How to Add Password to PDF Online Free
An opening password controls access to an encrypted copy; it does not make a PDF read-only. Before using Protect, confirm that the recipient can accept an encrypted attachment and that you can retain the password independently of the file.
The settings PDFcraft actually applies
Protect uses qpdf WebAssembly with AES-256 encryption. The entered value is both the user and owner password, and the configuration permits full printing and content extraction. There are no separate owner-password or permissions controls. Someone you give the password to should be treated as able to access the contents. The password is used in password-based key handling; it is not itself a 256-bit encryption key.
Create and verify a protected copy
Finish the document first
Prepare an unencrypted PDF and complete page selection, ordering and size checks before protection. The other processing tools may reject encrypted input.
Enter and confirm a password
Both entries must match and be at least four characters long. That minimum is an input rule, not evidence of strength. Use a password that is not predictable or reused for unrelated access.
Check the saved file
After downloading, reopen the copy with the password. Verify that access and the pages meet your needs; keep the unencrypted original in an appropriate location.
A successful operation is a limited result
The qpdf wrapper checks its exit status and requires a nonempty output. Controlled Node tests exercised correct, missing and wrong passwords. They did not establish universal security, signature preservation or interactive form behavior. An encryption algorithm does not make a weak password hard to guess. Strong encryption alone does not establish that a workflow meets legal or compliance requirements.
Add a visible confidentiality label
A watermark can communicate how you want a document handled, but it is removable and does not prevent copying or editing. It supplies neither cryptographic security nor proof of protection. Add such a label before encryption if it is useful to your recipient.
When protection fails
Already-protected, damaged or unsupported inputs can fail. The engine also needs its WASM resource from jsDelivr; a loading failure is different from an encryption failure. Processing uses the local runtime, not a document-upload backend, but site/runtime network requests still occur.
Tools for this task
Frequently asked questions
Does the four-character minimum make a password safe?
No. It is only the current form validation. Password choice and how you disclose it remain important; the interface does not certify password strength.
Can I block printing while letting someone open the file?
Not through PDFcraft Protect. Its current qpdf options allow printing and extraction, and this interface provides no alternate permissions policy.
Do I need Adobe software or a subscription for this workflow?
PDFcraft Protect requires neither an Adobe installation nor an Adobe subscription. It handles one PDF per operation.
How do I access and save a PDF in a mobile browser?
Available file locations depend on your browser, device and where the file is stored. Locate the output through browser download controls; the save location can vary. Retrieving a cloud file and storing the result in a chosen cloud service are separate transfers from local encryption.