How to Password-Protect a PDF (AES-256) Without Uploading It

Updated Jul 23, 2026 1 min read No upload — runs in your browser

To password-protect a PDF, open the Protect PDF tool in your browser, drop the file, set a password, and download the encrypted copy. It uses AES-256 and runs entirely on your device — the document is never uploaded, which is the whole point of securing it.

There’s an irony in most “protect PDF” sites: you upload an unprotected, confidential file to a stranger’s server in order to protect it. That defeats the exercise.

Encrypt it in your browser

  1. Open Protect PDF.
  2. Drop the PDF on the page.
  3. Type a strong password (and keep a copy somewhere safe — see below).
  4. Download the encrypted PDF. It now asks for that password to open, in any reader.

The encryption runs via qpdf, a trusted PDF engine compiled to WebAssembly, right in the tab. It works with your Wi-Fi off.

Choose a password you won’t lose

Real AES-256 encryption has a hard consequence: there is no recovery. If you forget the password, the file is genuinely unreadable — by you, by us, by anyone. That strength is the feature.

  • Use a long passphrase, not a short cryptic word.
  • Record it in a password manager the moment you set it.
  • Send the password separately from the file — a different channel (a text, a call), never in the same email as the PDF.

”Encrypt” vs “restrict permissions”

Setting an open password (what this tool does) actually encrypts the contents — the file can’t be read without it. That’s different from the weaker “permissions”/owner password some tools add, which merely asks readers not to print or copy and is trivially removed. If your goal is real confidentiality, an open password is the one you want.

Frequently asked questions

How strong is the encryption?

The PDF is encrypted with AES-256, the standard strong cipher for PDFs. Anyone opening it will need the password you set.

Is the file or password uploaded?

No. Encryption runs in your browser with qpdf compiled to WebAssembly, so neither the document nor the password is ever sent anywhere.

What happens if I forget the password?

There's no recovery — that's the point of real encryption. Keep the password somewhere safe, because without it the file can't be opened.

Can the recipient open it on any device?

Yes. It's standard PDF encryption, so any PDF reader will prompt for the password and open the file once it's entered.

← All guides