Skip to main content
ToolsBay

Runs in your browser — nothing is uploaded · verify

Protect PDF — free, and nothing is uploaded

Add a password and AES-256 encryption to a PDF.

  • A real PDF encryption library, compiled to WebAssembly and run inside your own tab.
  • The document cannot be opened at all without the password you set.
  • Encryption runs in the page, so the password is never transmitted.

Drop your PDF here

or click to browse · .pdf · up to 100 MB

The encryption engine runs in your browser as WebAssembly. Your document and your password are never transmitted — there is no server here that could receive either.

  • 70 tools

    Free, with no account and no watermark

  • 0 bytes

    Of your files or text uploaded — this tool runs in the tab

  • No queue

    The work happens in this tab, not in a line behind other users

What to expect

  • Encryption is AES-256, the strongest the PDF format defines.
  • The password is required to open the document. Lose it and the file is unrecoverable.
  • Print and copy restrictions are advisory — they depend on the reader choosing to honour them.

Three steps, nothing to install

Protect PDF in three steps

  1. PDFDrag it in, or click to browse

    Choose the PDF

    Drop in the document you need to lock before sending it.

  2. Choose exactly what changes

    Set a password

    Type the password the recipient will need. It is used to derive the encryption key in the page and is never sent anywhere.

  3. Download PDF

    Save the encrypted file

    The result asks for the password before it will open, in every reader.

Why use Protect PDF

  • AES-256, genuinely encrypted

    The file contents are encrypted, so the document cannot be read without the password. This is not a permissions flag that a cooperative viewer chooses to respect.

  • Runs as WebAssembly, locally

    A real PDF encryption library is compiled to WebAssembly and executed in your tab, which is how this happens without a server ever holding the file or the password.

  • Free, with nothing to sign up for

    No account, no watermark, no daily cap and no trial that expires. Every tool on this site behaves the same way.

Frequently asked questions

Yes. The document’s content streams and strings are encrypted with AES-256 using a key derived from your password. A reader without the password cannot display the file — this is not a flag that asks politely to be respected.

Password-protect a PDF without uploading it

The documents people most want to encrypt are the ones they least want to hand to a stranger: contracts, medical letters, bank statements, anything with an identity number in it. There is an obvious problem with uploading such a file to a website in order to secure it — for the whole time it is in transit and on that server, it is not secure at all, and you have no way to verify what happened to it.

This tool avoids the question entirely. The encryption engine is qpdf, a long-standing open-source PDF library, compiled to WebAssembly and running inside your browser. Your file is read into memory on your own device, encrypted there, and written back out. Nothing is transmitted.

What the password actually protects

PDF defines two different things that both get called “protection”, and the difference matters.

The open password is real cryptography. The document's content is encrypted with AES-256 and the key is derived from your password. Without it there is nothing to display — a reader cannot show you the document because it cannot decrypt it.

Permissions — the print and copy restrictions — are not. They are recorded in the file as flags, and a reader is expected to honour them. Most do. Some do not, and nothing in the format compels them to. Any tool implying that “disable printing” is enforced is overstating what PDF can do. Treat those settings as a clear statement of intent to a cooperative reader, and the open password as the actual control.

Choosing a password

AES-256 is not the weak point; your password is. A four-character password on a 256-bit cipher is a four-character password. Length does more work than complexity — a passphrase of several unrelated words beats a short string of substituted characters, and is easier to type on a phone.

Whatever you choose, record it somewhere before you close this tab. There is no recovery path, by design. Secure Password Generator will produce one and it, too, runs entirely on your device.

Related tools

To take a password off a document you can already open, use Unlock PDF. To mark a document visually rather than encrypt it, use Watermark PDF. To sign it, use Sign PDF.

  • Unlock PDF

    Remove the password from a PDF you can already open.

  • Sign PDF

    Draw or type a signature and place it anywhere on the page.

  • Watermark PDF

    Stamp text such as CONFIDENTIAL or DRAFT across every page.

  • PDF to Markdown

    Convert a PDF into Markdown with headings and lists detected.

  • Merge PDF

    Combine several PDFs into one, in the order you choose.

  • Split PDF

    Split a PDF by page range, every N pages, or one file per page.

More tools

70 tools, none of which want your file

Everything this tool does happens in the page you are looking at. No account, no upload, no watermark.