Open password vs permissions password: which one do you need?
A PDF can carry two different passwords, and they do very different jobs.
The open password (Adobe calls it the user password) encrypts the file. Nobody can see the content without typing it. This is the one people mean when they say they want to lock a PDF. When it is set with AES-256, the content is scrambled with a key derived from the password, and there is no practical way to read the file without it.
The permissions password (the owner password) does not stop anyone from opening the file. It only asks PDF readers to block printing, copying text or editing. The content itself is not hidden, and many tools ignore the flag entirely. Treat it as a polite request, not as security.
- You want to keep the content private: set an open password.
- You want to discourage edits to a form or a contract, but anyone may read it: set a permissions password, and know its limits.
- Acrobat Pro lets you set both at once. If a tool offers only one password, the open password is the one that matters.
How to password protect a PDF online for free
If you do not have Acrobat and you are on Windows, a phone or a Chromebook, the quickest route is a browser tool. Protect PDF on DocGopher locks a PDF with a password using AES-256 encryption, the same standard Acrobat uses for its strongest setting. It is free, needs no sign-up and adds no watermark. Files up to 300 MB are processed in memory on DocGopher's own servers and deleted after 30 minutes.
Keep your unprotected original in a safe folder and send only the protected copy. If you lose the password, the original is your only way back.
- Open Protect PDF in any browser, on a computer or a phone.
- Drop the PDF on the page, or pick it from your files. You can add up to 50 files in one batch.
- Type the password. Use at least 12 characters, with a mix of words, numbers and symbols you can still read aloud over the phone.
- Start the protection and download the locked PDF.
- Open the downloaded file once to confirm it asks for the password before showing anything.
How to lock a PDF with Preview on a Mac
Every Mac can encrypt a PDF without extra software. Preview does it when you export.
On macOS Ventura and later, Preview also has File, then Edit Permissions. That dialog lets you set the open password and, separately, an owner password with checkboxes for printing, copying and changes.
Preview's encryption is standard, so the locked file opens in Acrobat, Chrome, Edge and on an iPhone with the same password.
- Open the PDF in Preview.
- Choose File, then Export.
- Leave the format as PDF and check the Encrypt box.
- Type the password twice and click Save. Give the file a new name so you keep the original.
How to password protect a PDF from Word, and what Windows cannot do
If the document starts life in Word on Windows, you can add the password at the moment you create the PDF.
Word for Mac does not offer this checkbox in its PDF export. Save the PDF first, then encrypt it with Preview or Protect PDF.
Windows cannot do this on its own: Microsoft Print to PDF has no password option, Edge cannot add one, and the free Acrobat Reader opens protected PDFs but cannot create them. Google Docs has the same gap. In all of these cases, make the PDF first and then protect it.
If the file you want to lock is still a Word document or a spreadsheet, you do not have to convert it. Password protect Word and Password protect Excel put an AES-256 password on a DOCX, PPTX or XLSX so it opens only for the people who know it.
- In Word, choose File, then Save As, and pick PDF as the file type.
- Click Options in the save dialog.
- Check Encrypt the document with a password, click OK, and type the password twice.
- Save. The PDF asks for the password the moment someone opens it.
How to remove a password from a PDF you can open
Sooner or later a protected PDF becomes a nuisance, for example when a form has to be merged with others and the merge tool refuses encrypted files. As long as you know the password, removing it takes a minute.
Online: Unlock PDF removes the password from a PDF you can open. You upload the file, enter the password once, and download a copy that opens without it. The original stays untouched on your computer. With what you already have:
- On a Mac: open the PDF in Preview, type the password, choose File, then Export, make sure Encrypt is unchecked, and save under a new name.
- In Chrome or Edge: open the PDF, type the password, press Ctrl+P (Cmd+P on a Mac), choose Save as PDF as the destination, and save. The printed copy has no password. It also loses bookmarks and form fields, so use Preview or an online tool for forms.
- In Acrobat Pro: choose File, then Properties, open the Security tab, and set Security Method to No Security.
Can you remove a password you do not know?
No honest tool can promise that. An open password set with AES-256 is real encryption. Unlock PDF, Preview and Acrobat all need the correct password first; they remove it, they do not crack it. Sites that claim to break any PDF password either try dictionary guesses, which only work on short and obvious passwords, or they do nothing at all and keep your file.
A permissions-only password is different. Since the content was never encrypted, a PDF that opens but refuses to print or copy can usually be saved as a plain copy by the methods above. Whether you should do that depends on who owns the document.
If you have lost the password to your own file, check the email that delivered it and your password manager, or ask the sender for a fresh copy. Banks often print the rule on the statement itself, such as your date of birth or ZIP code.
How to share a password-protected PDF safely
Encryption only helps if the password does not travel with the file. A few rules cover most situations.
- Send the file and the password through different channels. Email the PDF, then text or call with the password. Never put both in the same message.
- Do not write the password in the file name or the email subject.
- Pick a passphrase, not a word. Three or four unrelated words with a number is long, strong and easy to say over the phone.
- Use a different password per recipient if the same document goes to several people, so one leaked password does not open every copy.
When is encrypting a PDF required?
Most US privacy rules do not name a tool or a file format. They ask you to take reasonable steps to protect certain kinds of personal data, and encrypting a document before it leaves your computer is one of the most common steps. In plain terms:
A password is a reasonable step, not a complete one. If you run a covered business, you also need to know who received the file, keep the password out of the same channel, and delete copies you no longer need. For a one-off between you and your accountant, an AES-256 password plus a separate text message is a sensible standard.
- Health information: HIPAA applies to clinics, insurers and the businesses that work for them. Patient records, test results and billing details sent by email are expected to be encrypted or sent through a secure portal. A password-protected PDF is a basic form of this. A plain attachment is not.
- Tax documents: a W-2, 1099 or tax return holds your Social Security number, address and income. The IRS tells preparers to encrypt client files, and many preparers refuse an unprotected return by email. If you send your own documents to an accountant, protect them.
- Financial and legal paperwork: bank statements, loan applications, pay stubs and anything with an account number or a signature image. Landlords, lenders and HR departments ask for these constantly, and they are prime targets for identity theft.
- Anything a client asked you to keep confidential, or that an NDA covers.
Frequently asked questions
How do I password protect a PDF for free?
Open the PDF in Preview on a Mac and choose File, Export, then check Encrypt. On Windows, use Word's Save As PDF with Options, Encrypt the document with a password, or a free online tool such as DocGopher's Protect PDF, which uses AES-256 encryption and needs no sign-up.
How do I remove a password from a PDF?
Open the PDF with its password, then save a copy without encryption. In Preview, use File, Export with Encrypt unchecked. In Chrome, print the open PDF with Save as PDF as the destination. Online, Unlock PDF removes the password from a PDF you can open.
How do I deactivate a password in a PDF I no longer want protected?
Deactivating and removing are the same thing in a PDF, because there is no on and off switch. You decrypt the file by saving an unprotected copy with Preview, Acrobat Pro, Chrome's print dialog or an online remover, then use that copy going forward.
What is the difference between an open password and a permissions password?
An open password encrypts the PDF so nobody can read it without the password. A permissions password leaves the content readable but asks PDF readers to block printing, copying or editing. Only the open password actually protects the content.
Can a password-protected PDF be hacked?
A long password with AES-256 encryption cannot be cracked in practice. Short or guessable passwords, such as a birth date or the word password, can be found by trying common combinations, and permission-only passwords offer no real protection because the file was never encrypted.
Is a password-protected PDF enough for HIPAA?
It is one accepted way to protect health information in transit, provided the password is strong and sent separately. HIPAA also expects access controls, records of who received the data and secure storage, so encryption is part of compliance, not all of it.