How to Password Protect a PDF: Free Methods for Windows, Mac, and Mobile

Why Password Protection Matters for Everyday Documents

Most people treat PDF password protection as something only companies or governments need. In practice, it is relevant to anyone who emails documents containing personal information. A payslip sent to an employee, a medical referral forwarded between offices, a legal agreement shared with multiple parties, or a personal tax return submitted through an email system are all documents that would cause real problems if they were read by someone unintended.

PDF password protection is free, takes under a minute to apply, and works across all major platforms and PDF readers. This guide covers the best free method for each platform so you can apply protection with whatever tools you already have.

Two Types of PDF Passwords and What Each Does

PDF supports two distinct password types that serve different purposes, and understanding the difference helps you choose the right one.

An opening password, sometimes called a user password or document-open password, prevents anyone from opening the file at all without knowing the password. The document is fully encrypted and appears as unreadable binary data to anyone who does not have the key. This is what most people mean when they talk about password protecting a PDF.

A permissions password, sometimes called an owner password or master password, allows the document to be opened and read without a password, but restricts what the reader can do with it. With a permissions password, you can prevent the document from being printed, prevent text from being copied, prevent annotation, or prevent editing. The recipient sees the content but cannot do certain things with it.

For protecting confidential content from unauthorised access, you want an opening password. For distributing reference documents that should be read but not copied or modified, a permissions password is more appropriate.

Method 1: Preview on Mac (Free, No Software Required)

Mac users have the most convenient free option built directly into the operating system. Preview can add password protection during PDF export without any third-party tools.

1. Open the PDF in Preview.
2. Go to File in the menu bar and choose Export as PDF.
3. In the export dialog, check the box labelled Encrypt at the bottom of the panel.
4. Enter a password in the Password field and re-enter it in the Verify field.
5. Click Save.

The resulting PDF requires the password to open in any PDF reader on any device. Preview uses AES-128 encryption by default, which is secure for all practical purposes and compatible with any modern PDF reader.

Method 2: LibreOffice (Free, Windows, Mac, and Linux)

LibreOffice is a free, open-source office suite that provides comprehensive PDF export options including password protection. It is available for all major desktop platforms and produces professionally encrypted PDFs.

1. Open your document in LibreOffice. This works with Writer for text documents, Calc for spreadsheets, and Impress for presentations.
2. Go to File and choose Export as PDF.
3. In the PDF Options dialog that appears, click the Security tab.
4. Enter an opening password in the Set open password field. Optionally enter a permissions password and configure specific restrictions.
5. Choose AES-256 from the encryption level options for the strongest available protection.
6. Click Export and save your file.

LibreOffice also works with existing PDFs if you open them first and then re-export with security settings applied.

Method 3: Microsoft Word (Free for Office Users)

If you have Microsoft Word 2010 or later, you can add a password to a Word document before exporting to PDF. On some newer versions of Office, the PDF export dialog includes a security option.

1. Open your document in Microsoft Word.
2. Go to File then Export then Create PDF/XPS.
3. In the Publish as PDF dialog, click the Options button.
4. Look for an Encrypt the document with a password option and check it.
5. Enter and confirm your password.
6. Click OK and then Publish.

The availability of this option varies by Office version. If you do not see the password option in the PDF export dialog, use LibreOffice or an online tool instead.

Method 4: Online PDF Protection Tools

For PDFs that already exist in their final form, online tools allow adding password protection without creating the document from scratch. ILovePDF's Protect PDF tool, PDF24's online protector, and similar services upload your file, apply encryption, and return a protected version. Files are processed securely and deleted automatically after the session. For PDFTools users, the protect PDF feature applies AES encryption to any uploaded PDF with no registration required.

As with any online file processing, consider the sensitivity of the document before uploading. For the most confidential documents, use the local desktop methods described above.

How to Choose a Strong PDF Password

The security of a password-protected PDF depends entirely on the strength of the password chosen. PDF encryption with AES-256 is effectively unbreakable by brute force, but a weak password like a name, date, or common word can be cracked quickly using dictionary attack tools that are freely available.

For a PDF password that provides real protection, use at least 12 characters combining uppercase letters, lowercase letters, numbers, and symbols. Avoid anything personally identifiable, any word found in a dictionary, and especially avoid reusing passwords from other accounts.

Store PDF passwords in a password manager rather than in an email, a text file, or on a sticky note. If you forget the password, there is no recovery mechanism. The encryption is designed so that even the service that created the PDF cannot recover access without the original password.

Sharing Passwords Securely

Sending a password in the same email as the protected PDF defeats the purpose of the protection. If the email is intercepted, both the file and the key are captured together. Send the PDF by email and the password through a different channel: a text message, a phone call, or a secure messaging app. This ensures that intercepting one channel alone is not enough to access the document.

Frequently Asked Questions