What Locking a PDF Actually Does
Locking is encryption, not just a polite "please don't look" screen. When you set a password, the tool scrambles the PDF's contents using AES-256 encryption — the same standard banks and government agencies use. The file becomes unreadable gibberish to anyone without the password, in any PDF reader, on any device. There is no back door in the format; without the exact password, the content stays locked.
There are actually two kinds of PDF passwords, and knowing the difference matters. An open password (also called a user password) blocks the document entirely — no one sees a single word without it. This is the lock most people want. A permissions password (owner password) lets people open and read the file but restricts what they can do with it: printing, copying text, editing, or adding comments can each be switched off. You can apply both at once — open freely for your team, but nobody can print or copy — which is useful for reports and templates you want read but not redistributed.
One honest caveat: a permissions password is a request that well-behaved software honors, not a vault — determined users with the right tools can bypass printing restrictions. The open password, though, is real encryption. If secrecy is the goal, lock the file itself.
How to Use the Lock PDF Tool
Drop your PDF into the tool. Type the password you want — good tools show a strength meter while you type, rating it weak, medium, or strong. Confirm the password (typing it twice catches typos that would lock you out), then click Lock or Protect. Download the encrypted file.
The step people skip, and should not: open the locked file yourself and enter the password, confirming it works. I do this every time, because discovering a typo'd password after you have deleted the original is a special kind of pain. Keep the unprotected original somewhere safe — or delete it deliberately if the whole point was securing a single copy.
Then share the password separately from the file. Email the locked PDF, but send the password by text message, a phone call, or a different chat app. A locked file with the password in the same email is a locked door with the key taped to it.
Choosing a Password That Actually Protects
| Rule | Why it matters | Example approach |
|---|---|---|
| At least 12 characters | Short passwords fall to brute force quickly | A full phrase beats a short jumble |
| Mix cases, numbers, symbols | Expands the combinations attackers must try | Correct-horse!battery9staple style |
| Unique to this document | One leak should not open everything | Never reuse your email password |
| No personal details | Names and birthdays are guessed first | Avoid pet names, dates, company names |
| Share via a separate channel | Email compromise exposes both file and key | File by email, password by text or call |
For documents shared within a team, agree on a password scheme in advance — a project code plus a rotating element — so you are not inventing and communicating new passwords for every file. And write passwords down somewhere safe (a password manager, not a sticky note): a forgotten PDF password usually means the file is gone for good.
When to Lock a PDF
Contracts and proposals. Anything with pricing, terms, or negotiation positions should travel locked. If it leaks, it leaks encrypted.
Financial documents. Statements, invoices, tax returns, payroll — the obvious category, and the one people most often send unlocked out of habit.
HR and personal records. Offer letters, performance reviews, ID scans, medical documents. These carry other people's data, which raises the stakes.
Legal and compliance files. Court filings, audit reports, due-diligence packs — documents where unauthorized access is not just embarrassing but a liability.
Work in progress. Drafts you are sharing for review but do not want forwarded casually. A password adds just enough friction to keep a draft from circulating.
Who Locks PDFs?
Freelancers and agencies sending proposals and contracts to clients — locked files look professional and stay confidential.
HR and finance teams distributing anything with salaries, personal data, or company financials.
Lawyers and accountants for whom client confidentiality is a professional obligation, not a preference.
Anyone emailing sensitive documents — because email accounts get compromised, forwarded, and misaddressed every day.
Key Features
- AES-256 encryption — bank-grade encryption that makes the file unreadable without the password.
- Open and permissions passwords — lock the whole file, restrict printing/copying/editing, or both.
- Password strength meter — instant feedback while you type, so weak passwords get caught.
- Batch locking — protect multiple PDFs at once with one password or unique ones.
- 100% client-side — encryption happens in your browser; the file and password never leave your device.
- Works in any reader — the locked PDF opens (with password) in every PDF app, no special software.
- Free, unlimited, no watermark — no signup, no payment, clean output.
Yes — open the PDF with the password and use an unlock/remove-password tool to save an unprotected copy. You will need the current password to do it.
There is no recovery. AES-256 encryption cannot be bypassed without the exact password, so store it in a password manager before you lock anything important.
With a client-side tool, yes — the file never leaves your browser, so neither the document nor the password touches any server.
An open password blocks the file entirely until entered. A permissions password lets people read the PDF but can forbid printing, copying, or editing. Use both for layered control.
Yes. Password-protected PDFs open in every PDF reader — Adobe, browser viewers, phone apps — which will prompt for the password first.
Through a different channel than the file: file by email, password by text message or phone call. Never put both in the same message.
No. The content is identical once unlocked — encryption only controls access, not layout or quality.
Completely free — no signup, no limits, no watermark.