2026topopentools

Protect PDF

Add a password to your PDF with strong 256-bit AES encryption, so only people with the password can open it. Everything runs in your browser — your file and password never leave your device.

⚠ There is no way to recover the file if you forget this password — store it somewhere safe.

Your PDF is encrypted entirely in your browser using WebAssembly — the file and the password never leave your device and are never uploaded to any server.

Understanding the Protect PDF

Protect PDF adds a password and strong encryption to any PDF document so only people who know the password can open it. It is built for anyone sharing sensitive files — contracts, bank statements, medical records, ID scans — over email, chat, or cloud drives. You pick a single .pdf, type a password (with a show/hide toggle) and confirm it, then click Encrypt PDF to download a locked copy. Everything happens 100% inside your browser using WebAssembly: the original file and the password are never uploaded, logged, or stored on any server, so even we never see them. The result opens in any standard PDF reader, which will prompt for the password.

How it works

The tool loads qpdf — a mature C++ PDF library — compiled to WebAssembly (served as /qpdf.wasm). When you click Encrypt, your file is read into memory as a byte array and written to an in-memory Emscripten filesystem at /input.pdf. The tool then runs the qpdf command `--encrypt <pw> <pw> 256 -- /input.pdf /output.pdf`, applying 256-bit AES encryption with your password set as both the user password (needed to open) and the owner password (needed to change permissions). The encrypted bytes are read back from /output.pdf, wrapped in a Blob, and downloaded via a temporary object URL that is immediately revoked. No network request is ever made with your data.

qpdf --encrypt <user-password> <owner-password> 256 -- /input.pdf /output.pdf → 256-bit AES, same password used for both user and owner roles.

Worked example

Suppose you have tax-return.pdf to email to your accountant. You drop it in, type the password "Spring!2026vault" into both the password and confirm fields, and click Encrypt PDF. The tool runs qpdf with 256-bit AES and instantly downloads tax-return-protected.pdf. When your accountant opens it in Acrobat or any browser PDF viewer, they are prompted for a password; entering "Spring!2026vault" unlocks it, while anyone without the password sees only an encrypted, unreadable file.

Tips & common mistakes

  • Use a long, unique passphrase (12+ characters mixing words, numbers, and symbols) — short passwords are far easier to brute-force even with AES.
  • There is no recovery or backdoor: if you forget the password the file is permanently inaccessible, so save it in a password manager before sending the PDF.
  • Share the password through a different channel than the file itself (e.g. file by email, password by text) so a single intercepted message can't expose both.
  • This tool encrypts unprotected PDFs; if your file is already password-protected, remove the existing password first or qpdf will report an error.
  • The download is named <original>-protected.pdf — keep your unencrypted original somewhere safe in case you need to re-issue it with a new password.
  • 256-bit AES requires PDF 1.7+ era readers; virtually all modern viewers support it, but very old PDF software may not open the encrypted file.

Related tools

PDF MergeCombine multiple PDF files into one, reordering pages before merging.PDF SplitExtract specific pages from a PDF or split it into individual files.PDF CompressReduce PDF file size by removing metadata and overhead.JPG to PDF ConverterConvert JPG and PNG images into a single PDF, in order, in your browser.

How to Password Protect a PDF

  1. 1Upload or drag in your PDF file.
  2. 2Type a password and confirm it — you can show or hide it as you type.
  3. 3Click Encrypt PDF — your password-protected PDF downloads automatically.

Frequently Asked Questions

What encryption is used to protect my PDF?

Your PDF is encrypted with 256-bit AES — the strongest encryption supported by the PDF standard — using the qpdf engine compiled to WebAssembly. The same password is set as both the user and owner password.

Can I recover the file if I forget the password?

No. There is no backdoor or master key, and the password is never stored anywhere. If you lose the password the encrypted PDF cannot be opened, so keep it somewhere safe.

Is my file or password uploaded to a server?

No. The encryption runs entirely in your browser using WebAssembly. Your PDF and the password you choose never leave your device and are never sent to any server.

What is the difference between a user and owner password?

A user (open) password controls who can open the PDF, while an owner (permissions) password controls editing, printing, and copying. This tool sets the same password for both. If you need separate open and permission passwords, use desktop software such as Adobe Acrobat.