A PDF without a password is a document anyone can open, copy from, and in many cases edit. For personal files that never leave your own devices that's fine, but for anything you're sending — contracts, invoices, medical records, financial statements — a password adds a straightforward layer of protection that takes about thirty seconds to apply.
Portimg's PDF encryption tool handles this in the browser without any software installation. Here's how it works and what's worth knowing about PDF security before you rely on it.
What PDF password protection actually does
There are two distinct types of PDF password, and understanding the difference matters:
An open password (also called a user password) prevents anyone from opening the document without entering the password first. This is the standard "lock the file" protection — the person you send it to needs the password to read it at all.
A permissions password (also called an owner password) allows the file to be opened and read, but restricts specific actions: printing, copying text, filling forms, or editing content. This is useful when you want a document to be readable but not reproducible — a draft contract you're sharing for review, for instance, or a report you're distributing but don't want extracted and reformatted.
Most browser-based tools, including Portimg's, apply an open password. If you need permissions restrictions as well, that's worth checking before you start.
Applying a password with Portimg
Go to portimg.com/add-pdf-password, upload your PDF, enter the password you want to set, and download the encrypted file. The process takes under a minute. No account is required, and the file is deleted from the server after you download it.
The encryption applied is AES-256, which is the current standard for secure document encryption and the same level used by financial institutions and government systems. A well-chosen password with AES-256 encryption is not practically breakable.
Choosing a password that actually protects the file
The encryption is only as strong as the password. AES-256 with a weak password can still be defeated by dictionary attacks or simple guessing. A few principles worth following:
Length matters more than complexity. A 16-character passphrase of random words is harder to crack than an 8-character string of letters, numbers, and symbols, and considerably easier to remember or communicate. If you need to share the password with someone, a phrase is easier to convey verbally without transcription errors.
Don't reuse passwords from accounts. If a password you've used elsewhere is ever compromised in a data breach, that password and its variations are the first things an attacker tries.
Store it somewhere you won't lose it. A password-protected PDF where you've forgotten the password is unrecoverable — the encryption works both ways. Use a password manager, or store the password in a note alongside the file name so you can find it later.
When to use it
The most common use cases are documents shared by email or file transfer: contracts sent to clients, financial documents sent to accountants, medical records shared with providers, HR documents distributed to employees. Any file that contains information you wouldn't want forwarded to unintended recipients is a reasonable candidate for password protection.
For documents that are already password protected and need to be unlocked — inherited files, PDFs from a previous system — Portimg's PDF password remover handles removal for files where you know the existing password. For assembling multiple documents before encrypting them, the PDF merge tool lets you combine them into a single file first, then apply one password to the whole document.
One limitation worth knowing
Password protection secures the file in transit and at rest, but it doesn't control what happens after someone with the password opens it. A recipient who has the password can still take a screenshot, photograph the screen, or share the password with others. For documents requiring stricter access control — legal filings, confidential business plans — encryption is a useful baseline but shouldn't be your only safeguard. Consider also who you're sharing the password with and how.
For most everyday document sharing, though, applying a password is a sensible habit that takes almost no time and meaningfully reduces the risk of unintended access.