Password Protect a PDF in Your Browser
Add an opening password to a PDF, confirm its strength, and download a separate encrypted copy. Keep the original file safe.
How to password protect a PDF — 3 steps
- 1
Add your PDF
Drop the PDF into the box above. Keep an unprotected copy before creating the protected version.
- 2
Set a strong password
Enter a password and confirm it. The tool checks password strength before it creates the encrypted PDF.
- 3
Download the encrypted file
Download the new file and share the password separately from the PDF.
User passwords and owner permissions
The user password is the password needed to open the protected file. The editor asks you to enter it twice and checks its strength before processing. A separate owner password is generated internally when you do not provide one; it is not exposed as a second field in the current editor.
An owner password normally controls permissions such as printing, copying, and editing. This implementation writes permissions that allow print, modify, copy, and form annotation operations, so the tool should be understood primarily as opening-password encryption rather than a way to disable each of those actions.
The current protection flow rebuilds the pages as JPEG images before applying jsPDF encryption. That means the protected output may not preserve the original PDF text layer, bookmarks, forms, annotations, or metadata exactly. Check the downloaded copy in the viewer your recipient will use.
What happens if the password is forgotten
There is no password recovery service in this browser-based tool. If the opening password is lost, the protected file may not be usable. Store the password in a trusted password manager or another safe place.
Send the PDF and its password through separate channels. For example, send the file by email and the password by phone or a separate message. Keep the original unprotected PDF so you have a clean source if you need to create another copy.
PDF encryption compatibility depends on the reader receiving the file. Test the result before sending it, particularly when the recipient uses an older PDF application or a document workflow that expects selectable text and editable forms.
Your files never leave your device
The PDF and password are handled in your browser. The file is not uploaded to our server during protection.
Most online PDF sites upload your document to their servers, process it there, and keep a copy for minutes, hours, or longer. PilotPDF works differently: the page downloads a small processing engine into your browser, and your file is opened and edited in your device's memory using WebAssembly. Nothing is transmitted, so there is nothing for a server to store, leak, or scan. You can even disconnect from the internet after the page loads and the tool keeps working.
Read more about how this works in our privacy-by-design explainer.