When to password protect a PDF
Password-protecting a PDF is the right move before emailing sensitive documents — financial statements, contracts, medical records, personal IDs, tax returns — to prevent anyone who intercepts or accidentally receives the email from opening the file. It is also useful for documents stored in shared cloud folders where you want to restrict access to specific authorized recipients.
How to add a password to a PDF for free
- Go to ihatepdf.cv/encrypt-pdf — no sign-up required
- Upload your PDF — it stays on your device throughout
- Set an open password (required to open the file)
- Optionally set a permissions password (controls editing, printing, copying rights)
- Click Encrypt and download the protected PDF — no watermark
Your password and document never reach any server. All encryption runs in your browser using pdf-lib via WebAssembly.
Two types of PDF passwords
- Open password (User password) — anyone who tries to open the file must enter this password. Without it, the file won't open at all. Share this password only with intended recipients.
- Permissions password (Owner password) — controls what an authorized user can do after opening: printing, copying text, editing, filling forms. Set this to restrict modification even by people who can open the document.
Lock content before encrypting — a better workflow
For signed contracts or completed forms, use Flatten PDF before encrypting. Flattening makes all content static and non-interactive, so recipients cannot modify the filled-in fields or move the signature. Then encrypt to control who can open it. This combination gives you both content integrity and access control.
What encryption standard is used?
ihatepdf uses AES-256 encryption — the same standard used by banks, government agencies, and military organizations worldwide. Your password and file never leave your device — all encryption processing runs locally in your browser's memory.
Choose a strong password — and store it safely
AES-256 is only as strong as the password protecting it. A short or common password can be guessed no matter how good the encryption, so use a long passphrase — several unrelated words, or 12+ characters mixing cases, numbers and symbols. Avoid names, birthdays, and anything in the document itself. Because an encrypted PDF genuinely cannot be recovered if the password is lost, save it in a password manager the moment you set it. There is no "forgot password" link for properly encrypted files.
Send the password safely — not in the same email
The most common mistake undoes all the protection: emailing the locked PDF and its password in the same message. Anyone who sees that email has both. Send the file one way and the password another — text or message it, share it in a call, or use a password manager's secure-share link. For documents going to many people, give each recipient the same file but consider adding a hidden fingerprint so a leaked copy can still be traced back to its source.
Frequently asked questions
Can the recipient open it without special software?
Yes. The protected PDF opens in any standard reader — Adobe Reader, Preview, Chrome, or a phone — and simply prompts for the password. No app or account is needed on their end.
Is AES-256 PDF encryption actually secure?
Yes. AES-256 is the same standard used by banks and governments and cannot be brute-forced with current technology. The real-world weak point is a poor password or sharing it carelessly, not the encryption itself.
Can I remove the password later?
Yes — use ihatepdf's password remover with the current password to unlock the PDF whenever needed.
What happens if I forget the password?
AES-256 encrypted PDFs cannot be recovered without the password. Always store passwords in a password manager.
Does the encrypted PDF have a watermark?
No. ihatepdf never adds watermarks to any output file.
Is my password sent to any server?
No. The password is used only in your browser's memory for encryption and is never transmitted anywhere.