Irreva logo
Explore Irreva
PDFJanuary 18, 2026· 5 min read· Updated June 10, 2026

How to Add a Password to a PDF Free

Hasanur Rahman

Written by Hasanur Rahman

Founder & Full-Stack Developer · Irreva · Rangpur, Bangladesh

Adding a password to a PDF before sharing it is a simple way to keep sensitive content private. Only someone with the password can open the document. You can also restrict what recipients can do with it — like preventing them from printing or copying text. All of this is free and takes under a minute.

Types of PDF passwords

A PDF can have two distinct passwords. An open password (sometimes called a user password) is required to open and view the document. Anyone without this password sees only a password prompt, not the content.

A permissions password (owner password) is a second layer that controls what someone can do once they've opened the document. You can use it to prevent printing, copying text, or modifying the file — even for people who have the open password.

You can set one or both types. For most use cases — like sharing a confidential report — just an open password is enough.

How to password-protect a PDF on Irreva

Go to the PDF Protect tool. Upload your PDF and enter the password you want to set. Optionally, toggle the permissions restrictions — you can disable printing, copying, and editing independently.

Click Protect and download the encrypted PDF. The encryption is applied using pdf-lib in your browser. Your document is never sent to a server.

Choose a strong password that you'll remember or store safely. If you lose the password, there's no recovery option — the file stays locked.

Choosing a good PDF password

A strong password uses a mix of uppercase and lowercase letters, numbers, and symbols. Avoid simple words, names, or obvious sequences like '12345'. A password like 'Annual2026!Report' is much harder to guess than 'report2026'.

PDF encryption is generally strong (AES-128 or AES-256 depending on the tool), but a weak password can be brute-forced. The encryption is only as good as the password protecting it.

For shared documents in a team, consider whether everyone who needs access should have the password, and whether you'll need to rotate it in the future.

  • At least 12 characters
  • Mix of letters, numbers, and symbols
  • Avoid dictionary words or names
  • Unique — don't reuse passwords from other accounts

Limitations of PDF password protection

PDF password protection is a deterrent, not an absolute guarantee. Permissions restrictions (like 'no printing') can be worked around by determined users with the right software. Open password encryption is more robust — the content is genuinely encrypted and unreadable without the key.

For highly sensitive documents, consider additional measures alongside PDF passwords: watermarking the document, using a secure document sharing platform, or limiting distribution to specific recipients.

Frequently Asked Questions

What encryption level does PDF Protect use?

The tool uses AES-128 encryption via pdf-lib, which is the standard for PDF security and is considered secure for normal document sharing purposes.

Can I set different passwords for opening and for permissions?

Yes. You can set an open password (required to view) separately from a permissions password (restricting printing/copying). Most users only need an open password.

What happens if I forget the PDF password?

The document stays locked. There's no recovery mechanism. Keep a copy of the original unprotected PDF and store the password securely.

Can permissions restrictions be bypassed?

Yes, by someone with sufficient technical knowledge. Permissions restrictions are meant to prevent accidental misuse, not to stop a determined actor. Open password encryption is more reliable for true security.

Can I add a password to a PDF on my phone?

Yes. The PDF Protect tool is a web app that works in mobile browsers. Upload your PDF, set the password, and download the protected file.

Hasanur Rahman

About the author

Hasanur Rahman

Founder & Full-Stack Developer · Irreva · Rangpur, Bangladesh

Hasanur Rahman is the founder of Irreva and a full-stack developer based in Rangpur, Bangladesh. He builds all of Irreva's tools with a focus on privacy-first, browser-based processing.