How to Password-Protect a PDF (Free Tools)
Why PDF Passwords Actually Matter
A PDF without a password is essentially a public document the moment it leaves your hands. You email a contract to a client, they forward it to three colleagues, one of them has an auto-sync to a shared cloud folder — and suddenly your confidential pricing sheet is visible to people who were never supposed to see it. This isn't paranoia; it's a routine data-leak pattern that security teams document constantly. PDF encryption works by scrambling the file's contents using AES (Advanced Encryption Standard). Modern PDF readers use 128-bit or 256-bit AES, which means a brute-force attack on a strong password would take longer than the age of the universe with current hardware. The weak link is almost always the password itself, not the encryption algorithm. There are actually two distinct types of PDF passwords worth understanding before you pick a tool. An 'open password' (sometimes called a user password) prevents anyone from even viewing the file without entering it. A 'permissions password' (owner password) lets people open and read the PDF but restricts actions like printing, copying text, or editing. You can apply one or both. For sensitive documents — tax returns, legal agreements, medical records — you almost certainly want the open password. For documents you're distributing but want to control, a permissions password alone may be enough. One honest caveat before we go further: PDF password protection is not a substitute for proper access control. If someone has the password, they have full access. Sharing a password-protected PDF over an unencrypted channel and then texting the password in plaintext defeats the entire point. Use encrypted messaging or a separate secure channel for the password itself.
Using CocoConvert to Prepare Your PDF
CocoConvert is built around file conversion, so if your source document isn't already a PDF, that's where it earns its keep. You can upload a Word document (.docx), an Excel spreadsheet (.xlsx), a PowerPoint presentation (.pptx), or even an image file, and convert it to a clean, properly formatted PDF in seconds. This matters because the quality of your source PDF affects how well downstream tools handle it — a badly converted PDF with garbled text layers can cause issues when encryption software tries to process it. To convert a file on CocoConvert: navigate to the relevant converter (for example, Word to PDF), drag and drop your file or click to browse, and hit Convert. The resulting PDF downloads to your device, typically within 30 seconds for files under 10 MB. Files up to 100 MB are supported on the free tier. Here's the honest part: CocoConvert does not currently offer a built-in PDF password or encryption feature. We're a conversion service, not a full PDF editor. Once your file is converted to PDF, you'll need one of the tools described in the sections below to add the password layer. We'd rather tell you that upfront than waste your time hunting for a feature that isn't there. What we do well — fast, clean conversion from dozens of formats — is the logical first step before you encrypt.
Adobe Acrobat Reader vs. Acrobat Pro: What's Free and What Isn't
Adobe invented the PDF format, so it's the natural first place people look for password protection. The situation is a bit confusing, so here's a clear breakdown. Adobe Acrobat Reader (the free desktop app) lets you view, sign, and annotate PDFs, but it does not let you add passwords. To encrypt a PDF in the desktop Adobe ecosystem, you need Acrobat Pro, which costs $19.99/month as a standalone subscription. That's a reasonable price for professionals who live in PDFs, but it's overkill if you need to password-protect one document per quarter. Adobe does offer a free online tool at acrobat.adobe.com. After creating a free Adobe account, you can use the 'Protect PDF' feature online: upload your file, choose 'Protect,' set a password, and download the result. The free tier limits you to a small number of tasks per month (Adobe adjusts this periodically; as of early 2026, it's typically two free tasks before prompting for a subscription). The encryption used is 128-bit AES by default. Menu path for the online tool: acrobat.adobe.com → Sign In → All Tools → Protect a PDF → Select File → Set Password → Protect. The output is a fully standards-compliant encrypted PDF that opens in any modern PDF reader. If you only need to protect one or two files and don't mind creating an Adobe account, this is a reliable option with no software installation required.
PDF24: The Most Capable Free Desktop Option
PDF24 is a free, ad-supported PDF toolkit from Geek Software GmbH that runs on Windows. It's not glamorous, but it's genuinely powerful and doesn't require an account or internet connection for most features — the desktop app processes files locally, which is a meaningful privacy advantage when you're dealing with sensitive documents. To password-protect a PDF in PDF24 Creator (the desktop app): open the PDF24 Creator → click 'PDF Security' from the tool grid → drag your PDF into the window → in the security settings panel, check 'Set open password' and type your password → optionally configure permissions (uncheck printing, copying, etc.) → click 'Save' and choose your output location. PDF24 applies 256-bit AES encryption, which is the current gold standard for PDF security. The interface exposes all the granular permissions settings: you can individually allow or disallow printing, high-resolution printing, content copying, annotations, form filling, content extraction, and document assembly. This level of control is typically found only in paid tools. PDF24 also has a web version at pdf24.org if you don't want to install anything. The web version works similarly but uploads your file to their servers for processing — fine for most use cases, but worth knowing if your document is highly confidential. For maximum privacy, use the desktop app. One limitation: PDF24 is Windows-only for the desktop version. Mac users need to use the web version or one of the alternatives below.
LibreOffice and Preview: Built-In Options on Every Computer
You may already have a free PDF password tool installed without knowing it. On macOS, the built-in Preview app can encrypt PDFs with a password. Open your PDF in Preview → File → Export as PDF → click 'Security Options' → check 'Require password to open document' → enter and verify your password → click OK → Save. Preview uses 128-bit RC4 encryption on older macOS versions and 128-bit AES on more recent ones. It's not 256-bit, which is a real limitation if you're protecting highly sensitive documents, but it's more than sufficient for most personal and small-business use cases. The convenience of zero installation and zero account creation makes it worth knowing about. On Windows and Linux, LibreOffice Writer or LibreOffice Draw can open a PDF and re-export it with a password. The path: open your PDF in LibreOffice Draw → File → Export as PDF → in the PDF Options dialog, click the 'Security' tab → set an open password and/or a permissions password → Export. LibreOffice offers 128-bit AES encryption. It's not the smoothest workflow — LibreOffice may reflow some PDF layouts slightly on import — but for text-heavy documents like contracts or reports, the output is generally clean. Both of these options process files entirely on your local machine, with no data sent to any server. For genuinely confidential documents, that's a significant advantage over any web-based tool.
Choosing a Strong Password: The Part Most Guides Skip
The encryption algorithm is only as strong as the password protecting it. AES-256 is effectively unbreakable by brute force, but a password like 'contract2024' can be cracked in minutes using dictionary attacks. This is where most password-protection guides fall short — they explain the how but not the what. A strong PDF password should be at least 16 characters long and include a mix of uppercase letters, lowercase letters, numbers, and symbols. Random is better than memorable. A password like 'Tr7!mQx2#nLpW9@v' is vastly more secure than 'MyContract!2024' even though both look complex at a glance. The second one follows predictable patterns (word, word, year) that password-cracking tools are specifically trained to exploit. Practical approach: use a password manager (Bitwarden is free and open-source; 1Password and Dashlane have free tiers) to generate and store the password. Copy-paste it rather than typing it. This eliminates typos and removes the temptation to use something memorable. For sharing the password with a recipient, never send it in the same email as the PDF. Use a different channel entirely — a text message, a phone call, a Signal message, or a separate email sent minutes later. If an attacker intercepts your email, having the password in a separate message at minimum forces them to compromise two channels instead of one. Also: write down the password somewhere secure before you send the file. If you lose the password to your own encrypted PDF, there is no recovery option. The encryption is working exactly as designed, and no tool — free or paid — can reliably recover a lost PDF password from strong AES encryption.
Which Tool Should You Actually Use?
Here's a straightforward decision framework based on your situation. If you're on a Mac and need a quick, private solution: use Preview. It's already installed, it's fast, and it keeps your file on your device. The 128-bit encryption is adequate for most purposes. If you're on Windows and want the strongest free encryption with full permissions control: install PDF24 Creator and use the desktop app. The 256-bit AES output and local processing make it the best free option on Windows. If you don't want to install anything and are comfortable with a web tool: Adobe's online Protect PDF tool or PDF24's web interface are both solid. Use Adobe if you already have an account; use PDF24 if you want to avoid creating one. If your file isn't a PDF yet: start with CocoConvert to convert it cleanly, then apply encryption with one of the tools above. A Word-to-PDF conversion on CocoConvert takes under a minute, and you'll get a properly structured PDF that encryption tools handle without issues. If you're protecting highly sensitive documents regularly — legal files, financial records, medical data — consider upgrading to Acrobat Pro or a dedicated document security platform. Free tools are excellent for occasional use, but they don't offer audit trails, expiration dates, or remote revocation. Those features matter in professional and compliance contexts where you need to prove who accessed a document and when. Password-protecting a PDF is a small step that closes a real vulnerability. It won't make a document invulnerable, but it adds a meaningful barrier that prevents casual exposure — which accounts for the vast majority of real-world document leaks.