Privacy and sharing
What PDF passwords do and do not protect
A password on a PDF can mean two quite different things. One keeps people out of the document altogether; the other only asks software to limit what people do once they are in. Knowing which you have helps you decide whether it is enough.
RedactNinja guide. Updated 5 October 2026.
Two kinds of PDF password
The open password, also called the user password, is needed to open the file at all. Without it, a PDF reader cannot display the pages.
The permissions password, also called the owner password, is about restrictions. A PDF can say that printing, copying text, editing or filling in forms is not allowed. A reader that follows the PDF standard applies those restrictions when the file is opened normally, and lifts them for someone who enters the permissions password.
A file can have either password or both. If it has only a permissions password, anyone can open and read it without being asked for anything.
What encryption protects
When a PDF has a password, its contents are encrypted. With an open password and modern encryption, the pages are unreadable to anyone who does not know the password, whichever software they use. That is real protection for a file that is lost, sent to the wrong address or intercepted.
The strength of that protection depends on two things: the encryption method and the password. The qpdf manual, from an independent open source PDF tool, says AES encryption is the only secure option in the standard PDF security handler, and recommends 256-bit AES with a strong password. Older methods, still found in some files, should not be treated as secure.
Permission restrictions depend on the software
Restrictions on printing, copying and editing work differently. The open password and the permissions password both lead to the same encryption key, so any program that can open the file can, in principle, ignore the restrictions. The qpdf manual puts it plainly: there is fundamentally no way to stop an application from disregarding them.
PDF readers that follow the standard are expected to honour the restrictions, so they are a useful signal of what the sender wants. They are not a security control. Do not rely on them to stop someone who has the file from copying or reusing its content.
Password strength matters most
Strong encryption cannot help if the password is easy to guess. Someone who has the file can try passwords as often as they like, without being locked out. Short passwords, single dictionary words and anything connected with the document, such as a name or reference number, are the first to be tried.
The National Cyber Security Centre suggests combining three random words to make a password that is long enough and still memorable. A password manager can create and store a long random one for you. Use a different password for each recipient or batch of documents.
Share the password separately
A password sent in the same email as the file protects very little: anyone who gets the email gets both. The ICO's guidance on encryption says not to include the password in the same email as the encrypted attachment, and to share it by a separate channel, for example by telephone once the recipient has confirmed the email arrived.
Agree the method with the recipient in advance, and do not reuse the same password for everything you send them.
Protection is not redaction
A password controls who can open a document. It does nothing about what is inside. Once the recipient enters the password, they see every page, along with any hidden text, comments, attached files and metadata the PDF contains. If they forward an unprotected copy, all of that goes with it.
If some information should not reach the recipient at all, remove it before you add a password. See how to redact a PDF properly and how to remove hidden data from a PDF before sending it.
What RedactNinja's Protect PDF sets
Protect PDF adds an open password and encrypts the whole document with 256-bit AES. The password must be at least 12 characters. It does not set permission restrictions, so once someone opens the file they can print and copy it. The tool checks that the file is locked without the password and opens with it before the download starts. Encryption happens in your browser on your device, and the file and password are not uploaded.
For the steps, see how to password protect a PDF. To remove a password you know, use Unlock PDF; it does not bypass passwords you do not have.
Quick answers
- Can someone open my PDF without the open password? Not if it uses modern encryption and a strong password.
- Will a permissions password stop copying? Only in software that chooses to honour it.
- Is a password enough for personal data? It helps in transit, but you still need to decide what the recipient should see.
- Can a lost password be recovered? Not by RedactNinja. Keep the original file or store the password safely.