Why You Should Never Send Raw PDFs Through Email
Every week, millions of people attach bank statements, tax returns, signed tenancy contracts, and medical records to standard emails. What most do not realize is that standard email travels across multiple mail servers in plain text. If an unauthorized party intercepts that traffic, an unlocked PDF document can be opened, read, and copied in seconds.
Protecting your files is not just for large corporations with legal departments. Freelancers handling client invoices, students sharing identity documents for university admissions, and families emailing passport copies all face identity theft risks. Adding a strong cryptographic password turns your document into an unreadable scramble of code for anyone who does not hold the decryption key.
Understanding the Two Types of PDF Passwords
PDF security standards define two distinct layers of password protection: Document Open Passwords and Permissions Passwords. Choosing the right one depends entirely on what you want to prevent someone from doing.
1. Document Open Password (User Password)
An open password blocks anyone from viewing the contents of the document. When a recipient opens the file in Adobe Acrobat, Apple Preview, Google Chrome, or any mobile reader, a prompt appears demanding the secret phrase. Without it, the file will not render a single page.
Use an open password whenever a document contains private personal data, confidential pricing, or private legal agreements. If the file falls into the wrong inbox, the contents remain completely sealed.
2. Permissions Password (Owner Password)
A permissions password allows recipients to view the document freely, but it locks down specific actions. You can configure a PDF so that people can read the text on screen, but they cannot print the document, copy text to their clipboard, edit paragraphs, or extract individual pages.
This protection is common among digital publishers, academic researchers, and businesses issuing proprietary whitepapers or proposals. It stops easy plagiarism and prevents unauthorized alterations to official quotes.
| Feature | Document Open Password | Permissions Password |
|---|---|---|
| Prevents Viewing | Yes | No |
| Prevents Printing | Yes (completely locked) | Yes (customizable) |
| Prevents Text Copying | Yes (completely locked) | Yes |
| Prevents Page Extraction | Yes (completely locked) | Yes |
| Best Used For | Tax forms, IDs, medical files | E-books, contracts, price sheets |
How PDF Encryption Keeps Your Data Safe
Password protection is only as good as the underlying mathematical cipher. Older PDF tools relied on RC4 encryption. The 40-bit version can be cracked within minutes on a modern computer, and even 128-bit RC4 is now considered weak.
Modern PDF security relies on 128-bit or 256-bit Advanced Encryption Standard (AES). AES-256 is the exact same encryption standard adopted by financial institutions and government agencies worldwide to protect classified information. When you lock a PDF using 256-bit AES encryption, an attacker using a supercomputer attempting trillions of guesses per second would still take billions of years to guess a strong password.
Encryption note: A password does not merely hide the text; it scrambles the raw binary data inside the file. Even if an attacker opens the PDF inside a raw text editor or hex viewer, they see only meaningless gibberish.
How to Protect a PDF Online for Free
You do not need expensive desktop software like Adobe Acrobat Pro to encrypt your documents. Web-based utilities like PDF One Click let you secure any PDF in seconds directly inside your browser without installing software or registering an account.
- Open the Protection Tool: Go to the Protect PDF tool on PDF One Click using your desktop or mobile browser.
- Add Your Document: Drag and drop your file into the drop zone, or browse your device to select the PDF you need to lock (up to 100 MB).
- Set Your Passwords: Type the password that will be needed to open the file. If you want, set a separate owner password and choose whether printing, editing and copying are allowed.
- Encrypt and Download: Click Protect PDF. The tool applies real AES-256 encryption using QPDF, running inside your browser, so your file is never uploaded to a server. Save the protected PDF back to your device.
Because the tool runs immediately without requiring an account or email address, you can protect sensitive files on shared work computers or personal mobile phones without leaving an account footprint behind.
How to Password Protect PDFs on Your Desktop
If you are working offline or prefer built-in operating system tools, both Windows and macOS offer native options for basic document security.
Protecting via Microsoft Office (Windows)
If you are drafting a document in Microsoft Word, Excel, or PowerPoint and plan to save it as a PDF, you can set the password during export:
- Click File and select Export, then choose Create PDF/XPS Document.
- In the file dialog box, click the Options button near the bottom right.
- Check the box labeled Encrypt the document with a password and click OK.
- Enter your chosen password twice and click OK, then save your file.
Protecting via Preview (macOS)
Mac users have built-in encryption inside Apple Preview without needing third-party utilities:
- Double-click your PDF to open it in Preview.
- Click File in the top menu bar, then hold down the Option key and select Save As (or choose Export).
- Check the Encrypt checkbox near the bottom of the window.
- Enter your password, type it again to verify it, and save the file.
Rules for Creating a Bulletproof PDF Password
Encrypting a file with AES-256 means nothing if your password is “Password123” or your child’s birthday. Automated password crackers use dictionary attacks that test millions of common words, leaked passwords, and simple substitutions in seconds.
- Use Passphrases Instead of Words: Four or five random, unrelated words strung together (like harbor-velvet-cobalt-picnic) create massive cryptographic entropy while remaining easy for you to remember.
- Aim for 14 Characters or More: Length defeats brute-force software faster than complexity. An 8-character password with symbols can be cracked far faster than an 18-character password made of plain words.
- Avoid Personal Identifiers: Never use license plate numbers, street names, phone numbers, or anniversaries. These are the first data points identity thieves test.
- Send the Key Out of Band: If you email the encrypted PDF to your accountant, never include the password in that same email thread. Send the password via SMS, Signal, or tell them over a phone call. If your email account is compromised, the thief gets the file but not the key.
What Happens If You Forget Your Password?
True PDF encryption does not have a “Forgot Password?” button. Because the data itself is mathematically scrambled, there is no master backdoor hidden inside the file.
If you set a Document Open Password using modern AES encryption and forget the phrase, recovery is virtually impossible without running specialized hardware brute-force tools for weeks. Always keep a clean, unencrypted master copy in an encrypted local vault (such as a password manager or BitLocker drive), or record your passphrase securely before closing your browser.
Get in Touch with Our Team
Securing your digital paperwork should be fast, simple, and accessible from any device. If you have questions about document encryption, need help troubleshooting a specific PDF conversion, or want to suggest new features for our free document toolkit, we would love to hear from you. Reach out through our contact page and our team will get back to you promptly.