How to Password-Protect a PDF in 2026: 5 Free and Paid Methods That Actually Work

Sending a PDF full of financial details, contracts, or personal records without a password is one of those small risks people take every day without thinking about it. The good news: locking a PDF down doesn’t require anything exotic. Here are the methods that actually work in 2026, what each one is good for, and where the free options fall short.

User password vs. owner password: know the difference first

Most people only think about one kind of PDF password, but PDF security actually supports two, and mixing them up is the most common reason people get locked out of their own files:

• User (open) password — required just to open and view the file. No password, no access.
• Owner (permissions) password — the file opens without it, but it restricts what a reader can do: printing, copying text, editing, or extracting pages. You can set one, the other, or both.

If you just want to stop unauthorized people from opening a file, set a user password. If you want colleagues to be able to read a document but not edit or print it, an owner password with restricted permissions is the right tool.

5 ways to password-protect a PDF

Method 1: Mac — Preview (free, built-in)

If you’re on macOS, you already have everything you need. Open the PDF in Preview, go to File → Export, check the Encrypt box, and set a password. It’s a plain user password only — no permission-level controls — but for a quick, no-install option it’s hard to beat.

Method 2: Windows — Save As PDF from Word

Windows doesn’t have a native way to password-protect an existing PDF. But if you still have the source file in Microsoft Word, you can get there indirectly: File → Save As → PDF, then click Options and check Encrypt the document with a password before saving. This only works from the original document — it won’t help with a PDF someone already sent you.

Method 3: Free online tools

Sites like Smallpdf and iLovePDF let you upload a PDF, set a password, and download the protected version in under a minute, no account required. The catch is right there in the workflow: your file — the one you’re trying to protect — gets uploaded to a third-party server first. Fine for a low-stakes document; not something you want to do with a signed contract or tax form.

Method 4: Adobe Acrobat Pro

Acrobat Pro’s Protect tool gives you full control over both user and owner passwords, plus granular permissions (allow printing but block editing, for example). It’s the long-standing industry standard, but it’s subscription-only, and it’s a lot of software to install if PDF protection is the only reason you need it.

Method 5: A dedicated PDF app (UPDF)

For people who deal with PDFs regularly, a standalone desktop editor closes the gaps in the methods above. UPDF’s Protect tool sets both user and owner passwords with the same permission-level controls Acrobat offers — restrict printing, copying, or editing independently of whether the file can be opened — and it processes everything locally on your machine rather than a server, which matters if the files are sensitive. It also has dedicated Redact and Sanitize tools for stripping hidden metadata and blacking out text permanently (not just visually covering it, which doesn’t actually remove the underlying data), and it can batch-protect a whole folder of PDFs at once instead of one at a time.

Which one should you actually use?

For a one-off file, Preview (Mac) or the online tools (Windows, low-stakes files) will do the job in under a minute. For anything sensitive — client contracts, financial statements, ID documents — skip the browser upload step and use software that processes the file locally. And if you’re protecting PDFs often enough that doing it one at a time is annoying, that’s the point where a dedicated app like UPDF starts paying for itself, especially once you factor in the redaction and batch tools you’ll eventually need anyway.

One habit worth building regardless of which method you use: write your password down somewhere other than your memory. A PDF encrypted with a forgotten password is, for practical purposes, gone — there’s no “forgot password” link.