---
title: "Password Protect PDF - Free AES-256 Tool | CanDoYa"
description: "Password protect a PDF with real AES-256 encryption in your browser. Add an opening password and reader permissions with no upload or sign-up."
url: https://candoya.com/tools/password-protect-pdf/
locale: en
type: browser-tool
---

# Password Protect PDF

Category: PDF

## How can I password protect a PDF online?

Choose an unprotected PDF, enter and confirm an opening password, then download the encrypted copy. This password protect PDF tool applies the PDF Standard Security Handler with AES-256 inside your browser. The document and passwords stay on your device, and the original file is never changed.

This tool adds **real document encryption**, not a visual lock screen or renamed file. It creates a revision 6 Standard Security dictionary and encrypts the document with AES-256. Anyone who receives the protected copy must enter the opening password in a compatible PDF reader. You can also set an owner password and choose whether readers may print, copy, edit, or fill forms.

The source PDF is processed in temporary browser memory. There is no upload queue, account, watermark, or server-side copy. Store the password safely and share it through a different channel from the PDF.

## How to use it

1. **Choose the PDF** - Drop one unprotected PDF into the workspace or click the file area. Files up to 100 MB are accepted.
2. **Set the opening password** - Enter the password twice. For better resistance to guessing, use at least 12 characters and avoid familiar words or patterns.
3. **Review optional permissions** - Open Advanced permissions if you want a separate owner password or need to limit printing, copying, editing, or form filling.
4. **Protect and download** - Click Protect PDF, wait for local encryption, then download the verified AES-256 copy. Test it with the password before deleting the original.

## Who it's for

- **Finance and operations teams** protecting statements, invoices, and internal reports before sharing them outside the company.
- **Freelancers and agencies** adding an opening password to client drafts, proposals, and deliverables sent by email.
- **Students and researchers** limiting casual access to unpublished papers, interview notes, and application documents.
- **Individuals** securing copies of identification, tax records, and other personal documents stored in shared locations.

## Expert note

An opening password provides cryptographic confidentiality, but PDF permission flags are advisory. Compliant readers usually honor limits on printing, copying, and editing, while specialized software may ignore them. Use a strong opening password when the document itself must remain unreadable without authorization.

## Frequently asked questions

### Is my PDF or password uploaded?

No. The document bytes and every password stay in your browser tab while the PDF is encrypted. CanDoYa does not receive or store them. The output is created in temporary browser memory and becomes a local download when encryption and verification finish.

### Is this PDF password protector free?

Yes. You can password protect PDFs without creating an account, paying for a plan, or adding a watermark. The work runs on your device, so there is no server processing queue. The practical limits are the 100 MB file cap and your browser's available memory.

### What encryption does the protected PDF use?

The output uses AES-256 with the PDF Standard Security Handler, version 5 and revision 6. That is a standard password-based encryption format for modern PDF readers. The tool verifies that the expected encryption dictionary exists before it offers the file for download.

### What happens if I forget the PDF password?

There is no recovery feature or back door. Without the opening password, a strongly protected PDF may be impossible to read. Keep the original unprotected document in a secure location and save the password in a trusted password manager before sending or deleting anything.

### Can I protect a PDF that already has a password?

No. The tool rejects PDFs that are already encrypted instead of applying a second layer that could corrupt or lock away their contents. First open the document with its current password and save an unprotected copy, then add that copy here with the new password.

### Do the printing and copying restrictions always work?

No. Those permissions are requests recorded inside the encrypted PDF and depend on the reader honoring them. Most standard viewers do, but determined users may bypass permission flags with specialized software. The opening password is the cryptographic control that prevents the document from being read.

### Will password protection change the PDF pages?

The tool encrypts the existing PDF objects and keeps the page count and content intact. It does not rasterize pages, add a watermark, or lower image quality. Digital signatures may no longer validate after any file-level rewrite, so protect a document before applying a final signature workflow.

## Related tools

- [Redact PDF](https://candoya.com/tools/redact-pdf/)
- [PDF Signer](https://candoya.com/tools/sign-pdf/)
- [PDF Metadata Editor](https://candoya.com/tools/edit-pdf-metadata/)
- [PDF Form Filler](https://candoya.com/tools/fill-pdf-form/)
- [Merge PDF Files](https://candoya.com/tools/merge-pdf/)

---

*Markdown edition of <https://candoya.com/tools/password-protect-pdf/>, published for AI agents and other automated readers. Index of key pages: <https://candoya.com/llms.txt>.*
