How to Password Protect a PDF Before Emailing It

1. 1

   Upload the PDF

   Add it to Lock PDF on Tools4PDF, or open it in a desktop PDF app with an encryption option.

2. 2

   Set a strong password

   Type a password, confirm it, and lock the file.

3. 3

   Test it, then send

   Open the locked copy to confirm it asks for the password, attach it, and send the password through a different channel.

Lock PDF sets a password that is required to open the document. The content itself, including text, images and layout, is not altered.

1. 1

   Upload your file

   Drag the PDF into the page or browse for it. Files up to 50 MB are supported.

2. 2

   Enter the password twice

   The tool asks you to type the password and confirm it. If the two entries do not match, it will tell you before locking.

3. 3

   Lock the PDF

   The file is encrypted with 256-bit AES and processed securely, and uploaded files are deleted automatically afterwards.

4. 4

   Download and keep the original

   Save the locked copy. Keep your unprotected original somewhere safe, because you may need it if the password is lost.

5. 5

   Test before sending

   Open the locked file on your own device. It should prompt for the password. Try a wrong one as well to be sure.

Length matters more than cleverness. A long passphrase made of several unrelated words is easier to remember and harder to guess than a short string of symbols. Avoid anything someone could work out from the email itself, such as the recipient name, your company, a birthday or a case number.

• Use a passphrase of four or more random words, or a password of 12 or more characters.
• Do not reuse a password from your email, bank or other accounts.
• Avoid obvious patterns such as 12345678, the word "password" or the file name.
• Use a password manager to generate and store it if you have one.
• Make a different password for each recipient or document when the content is sensitive.

Never put the password in the same email as the attachment. If someone can read that message, they can read both, and the lock achieves nothing. Send the password through another route: a phone call, a text message, a messaging app or a separate conversation.

Better still, agree on the password in advance with the recipient. Also remember that an ordinary email is not end-to-end encrypted, so a password-protected attachment is a useful extra layer, not a complete security system. For very sensitive material, consider whether a secure file-sharing link or your organisation's approved method is more appropriate, and follow any data-handling rules you are bound by.

PDFs can carry two kinds of passwords. An open password, sometimes called a user password, is needed to view the file at all. An owner password controls permissions, such as printing, copying text or editing, for people who can already open it. Some PDF apps let you set both.

Lock PDF sets a password to open the document, which is the part you usually want when emailing something private. If you need to restrict printing or copying as well, check your PDF software for permission settings, and remember that permission restrictions are generally respected by well-behaved apps but are weaker than the protection of not being able to open the file.

We cannot recover or reset a forgotten password. Without it the file cannot be opened, which is exactly what makes the protection meaningful. This is why keeping the original unlocked file, or saving the password in a manager, is important.

If you know the password and want to remove it later, for example to archive the document or let someone edit it, use the PDF Unlock tool. You enter the current password and download a copy without protection. Only unlock files you own or have permission to open.

A password only protects what is inside the file, so make sure the file contains what you intend. Look through every page for information the recipient does not need. If a page includes details that should be removed rather than hidden, black them out properly with Redact PDF first and lock the result afterwards.

Then check the practical details. Make sure the file name does not reveal anything sensitive, because the name is visible even when the contents are locked. Confirm the recipient can open password-protected PDFs, which most modern readers can. It is also worth telling the recipient in advance that a protected file is coming and who will send the password, so they do not mistake the message for spam or a phishing attempt. Finally, send the locked copy, not the original, and keep a note of which password you used for which person so you can answer questions later.