How to Password-Protect (and Unlock) a PDF — Free
A password on a PDF is the simplest way to keep a document private — a bank statement, a signed contract, medical results, anything you would not want a stranger reading if the file landed in the wrong inbox. Adding one takes seconds: password-protect the PDF and it is encrypted so that only someone with the password can open it.
This guide explains how PDF passwords actually work, how to add one, how to remove a password you already know with Unlock PDF, how your file is handled while that happens, and how to choose a password that is genuinely hard to guess.
How PDF password protection works
PDFs support two different passwords, and it helps to know which one you want. An open password (sometimes called a user password) is the one people usually mean: without it, the file will not open at all. A permissions password (or owner password) leaves the file readable but tries to restrict actions like printing, copying text, or editing.
Under the hood, adding an open password encrypts the file's contents with AES — modern tools use AES-256 — so the document is genuinely scrambled on disk, not just hidden behind a prompt. That is why a strong password matters: the encryption is only ever as good as the secret protecting it.
A password protects the file itself, wherever it travels. Once you set one, anyone you send the PDF to needs the password to open it — so you have to share that password with them separately. That is a feature, not a nuisance: the file and the key travel by different routes.
Tip. Encrypting a PDF does not change what it contains — it only controls who can open it. If a document has sensitive text you want gone for good rather than locked, redact it first, then protect the file.
How to password-protect a PDF
Adding an open password with Protect PDF is a four-step job, and the whole thing takes under a minute:
- 1Open the Protect PDF tool and add the file you want to lock.
- 2Type the password you want to use — pick a strong one (see below) and store it somewhere safe, because it cannot be recovered later.
- 3Encrypt the file; PDF AutoPilot applies AES-256 encryption to the document.
- 4Download the protected PDF. From now on it asks for that password every time it is opened.
Tip. Test the protected copy once — open it and enter the password — before you delete the original. That way you know the file works and you have the password exactly right.
How to remove a password from a PDF you own
If you have a PDF that asks for a password every time, and you know that password, you can strip it out so the file opens freely. This is handy for a document you protected yourself and no longer need locked, or one a bank or employer sent you with a password you have since been given.
Use Unlock PDF: add the file, enter its current password, and download an unlocked copy. It is deliberately not a cracking tool — it removes protection from documents you can already open, which is exactly what you want and keeps the feature honest.
- 1Open the Unlock PDF tool and add your password-protected file.
- 2Enter the document's current password — the same one you use to open it.
- 3Remove the protection.
- 4Download the unlocked PDF, which now opens with no prompt.
Is it safe? How your file is processed
Most PDF AutoPilot tools run entirely in your browser, but encryption is one of the few genuine exceptions: browser PDF libraries cannot add or remove AES encryption reliably, so Protect PDF and Unlock PDF run on AutoPilot's processing server instead. Being upfront about that matters more than pretending otherwise.
In practice, your file is sent over an encrypted (HTTPS) connection, processed immediately, and returned — it is not stored or kept afterwards. For most personal documents that is perfectly reasonable. If a file is so sensitive that you would rather it never touch any server at all, protect it on a device you fully control and keep the encrypted copy offline.
Tip. Never send the password in the same email as the protected PDF. Share the file one way and the password another — a text message, a phone call, or a password manager's secure share link.
Choosing a password that actually holds up
The encryption does the hard work, but only if the password is not easy to guess. Length beats complexity: a passphrase of four or five unrelated words is both far harder to crack and far easier to remember than a short, symbol-stuffed string like "P@ss1!".
Do not reuse a password you already use elsewhere, avoid names, birthdays, and single dictionary words, and keep the password in a password manager rather than on a sticky note. If you protect files regularly, a manager also lets you generate strong passwords and share them safely — which pairs neatly with keeping the file and its password on separate channels.