Guide
How to Password Protect a PDF (Free, on Windows)
Password protecting a PDF takes about ten seconds. Doing it in a way that actually protects anything takes slightly more thought, and most guides skip that part entirely. Here is both.
The short answer
- Open PDF Tools from the BizTray tray.
- Add the PDF.
- Choose to add a password and set one.
- Save. The encrypted file is written locally.
No engine download and nothing uploaded — which is the point, as the next section explains.
Never do this on a website
This is the one PDF operation where the web-tool habit is genuinely bad practice, and it is worth being blunt about why.
To encrypt your document, a web tool needs both the document and the password. You are uploading a file you have just decided is sensitive enough to need protecting, along with the secret that protects it, to a third party you know nothing about. The output may well be properly encrypted. That is not the issue — the issue is that the plaintext and the key both existed on someone else's server, and you have no way to know what happened to either.
Encrypting locally means the password never leaves your machine. For an operation whose entire purpose is confidentiality, that is not a nice-to-have.
Picking a password that does something
Modern PDF encryption is AES-based and, used properly, genuinely strong. Attacks essentially never break the cipher. They guess the password.
That puts the burden entirely on your choice:
- Length beats complexity. Four unrelated words are far stronger than
P@ssw0rd!and much easier to relay over the phone. - Never reuse one you use elsewhere. A PDF password often gets shared with people you would not give your email password to.
- Do not use the recipient's details. Date of birth, surname and postcode are the first things tried, and they are frequently in the document itself.
- Send it separately. Emailing the file and the password together is the single most common way this protection gets defeated. Use a different channel.
User password vs owner password
PDF has two, they do very different jobs, and the naming actively misleads:
- A user password (open password) is required to open the document at all. Without it the contents are encrypted and unreadable. This is the one that matters.
- An owner password (permissions password) leaves the document openable by anyone and merely requests that software disallow printing, copying or editing. Compliance is a convention, not enforcement — plenty of PDF software disregards it entirely.
If you want the contents protected, set a user password. Relying on permissions alone means the document opens for everybody and politely asks them not to copy it.
What a password does not do
Being clear about the boundary is worth more than another reassurance:
- It does not protect against someone you gave the password to. Once opened, the content can be copied, screenshotted or re-saved.
- It does not hide the metadata in every case — file names and some document properties can remain visible. If author and software details matter, clear the metadata before encrypting.
- It is not a signature. Encryption controls who can read the document. It says nothing about who wrote it or whether it has been altered.
- It cannot be recovered. Lose the password and the document is genuinely gone. No tool — including this one — can open it for you. Keep the password in a password manager before you send the file.
Doing it on your own machine
PDF Tools handles adding and removing passwords alongside watermarking, page numbers, flattening forms and clearing metadata. There is no file-size cap, no watermark on output, and no account. Encrypted files are handled properly rather than mangled.
If you later need to take the password off a document — using the password you already have — see how to remove a password from a PDF.
A note on why this is free
BizTray shares a portion of your spare internet bandwidth through a vetted partner rather than charging you. It relays other parties' web traffic and never touches your documents — including this one. Sharing is switchable off from Settings or the tray, and the tools do not run while it is off. See How it's funded.
Related
- How to remove a password from a PDF — the reverse, with the password you have.
- What "unlock PDF" actually means — and what no tool can do.
- How to remove metadata from a PDF — the other half of a private document.
Do it the easy way with BizTray's PDF Tools
The finishing pass: stamp a watermark, add page numbers, flatten filled forms so they cannot be edited, clean up document metadata, or add and remove a password. Encrypted files are handled properly rather than mangled. Learn more about PDF Tools.