What is PDF encryption?
PDF encryption scrambles a PDF's contents so that only people with the right password can read them. A PDF can have a password to open it, which protects the whole document, and a permissions password that limits printing, copying or editing. Modern PDFs use AES-256, the strongest encryption in the PDF standard.
Also called: Password-protected PDF, PDF password, Encrypted PDF
Updated October 14, 2026 · By the PDFZyro team
Open password vs permissions password
The password to open, also called the user password, is real protection: without it, the encrypted content can't be read. The permissions password, or owner password, is different. Anyone can open the file, and the PDF asks the reader app to block printing, copying or changes. Most PDF readers respect these limits, but some programs ignore them, so treat permissions as a request rather than a lock. For anything confidential, use a password to open.
How strong is PDF encryption?
Older PDFs used RC4 encryption with 40-bit or 128-bit keys, which can be broken. AES-256, supported by every modern PDF reader, is considered secure; in practice the weak point is the password. A long passphrase of several unrelated words is far harder to guess than a short password with symbols. Send the password separately from the file, for example by phone or in a different app, never in the same email.
What encryption doesn't do
Once someone opens the PDF with the password, they can read it, and could save or share an unprotected copy. Encryption also doesn't remove hidden information or prove who sent the document. To share only part of a document, redact it; to show it hasn't been changed, use a digital signature. A forgotten password to open can't be recovered except by guessing, so keep it somewhere safe.
Encryption inside the PDF is also different from encryption by the service that stores it. A cloud service may encrypt files on its disks, which protects them there, but the PDF you download opens without a password unless the file itself is protected.
How to password protect a PDF in PDFZyro
- Open the PDF with Protect.
- Add a password to open it and choose whether to allow printing, copying and changes. PDFZyro encrypts the file with AES-256 and doesn't store the password.
- The protected PDF is saved as a new version, and the unprotected one stays in your private history. To remove a password you know, use Unlock PDF.
Tools and guides
- Guide: How to password protect a PDFHow to password protect a PDF: the two kinds of PDF password, step-by-step instructions, how to choose a strong password, and what protection can't do.
- Password protect PDFLock a PDF with a password and AES-256 encryption.
- Unlock PDFRemove a password you know from a PDF.
Related terms
- RedactionPermanently removing sensitive text or images from a document before it is shared.
- Digital signatureA cryptographic, certificate-based seal that shows who signed a file and that it hasn't changed.
- PDF metadataInformation stored about a PDF rather than on its pages: author, title, dates and software.