Password protecting a PDF adds encryption to the file so that anyone who opens it must enter the correct password. The file itself becomes unreadable without decryption — unlike a password hint on a Word document, which is easy to bypass. When used correctly, PDF password protection is genuinely effective.
Two types of PDF passwords
PDF supports two distinct passwords: the user password (also called the open password) and the owner password (also called the permissions password).
The user password must be entered to open the file at all. If you set a user password, anyone who doesn't know it sees only a password prompt — they cannot read the content. This is what most people mean when they say 'password protect a PDF.'
The owner password restricts what an opened PDF can do: printing, copying text, editing, adding annotations. These restrictions work in compliant PDF viewers (Adobe Acrobat, Preview, most document viewers) but can be bypassed in non-compliant software. Owner-password-only protection is not security — it is a guideline.
For real security, set a user password. For document workflow restrictions, owner permissions can help — but don't rely on them to prevent copying from a motivated recipient.
PDF encryption strength
PDF supports 40-bit RC4 (PDF 1.1), 128-bit RC4 (PDF 1.4), 128-bit AES (PDF 1.6), and 256-bit AES (PDF 1.7 extension 3 / PDF 2.0). The first two are outdated and should not be used for anything sensitive.
Modern tools use 256-bit AES (or at minimum 128-bit AES). Filum's Protect PDF tool applies 256-bit AES encryption. With a strong password, 256-bit AES provides protection that is computationally infeasible to break — the limiting factor is password strength, not the encryption algorithm.
A weak password ('1234', 'password', the person's name) makes even the strongest encryption useless because dictionary and brute-force attacks will find it quickly. Use a password of at least 12 characters combining letters, numbers, and symbols, or use a passphrase of four or more random words.
What password protection does not prevent
Screenshots: anyone who can view the document can take a screenshot of each page. PDF encryption prevents reading the file bytes, not photographing the screen.
Printing to a new PDF: if the user can print, they can print to a new PDF (which loses the password). Owner-only permissions can restrict printing, but user-password protection does not address this if you give the recipient the password.
Forwarding: giving someone the password lets them share it. There is no mechanism in standard PDF encryption to prevent the recipient from telling others the password.
These are not flaws in PDF encryption — they are constraints of any technology that gives a person access. For documents where any of these risks matter, consider additional controls: digital rights management (DRM), watermarks for accountability, or simply not distributing the document digitally.
Using Filum's Protect PDF tool
Upload the PDF, enter a password, and download the protected file. The encryption is applied client-side — the password and the unencrypted file content never leave your browser. The protected PDF is a standard encrypted PDF file compatible with all major PDF viewers.