Sending sensitive documents without protection is like mailing a postcard: anyone who handles it can read it. Password-protecting a PDF adds encryption that keeps your content private. This guide explains the different types of PDF passwords, the encryption behind them, and exactly how to apply protection to your files.
There are many situations where you need to control who can access a document:
PDFs support two distinct types of passwords, and understanding the difference is critical:
A user password prevents the file from being opened at all. When someone tries to open the PDF, their reader prompts for the password. Without it, the document cannot be viewed. The content is encrypted and genuinely inaccessible.
This is the stronger form of protection. Use it when the document must remain completely confidential.
An owner password restricts what a reader can do with the document after opening it. You can prevent printing, copying text, editing, or extracting pages. The document can be opened and viewed by anyone, but certain actions are blocked.
Here is the important caveat: owner passwords are enforced by the PDF reader software, not by encryption. A compliant reader like Adobe Acrobat will respect the restrictions, but freely available tools can strip owner passwords in seconds. Think of it as a polite request, not a locked door.
You can set both passwords on the same file. The user password protects access, and the owner password controls permissions for anyone who has the user password. This is the most thorough approach for sensitive documents.
Modern PDF encryption uses AES (Advanced Encryption Standard), the same algorithm used by banks, governments, and military organizations worldwide.
AES-128 uses a 128-bit key and has been the default for PDF encryption since PDF version 1.6. It is fast and secure. No practical attack against AES-128 exists. For almost all purposes, AES-128 provides more than enough protection.
AES-256 uses a 256-bit key and was introduced in PDF version 2.0. It offers a larger key space, which provides an additional margin of security against future advances in computing power, including theoretical quantum computing attacks. If you are protecting documents that must remain secure for decades, AES-256 is the safer choice.
Some older PDF tools still offer RC4 encryption (40-bit or 128-bit). RC4-40 is completely broken and can be cracked in seconds. RC4-128 is considered weak by modern standards. Avoid RC4 entirely. If a tool does not offer AES, use a different tool.
The Protect PDF tool on meldpdf encrypts your file entirely in your browser. Your document and password are never sent to a server.
Understanding the limits of PDF protection helps you set realistic expectations:
The encryption is only as strong as the password protecting it. A weak password can be cracked by brute force even with AES-256:
correct-horse-battery-staple is both strong and memorable. Random words strung together are harder to crack than short passwords with mixed symbols.Password123!, your birthday, your company name, or the document subject as the password.If you email an encrypted PDF, do not put the password in the same email. If the email is intercepted, the attacker has both the file and the key. Instead:
If you have the password for a protected PDF and need to remove the protection (for example, to merge it with other files or to archive it without access restrictions), most PDF tools can do this. Open the file with the password, then save or export it without encryption. On meldpdf, you can use the unlock tool to remove protection from a file you are authorized to access.
Remember: removing an owner password from a file you do not own or are not authorized to modify may violate the document creator's intent or applicable laws. Only remove protection from files you have the right to modify.
A user password (also called an open password) prevents anyone from opening the PDF without it. An owner password (also called a permissions password) allows the file to be opened but restricts actions like printing, editing, or copying text. The user password is much stronger protection because the file cannot be accessed at all without it.
Owner passwords that only restrict permissions can be removed with freely available tools because the file content is not actually encrypted. User passwords that prevent opening the file are enforced by real encryption and cannot be bypassed without the password, though weak passwords can be cracked by brute force.
Encryption adds very little overhead, typically less than 1% of the file size. The encrypted file will be nearly identical in size to the original. You will not notice a difference for any practical purpose.
Last updated: 3 September 2026.