SwitchPDF
All articles
Security June 17, 2026 4 min read

Password-Protecting a PDF: Step-by-Step Guide

Adding a password to a PDF takes 30 seconds. Doing it correctly (so the password isn't trivial to crack) takes a little planning. Here's both.

Password-Protecting a PDF: Step-by-Step Guide

Adding a password to a PDF protects against anyone who obtains the file without also obtaining the password. Here's how to do it right.

Step 1: Open Protect PDF

Go to SwitchPDF Protect PDF, upload your file. The tool uses AES-256 — the strongest encryption in the PDF spec, the same standard banks use.

Step 2: Choose a strong password

This is where most people fail. The tool can use AES-256, but if your password is "password123," it'll be cracked in seconds.

Bad passwords:

  • Dictionary words
  • Your name, company, birthday, address
  • Common patterns like "Welcome2026"

Decent passwords:

  • A passphrase of 4–5 random words: correct horse battery staple
  • A short sentence with a number and symbol: MyDog!Likes7Bones

Strong passwords:

  • 12+ random characters from a password manager: Xk3#mP9!nR2qLvB8

For sensitive documents (financial, legal, medical), use the strong option.

Step 3: Set permissions (optional)

Two extra dials:

  • Restrict printing — recipient can view but not print
  • Restrict copying — recipient cannot select text or extract content

These are honored by mainstream viewers (Adobe Reader, Preview, Chrome) but advanced tools can ignore them. Think of them as deterrents, not enforcement.

Step 4: Download and verify

Download the protected PDF. Open it in Preview or a fresh browser tab — you should be prompted for the password. If it opens without prompting, something went wrong; re-run the tool.

Sending the password separately

The single most important security practice: don't send the password in the same channel as the file. If you email the PDF, text the password (or use a different chat app). This way, intercepting one channel doesn't compromise both.

For team or client communication, use a password manager with secure-sharing features.

Removing the password later

If you (or the recipient) need to remove the password, Unlock PDF does the reverse. You'll need the current password.

Forgotten password = lost file

If you forget the password, no online tool can recover it. AES-256 is genuinely unbreakable without the password. Anyone claiming "free PDF password recovery" is either dealing with cheap older encryption (no longer used) or scamming you.

Keep your passwords in a password manager. Always.

Bottom line

AES-256 encryption is real protection — as long as the password is strong. Use 12+ random characters from a password manager, send it through a different channel than the file, and keep it stored safely.

Related articles