Skip to content
FigureOwl

Protect PDF with a Password

Add strong AES-256 encryption and a required opening password while keeping the document entirely on your device.

Free No sign-up Runs in your browser Updated

Choose a PDF to protect

Private AES-256 encryption

The PDF and password stay in this browser. FigureOwl does not upload, store or log either one.

Set the opening password

Use at least 12 characters. A unique 16+ character password is safer against guessing.

Save the password before continuing. There is no recovery or backdoor. Share the PDF and its password through separate channels when possible.

Add a password that is required to open the PDF

FigureOwl creates a new encrypted copy of your PDF. Anyone who receives that copy must enter the password before a compatible PDF reader can display its pages. The original file on your device is not modified or deleted.

Real AES-256 PDF encryption

The tool uses qpdf in WebAssembly to apply 256-bit AES encryption using the PDF 2.0 security handler. It verifies the downloaded result is encrypted, requires a password and still contains the original number of pages before making it available to you.

Choose a password that resists guessing

Encryption strength cannot compensate for a weak password. Use at least 16 random characters or a long, unique passphrase. Do not reuse an email, banking or workplace password. The built-in generator uses your browser's cryptographically secure random number generator and creates a 20-character password.

Store the password before you close the page

FigureOwl cannot recover, reset or reveal a forgotten password. Save it in a reputable password manager before sending or archiving the protected PDF. Keep an unencrypted original in a secure location if you may need to revise the document later.

Send the file and password separately

If a document is sensitive, avoid placing the protected PDF and its password in the same email or chat. For example, send the document by email and provide the password by phone or another trusted channel. Confirm the recipient before sharing either item.

Know what password protection can and cannot do

Password protection helps when a file is intercepted, misplaced or opened by the wrong person. After an authorized recipient opens it, they may still take screenshots, photograph the screen or create another copy. Encryption does not replace careful access control, secure sharing or a retention policy.

Browser-local privacy

The selected PDF and password are processed in browser memory and are not uploaded to FigureOwl. The protection engine is downloaded as part of the website, then the encryption work happens on your device. FigureOwl does not retain the document or password.

Check the protected copy before relying on it

Open the downloaded file in the PDF reader your recipient will use. Confirm it asks for the password, rejects an incorrect password and opens every page with the correct one. Adding or changing encryption may invalidate an existing digital signature, so verify signed documents separately.

Frequently asked questions

Choose one PDF, enter and confirm a password of at least 12 characters, then select Protect PDF with Password. Save the downloaded encrypted copy and test it in your PDF reader.

The tool applies AES-256 encryption with the PDF 2.0 security handler and verifies the resulting file reports 256-bit AESv3 encryption.

No. The PDF and password stay in your browser. A WebAssembly protection engine performs the encryption locally on your device.

No. There is no password reset, recovery key or backdoor. Save the password in a password manager and retain a secure original if needed.

Use at least 16 random characters or a longer unique passphrase. The tool requires 12 characters and can generate a strong 20-character password.

Not directly. Open or unlock the existing protected PDF with its current password first, then use the unencrypted copy to set a new password.

No. Encryption controls who can open the file, but an authorized viewer may still capture or reproduce its contents. Share sensitive files carefully.

Yes. Rewriting or encrypting a signed PDF can invalidate its existing digital signature. Verify the resulting document and signature status in your PDF reader.

You might also need