How Secure Is a Password-Protected PDF?
Understand encryption strength, password quality and the limits of PDF password protection.
Encryption and password strength are separate
AES-256 is a strong encryption standard, but the practical protection of a file still depends on the password. A short predictable password can be attacked far more easily than a long random one.
Use unique credentials and avoid personal information that a recipient or attacker could guess.
Protection ends after authorized access
Once a recipient legitimately opens a PDF, they can usually view the information on their screen and may be able to take screenshots or otherwise reproduce it. Encryption controls access to the encrypted file, not every action after viewing.
For highly controlled information, use a document-management system with identity, access logging and revocation rather than relying only on an attachment password.
Compatibility matters
Very old PDF readers may not support newer encryption modes correctly. Test the protected file in software representative of the recipient's environment if compatibility is important.
Keep the encryption process local when possible so the unprotected source and password do not need to be transmitted to a conversion service.
Use the related Pageivo tool
Secure a PDF with a password. The operation runs in your browser and does not require an account.
This guide provides general technical and workflow information. For regulated records, legal filings, security-sensitive data or organizational compliance, follow the rules that apply to your specific situation.