Password-Protecting a PDF: What It Protects and What It Does Not
An honest explanation of PDF passwords, encryption, and permission settings, so you know when password protection is the right choice and how to share a protected file safely.
Two kinds of PDF password
PDF files support two separate passwords. The user password, often called the open password, is required to open and read the document. When a PDF has an open password, its contents are encrypted, and the file is unreadable without it. Protect PDF on FileBuddy sets this kind of password using AES-256 encryption.
The owner password, sometimes called the permissions password, controls what someone can do after opening the file, such as printing, copying text, or editing. These permissions are enforced by the PDF reader. Mainstream readers respect them, but some tools ignore them, so treat permissions as a polite request rather than real security.
| Setting | What it does | How strong it is |
|---|---|---|
| Open (user) password | Encrypts the file; needed to read it | Strong, if the password is strong |
| Permissions (owner) password | Asks readers to block printing, copying, or editing | Weak; depends on the reader |
| Redaction | Permanently removes hidden or sensitive content | Strong, but the content is gone for everyone |
Your password is the real protection
Encryption is only as strong as the password. A short, guessable password like a birth date or "1234" can be broken by tools that try many passwords quickly. A long password made of several unrelated words, or a random password from a password manager, is far harder to break.
A good rule is at least 12 characters, not reused from another account, and not based on information that is easy to find, such as names, phone numbers, or dates.
How to share a protected PDF safely
Send the file and the password separately. For example, email the PDF and send the password by text message or tell it to the person directly. If both travel in the same email, anyone who sees that email has everything they need.
Keep your own copy of the password somewhere safe. There is no "forgot password" option for an encrypted PDF. FileBuddy cannot recover it, and neither can any legitimate service, because the password is never stored anywhere.
When a password is not the right tool
If you need to share a document but hide some of its content, such as an account number or an address, a password does not help: whoever opens the file sees everything. Use Redact PDF to remove that information permanently before sharing.
PDFs can also contain hidden metadata such as the author name, the software used, and editing dates. Remove PDF Metadata clears these fields if you do not want them shared.
Removing a password you know
If you have a protected PDF and know its password, Unlock PDF opens it with that password and saves an unprotected copy. This is useful for documents you own, such as bank statements, when you want to merge or edit them. Unlock PDF cannot remove a password you do not know.
Key Takeaways & Engineering Checklist
- An "open" password encrypts the file. Without the password, the content cannot be read.
- Permission settings such as "no copying" depend on the PDF reader respecting them and are much weaker than the open password.
- The strength of the protection comes almost entirely from the password you choose.
- Send the password through a different channel than the file, and keep a copy, because a forgotten password cannot be recovered.