Guide

Password-protect a PDF you already control

Updated September 2026 · Add an open password (and optional owner/permissions password) to a file you created or can already open. This is not a recovery guide.

What this guide covers — and what it does not

You can follow these steps if all of the following are true:

• The PDF is yours, or you have permission to restrict it.
• You can already open it (it is unlocked, or you know the current password).
• You will choose a new password and store it somewhere you control, such as a password manager.

Encryption also is not a substitute for sending the file to the wrong person. It slows casual opening. It does not make a PDF immune to screenshots once someone has opened it with the password you sent them.

Open password vs owner password

PDF security dialogs often ask for two different secrets. Names vary (“user” / “owner” / “permissions”):

• Open (user) password. Required to view the file. This is what most people mean by “password-protect.”
• Owner (permissions) password. Used when you set limits on printing, copying, or editing for people who can already open the file. You must know this password later if you want to change those limits. Setting restrictions without an open password is weak protection — many viewers ignore permission flags.

If you only need “don’t open this on a shared laptop,” set a strong open password and skip theatrical print-disable flags. If a recipient must open it, they need the open password from you through a channel that is not the same email as the attachment (message, call, or password manager share).

Before you encrypt

• Finish page work first: merge, split or delete, rotate, compress, convert. Many of those tools cannot write into a locked file, and re-exporting can drop the password. See merge, delete pages, split/extract, and quality-aware compress.
• Keep an unencrypted original in a private folder if you might need to edit again. The encrypted copy is for sending.
• Choose a password you will not type into the PDF filename or the same email thread.
• If the file is already encrypted with a password you know, open it, export or save an unlocked working copy, then apply the new password in a fresh export. Do not stack mystery passwords.

Mac

Built-in Save as PDF sometimes offers encryption; Preview’s menus change by macOS version. Look for Security Options, Encrypt, or a padlock in the save dialog — do not assume a screenshot from another year still matches.

1. Open the unlocked PDF in Preview (using the known password if prompted).
2. File → Print → PDF → Save as PDF. In the save dialog, open security / encrypt options if present.
3. Set Require password to open (wording varies). Enter the password twice. Only fill an owner/permissions password if you intend to manage those flags yourself.
4. Save a new filename such as letter-protected.pdf.
5. Quit Preview, then open the new file and confirm it asks for the password.

If your macOS save dialog has no encrypt checkbox, use a desktop PDF app you already have, or export from a suite that includes a PDF security tab. Do not upload sensitive files to a random “add password” website.

Windows and desktop export

Microsoft Print to PDF and most browsers’ “Save as PDF” do not add an open password. Plan on one of these owner-controlled paths:

1. PDF software you already own or that work provides. Look for Protect, Encrypt with Password, or Security → Password. Set the open password on a new copy.
2. LibreOffice (Writer or Draw). File → Export as PDF → Security. Set an open password (and an optional permission password). This is a legitimate export you configure, not a bypass of someone else’s file.
3. Microsoft Word. File → Info → Protect Document can encrypt a Word file. That is not the same as a locked PDF. If you need a locked PDF, export or print to PDF from a tool that has a PDF password box, or encrypt the Word file and send .docx only if the recipient expects Word.

Online “protect PDF” sites will receive the full document. Use them only for files that are not sensitive, and only to set a password you choose — never to “unlock” a file whose password you do not have.

Test, then share the password out of band

• Open the protected file in a second app (for example Edge if you created it in Preview, or vice versa).
• A wrong password should fail. The right password should show every page.
• Send the file and the password separately. Do not put the password in the PDF filename.
• If the recipient only needed one page, extract first, then protect that smaller file.
• If they needed a picture, export JPG/PNG from the unlocked original; locking an image is a different, weaker story (a password-zip, not a PDF open password).

If you forget the password you set, this site has nothing further to add. Keep the unprotected original in a private place, or keep the password in a manager, before you delete anything.