Two Types of PDF Passwords
PDF files can have two completely different types of password protection, and confusing them is the most common source of PDF security mistakes.
User password (open password): Required to open and view the file at all. Anyone who receives the PDF must enter this password to see any content.
Owner password (permissions password): Controls what the recipient can do with the file — printing, copying text, editing, or adding annotations. The file opens normally, but certain actions are restricted. This password is set by the creator and is not shared with recipients.
When to Use Each Type
Use a user password when: The content of the PDF is sensitive and should only be accessible to specific people. Examples: financial reports, legal documents, medical records, confidential contracts.
Use an owner password when: You want to prevent recipients from modifying, copying, or printing the document. Examples: templates you sell, academic papers, official certificates.
PDF Encryption Strength
Modern PDFs support 256-bit AES encryption, which is considered secure for virtually all practical purposes. Older PDFs may use 40-bit or 128-bit encryption, which can be broken with enough computing power.
When adding a password to a PDF, use a tool that creates 256-bit AES encryption to ensure proper protection.
How to Choose a Strong PDF Password
A weak password defeats the purpose of encryption. PDF passwords are vulnerable to dictionary attacks, so avoid:
- Common words (password, document, 123456)
- Predictable patterns (company name + year)
- Short passwords (under 8 characters)
A good PDF password is at least 12 characters and includes uppercase, lowercase, numbers, and symbols. A passphrase is even better: three or four random words joined together are long and memorable.
Sharing a Password-Protected PDF Securely
Never send the password in the same email or message as the PDF. Instead:
- Send the PDF by email, then text the password
- Use a password manager to share both securely
- Call the recipient and tell them the password verbally
Removing a Password You Know
If you have the password for a protected PDF and want to remove it:
- Open the PDF in Adobe Reader or Chrome
- Enter the password to open it
- Print to PDF (Ctrl+P → Save as PDF)
The printed version has no password. This works because you are creating a new PDF from the decrypted content.
What Passwords Cannot Protect Against
PDF passwords encrypt the file content, but they cannot prevent:
- Screenshots of visible pages
- Re-typing content by hand
- Photography of the screen
Password protection is a practical barrier against casual access, not an absolute security measure. For truly sensitive documents, consider additional controls like digital rights management (DRM) or secure document portals.
PDF Security for Business
For businesses sending multiple sensitive documents regularly, consider:
- Using a document management system with built-in access controls
- Sending documents via secure portals rather than email
- Setting document expiration dates so files stop being accessible after a set time
Password-protected PDFs are a good starting point, but for high-stakes business documents, layered security is always better.