The three ways to encrypt a PDF

You can encrypt a PDF by adding a password, using built-in encryption in your PDF reader, or converting it through a dedicated encryption tool. The method you choose depends on what software you already have and how much security you need. Most people use their existing PDF reader — Adobe Acrobat, Preview on Mac, or a free tool like PDFtk — rather than buying new software.

Password protection and encryption are not the same thing. A password stops someone from opening the file at all. Encryption scrambles the content so it cannot be read even if someone gets the file. Some methods do both; others do only one. For most everyday use, password protection is enough.

The fastest route depends on your operating system and what PDF software you have installed. Windows users with Adobe Acrobat can encrypt in two clicks. Mac users with Preview can do it in three. If you have neither, a free online tool or a command-line program like PDFtk takes about five minutes to learn.

Key Takeaways

  • Adobe Acrobat (the paid version, not the free Reader) lets you add a password and encryption directly from the File menu under Tools.
  • Mac users can password-protect a PDF by opening it in Preview, clicking Tools, then selecting Encrypt.
  • Free online tools and programs like PDFtk work on any operating system but require you to upload your file or use the command line.
  • A password that stops someone from opening the file is different from encryption that scrambles the content — some methods do both, others do one.
  • If you forget the password, there is no way to recover it, so store it somewhere you can find it later.

Using Adobe Acrobat to encrypt a PDF

If you have Adobe Acrobat (the paid version, not the free Reader), open the PDF, go to File, then select Tools. Look for "Protect" or "Security" — the exact name varies by version. Click it, then choose "Encrypt with Password." You will see two options: a password to open the file, and a password to change permissions like printing or copying text. You can use the same password for both or different ones.

Type your password twice to confirm it, then save the file. Adobe will ask you to choose an encryption level — 128-bit or 256-bit. Use 256-bit if the file contains sensitive information; 128-bit is fine for most purposes. The file is now encrypted. Anyone who opens it will need to enter the password first.

If you only have Adobe Reader (the free version), you cannot encrypt directly. You will need to use one of the other methods in this guide.

Password-protecting a PDF on Mac with Preview

Mac users can encrypt a PDF without buying software. Open the PDF in Preview (the built-in Mac app), go to Tools in the menu bar, then click "Encrypt PDF." A dialog box will appear asking for a password. Type it twice to confirm, then click Save. The file is now password-protected.

Preview only adds a password to open the file — it does not prevent printing or copying text. If you need those restrictions, use Adobe Acrobat or one of the free tools below. Preview encryption uses 128-bit security, which is standard for everyday use.

Free online tools for PDF encryption

If you do not have Adobe Acrobat or a Mac, free online tools like iLovePDF, SmallPDF, and PDF Candy can encrypt your file in a browser. Upload your PDF, set a password, and download the encrypted version. No software to install, no account required for most tools.

The trade-off is privacy: your file is uploaded to someone else's server. If the PDF contains very sensitive information, this method is riskier than using software on your own computer. Most of these services say they delete files after a few hours, but you are trusting their word. For everyday documents, the risk is low. For financial records, medical files, or legal documents, consider using Adobe Acrobat or PDFtk instead.

Using PDFtk for command-line encryption

PDFtk is a free, open-source program that runs from the command line (Terminal on Mac, Command Prompt on Windows). It is more secure than online tools because the file never leaves your computer. Download it from pdftk.com, install it, then open Terminal or Command Prompt.

The command to encrypt is: pdftk input.pdf output encrypted.pdf owner_pw your_password. Replace "input.pdf" with your file name and "your_password" with the password you want. This creates a new file called "encrypted.pdf" that requires a password to open. PDFtk uses 128-bit encryption by default, which is sufficient for most uses.

Learning the command line takes a few minutes if you have never done it, but PDFtk is reliable and works on Windows, Mac, and Linux. It is the best choice if you encrypt PDFs regularly and want to keep files on your own computer.

What happens when you forget the password

If you forget the password to an encrypted PDF, there is no built-in recovery method. You cannot call Adobe or the tool maker and ask them to unlock it. The file is locked until you remember the password or use a password-cracking tool, which takes hours or days depending on password strength.

Store your password in a password manager like Bitwarden, 1Password, or KeePass. If you use a password manager, you will never have to remember it, and you will have a backup if you lose it. Write it down on paper and store it in a safe place if you prefer not to use a password manager.

Choosing between password protection and full encryption

A password to open stops someone from viewing the file at all. A password to change permissions lets someone open the file but prevents them from printing, copying text, or editing it. These are two different protections, and some tools offer both.

For most everyday use, a password to open is enough. If you want to share a PDF but prevent people from printing it or copying text, add a permissions password. Adobe Acrobat lets you set both; Preview and most free tools only set the open password. PDFtk can do both if you use the right command.

True encryption scrambles the file so it cannot be read without the password, even if someone extracts the data. All the methods in this guide use encryption, so your file is protected either way. The difference is mainly in how much control you have over what people can do with the decrypted file.

Frequently Asked Questions

Can I encrypt a PDF that is already password-protected?

Yes. Remove the old password first (if you know it), then add a new one using any of the methods above. If you do not know the old password, you will need to use a password-cracking tool, which can take a long time. Most tools do not let you layer passwords on top of each other.

Will encrypting a PDF change how it looks or works?

No. The PDF will look and function exactly the same once someone enters the password. Encryption only affects access, not the content or appearance of the file.

Is 128-bit encryption strong enough?

For everyday documents, yes. 128-bit encryption is secure against casual attempts to crack it. If the file contains financial records, medical information, or legal documents, use 256-bit encryption instead. Adobe Acrobat offers both options; most free tools use 128-bit by default.

Can I encrypt a PDF on my phone?

Most phone PDF readers do not have built-in encryption. Your best option is to use a free online tool like iLovePDF or SmallPDF from your phone's browser, upload the PDF, set a password, and download the encrypted version. Alternatively, encrypt it on a computer first, then transfer it to your phone.

What if I need to send an encrypted PDF to someone?

Send the encrypted PDF file normally (email, file transfer, etc.). Tell the recipient the password through a separate channel — a phone call, a text message, or a different email. Never send the password in the same message as the file, or the encryption is pointless.