How to Password Protect a PDF for Free: Windows, Mac, and Browser Methods
You are about to email a PDF that contains a contract, tax return, medical record, or other sensitive information. Sending it unprotected means anyone who intercepts the email — or anyone the recipient accidentally forwards it to — can open and read it.
Adding a password to your PDF means only people with the password can open the document. Here is how to do it for free on every platform.
Two Types of PDF Passwords
Before we start, it helps to understand that PDFs support two different types of password protection:
- Open password (Document-open password): This is the one most people need. It prevents anyone from opening the PDF without entering the password. The entire document is encrypted.
- Permissions password (Owner password): This restricts specific actions like printing, copying text, or editing. The document can still be opened without a password, but certain features are locked.
For sending sensitive documents by email, you want an open password. This encrypts the file so it cannot be read without the password.
Method 1: In Your Browser (Any Device) — Recommended
Using PDFico's Protect Tool
This is the safest free option because your PDF is encrypted entirely in your browser. The file never leaves your device — no upload to any server.
- Open PDFico's Protect PDF tool.
- Drag and drop your PDF or click to browse for it.
- Enter your chosen password.
- Click "Protect PDF."
- Download the encrypted file.
Why this method is best for sensitive documents: Unlike other online tools that upload your file to a server for processing, PDFico runs the encryption locally in your browser. Your unprotected file is never transmitted over the internet. This matters a lot when you are dealing with financial, medical, or legal documents.
Method 2: On Mac (Using Preview)
Using Preview (Built Into macOS)
- Open your PDF in Preview (double-click the file or right-click → Open With → Preview).
- Go to File → Export (not "Save" — use "Export").
- Check the box labelled "Encrypt."
- Enter and verify your password.
- Click Save.
Limitations: Preview's encryption works for basic document-open passwords, but it does not give you control over the encryption algorithm (AES-128 vs AES-256) or permission restrictions. For most personal use, this is fine.
Method 3: On Windows (Using Microsoft Word)
Using Word's PDF Export
If you have Microsoft Word installed, you can password-protect a PDF during the export process:
- Open your document in Microsoft Word.
- Go to File → Save As and choose PDF as the file type.
- Click "Options" in the save dialog.
- Check "Encrypt the document with a password."
- Enter and confirm your password.
- Click OK and Save.
Limitation: This only works if you are creating the PDF from a Word document. If you already have a PDF file, you would need to open it in Word first (which can mess up formatting) or use a different method.
Method 4: Using LibreOffice (Free, Cross-Platform)
Using LibreOffice Draw
- Download and install LibreOffice (free, open-source).
- Open your PDF in LibreOffice Draw.
- Go to File → Export as PDF.
- Click the "Security" tab.
- Click "Set Passwords" and enter your open password.
- Click OK and Export.
Advantage: LibreOffice gives you the most control — you can set both open passwords and permission passwords, and choose encryption strength. It works on Windows, Mac, and Linux.
Password Best Practices
A password-protected PDF is only as strong as the password itself. Follow these guidelines:
- Use at least 12 characters. Shorter passwords can be cracked relatively quickly with modern hardware.
- Mix character types. Combine uppercase letters, lowercase letters, numbers, and symbols.
- Avoid dictionary words. "Password123" and "Contract2025" are easily guessable. Use random combinations or a passphrase.
- Do not include the password in the same email as the PDF. Send the PDF in one email and the password through a different channel — a text message, phone call, or separate email.
Important: Never send the password in the same email as the protected PDF. If someone intercepts the email, they get both the locked file and the key. Send the password through a different channel — a text message, a phone call, or a separate messaging app.
Understanding PDF Encryption Strength
Not all PDF encryption is equal. There are different standards:
- 40-bit RC4: Old and weak. Can be cracked in minutes. Avoid this.
- 128-bit RC4: Older standard. Better than 40-bit but no longer recommended for sensitive data.
- 128-bit AES: Strong and widely compatible. Good for most use cases.
- 256-bit AES: The strongest option. Use this for highly sensitive documents if your PDF tool supports it.
Most modern tools, including PDFico, use AES encryption. This is the same encryption standard used by banks and government agencies to protect classified information.
When to Password Protect a PDF
You should add a password to any PDF you are sharing that contains:
- Tax returns or financial statements
- Contracts and legal agreements
- Medical records or health information
- ID documents (passport scans, driving licence copies)
- Employee records or HR documents
- Bank statements or account information
- Any document with personal data you would not want made public
Extra Steps for Maximum Security
Password protection is a great first step, but you can add extra layers of security:
- Compress before protecting — reduce the file size first, then add the password. This makes the file easier to email.
- Add a watermark — use PDFico's Watermark tool to add "CONFIDENTIAL" or the recipient's name. This deters screenshots and unauthorised sharing.
- Remove metadata first — clean the document's hidden data before sharing. See our guide on hidden data in PDFs.
- Use a secure sharing method — if the PDF is extremely sensitive, consider sharing it through a secure file sharing service rather than email.
PDFico's Protect tool encrypts your PDF entirely in your browser. The unprotected file is never uploaded to any server. Combine it with the Compress and Watermark tools for maximum security before sharing.