"Password-protected" can mean a few different things depending on the PDF, and understanding the difference helps you pick the right level of protection for what you're sending.

Open passwords vs. permission passwords

An open password (sometimes called a user password) requires anyone to enter a password before the document will display at all. A separate permission password (owner password) can instead leave the document readable but restrict actions like printing, copying text, or editing — useful for distributing a document you want people to read but not repurpose.

Not all encryption is equal

The PDF standard has evolved through several security handlers over the years, from an original 40-bit scheme up to modern 256-bit AES encryption. Older 40-bit and 128-bit schemes are still widely supported by PDF readers and are a meaningful improvement over no password at all, but they're considered weak by modern cryptographic standards and can, in principle, be broken by a determined attacker with the right tools. For everyday sharing — keeping a casual snooper out of a file on a shared drive, or adding friction before an email attachment can be opened — this is usually a reasonable and proportionate choice. For information with real regulatory or legal sensitivity, stronger, purpose-built encryption is the safer choice.

Password protection isn't the whole picture

A password only controls whether a PDF viewer will open the file. It doesn't, by itself, prevent someone from screenshotting the opened document, and it doesn't protect a document once it's been decrypted and saved elsewhere. Think of it as one layer in a broader habit of secure sharing: use a strong, unique password, share that password over a different channel than the file itself (a text message rather than the same email), and avoid reusing the same password across many documents.

A simple checklist before sending a sensitive PDF

  • Does this document need to be encrypted at all, or would sending it through a more secure channel (like a company file-sharing tool) already solve the problem?
  • Is a standard PDF password appropriate, or does the sensitivity of the content call for something stronger?
  • Am I sending the password itself somewhere separate from the file?

Our Protect PDF tool applies the standard PDF password scheme entirely in your browser, which is a good match for everyday, non-regulated sharing.