What PDF password protection does
An open password encrypts the PDF so a compatible reader must receive the password before it can display the document. This is different from permission flags that merely request restrictions on printing, copying or editing. Reader support for those permissions varies, while encryption protects the document bytes at rest and in transit as an attachment.
Why protect locally
Uploading an unprotected confidential file to a remote service so that the service can encrypt it creates an avoidable exposure before protection is applied. A local tool reads the source, performs the encryption on-device and creates the protected output without sending the document or password to the application server.
Choose a password people cannot guess
Use a long, unique passphrase rather than a short word with substitutions. Four or more unrelated words with extra length are easier to type accurately and harder to brute-force than a memorable name or date. Do not reuse an account password. A password manager can generate and store a stronger random value when the recipient has a safe way to receive it.
Step by step
- Open Protect PDF.
- Add the source file; it remains in the browser.
- Enter and confirm a strong, unique password.
- Create and download the encrypted copy.
- Close the original tab and open the output in a separate PDF reader.
- Confirm that a wrong password fails and the intended password succeeds.
Share the password separately
Do not put the PDF and its password in the same email or chat message. Send the document through one channel and communicate the password through another—for example, email the file and call the recipient. Confirm the recipient’s identity before disclosing the password, especially for payroll, legal, identity or health information.
Keep an accessible source
Store an unencrypted original only where it is appropriate and protected by device or repository controls. Losing the PDF password can make the encrypted copy unrecoverable. For organizational records, document who owns the password, how recovery works and when access should expire instead of relying on one person’s memory.
Test compatibility before sending
Open the output in the reader the recipient is likely to use. Check every page, attachment and form. If the source was already encrypted, use Unlock PDF with the known password first, verify the intermediate copy, then protect it with the new password. Bindery does not crack unknown passwords.
Encryption is not redaction or access governance
A recipient who knows the password can view and potentially redistribute the content. Password protection does not remove metadata, revoke a downloaded copy, prove who opened it or safely hide selected words. Use redaction to remove content, metadata cleaning for document properties, and a managed sharing system when audit trails or revocation are required.