Password Protect a PDF — Encrypted in Your Browser
Encrypt your PDF with a password to prevent unauthorized access.
How to password protect a PDF — 3 steps
- 1
Add your PDF
Drop the document into the box above — a contract, statement, report, or anything meant for limited eyes.
- 2
Set a strong password
Choose the password that will be required to open the file. Longer passphrases beat short complex ones.
- 3
Download the encrypted file
Save the protected PDF. Anyone opening it — in any viewer — will need the password you set.
What PDF encryption protects — and how to use it well
Password-protecting a PDF encrypts the file's contents, so the protection travels with the document: it holds on email servers, in cloud storage, on USB sticks, and on whatever laptop the file eventually lands on. That makes it the standard way to send salary letters, contracts, medical documents, and financial statements over channels you don't fully control.
The protection is real encryption, not a soft lock — without the password, the content is unreadable. That cuts both ways: there is no recovery if the password is forgotten, so store it somewhere dependable. And share it over a different channel than the file itself — password in a text message, document by email, never both in one place.
Encrypting locally closes a loop that server-based tools leave open: it would be self-defeating to upload an unencrypted document to a third party in order to make it confidential. Here the file is already encrypted before it ever touches a network.
Your files never leave your device
Both your document and the password you choose stay in your browser — the file is encrypted before it ever leaves your device, not after.
Most online PDF sites upload your document to their servers, process it there, and keep a copy for minutes, hours, or longer. PilotPDF works differently: the page downloads a small processing engine into your browser, and your file is opened and edited in your device's memory using WebAssembly. Nothing is transmitted, so there is nothing for a server to store, leak, or scan. You can even disconnect from the internet after the page loads and the tool keeps working.
Read more about how this works in our privacy-by-design explainer.