Protect PDF
Protect PDF encrypts a document with a password using qpdf — the serious, open-source PDF toolkit — compiled to WebAssembly and running entirely in your browser. The open password is what a reader must type to view the file; an optional separate owner password guards permissions in apps that respect them. Neither the file nor the passwords are ever sent anywhere: the encryption keys are derived on your own device.
Process a file to view the result summary.
How to use Protect PDF
- Choose or drop the PDF.
- Type the password a reader will need to open the file.
- Optionally set a different owner password; leave it blank to reuse the open password.
- Click Protect PDF and download the encrypted copy.
Supported behavior
- Real AES encryption performed by qpdf (WebAssembly build) — the same engine professionals use on the desktop.
- Two password levels: a user (open) password and an owner (permissions) password.
- The encrypted copy opens in any modern PDF reader after the password is entered.
Best for
- Sending contracts, statements or ID documents through email or chat.
- Storing sensitive exports in shared cloud folders.
- Handing a document to a client while keeping control of the master copy.
Limits
- There is no recovery: if the password is forgotten, the file cannot be opened — we never see it and cannot help. Save it in a password manager.
- Very old PDF readers may not support current AES encryption; recipients should use an up-to-date reader.
- Encryption protects content, but file names and the fact a document exists are of course still visible.
Privacy notes
- Processing happens entirely in your browser, so nothing in your document is sent anywhere.
- This is the rare password tool where the claim is checkable: encryption runs in your tab via WebAssembly, and you can go offline after the page loads and it still works.
Related tools
Related guides
Protect PDF FAQ
Is my password sent to your server?
There is no server involved. The password is fed to the qpdf engine inside your browser and the encrypted file is created in memory. Disconnect from the internet after loading the page and try it — it still works.
What is the difference between the user and owner passwords?
The user password must be entered to open and read the file. The owner password controls permission flags (printing, copying) in readers that enforce them — and also opens the file with full rights.
I forgot the password. Can you recover the file?
No — and neither can anyone else without the password or serious brute-force effort. That is what real encryption means. Keep passwords in a password manager.
How strong is the encryption?
qpdf applies AES encryption (256-bit where supported). A long, unique password matters more than the number: use several words or a generated password.