF also work free with daily limits (1-2 files). For the most comprehensive free PDF toolkit, see our guide to the best free PDF editors.

Is password-protected PDF actually secure?

With AES 256-bit encryption and a strong password (12+ characters), yes. It’s the same encryption standard used by banks and governments. Older RC4 encryption or short passwords are vulnerable. Always verify your tool uses AES-256 and pick a password that isn’t guessable.

What is the difference between an open password and a permissions password?

An open password prevents the PDF from being opened without it. A permissions password lets people open and read the file but restricts printing, copying, or editing. The catch: permissions passwords can be removed with freely available tools, so they don’t provide real security. Always use an open password for sensitive files.

Can I password protect a PDF on my phone?

Yes. iLovePDF and Smallpdf both have mobile apps for iOS and Android. You can also use any online tool through your phone’s browser. iLovePDF’s app is the most reliable mobile option I tested.

Is it safe to upload sensitive PDFs to online tools?

Reputable tools like Smallpdf, iLovePDF, and PDF24 use HTTPS for transfer and delete files within 1-2 hours. For highly sensitive documents (legal, medical, financial), use offline tools instead. LibreOffice, Preview on Mac, PDFtk, and QPDF all work without uploading anything. If you need to split a sensitive PDF before protecting it, use an offline tool for that step too.