How to Password Protect a PDF in Adobe Acrobat

Adding a password to a PDF is the basic security step before sharing a sensitive document — a contract, a tax form, a medical record. Adobe Acrobat has a dedicated Protect tool that adds PDF encryption with control over both the open password and the permissions (printing, editing, copying). This guide walks through the steps in Acrobat DC 2024 and later, explains the two kinds of PDF passwords, and is honest about the limits — including what IXPDF can and cannot do today.

The two kinds of PDF passwords

PDF supports two independent passwords. Understanding the difference is the key to using encryption correctly:

• User password (open password): required to open the PDF. Without it, the file cannot be read at all. This is what most people mean by "password protect a PDF."
• Owner password (permissions password): required to change the permissions — printing, editing, copying text, filling forms. The PDF can still be opened (unless you also set a user password), but restricted actions need the owner password.

You can set either or both. The common pattern for a sensitive document is to set a user password (so only the recipient can open it) and an owner password (so the recipient cannot remove the restrictions you set).

How to password protect a PDF in Acrobat — step by step

1. Open your PDF in Adobe Acrobat (Pro or Standard).
2. Go to Tools → Protect. The Protect panel opens on the right.
3. Click Encrypt with Password. Acrobat shows a warning: "Once you confirm this action, you cannot recover the password if you forget it." Click Yes to continue.
4. The Password Security - Settings dialog appears. In the Require a password to open the document field, type a strong password and confirm it. This sets the user password.
5. (Optional) Set permissions: in thePermissions section, check Restrict editing and printing of the document. Set a permissions password, then choose:
   • Printing Allowed: None, Low Resolution (150 dpi), or High Resolution.
   • Changes Allowed: None, Inserting, Deleting & Rotating Pages, Filling Form Fields & Signing, Commenting, Filling Form Fields, or Any Except Extracting Pages.
   • Enable copying of text, images, and other content:uncheck to prevent copy-paste.
   • Enable text access for screen reader devices:keep checked for accessibility — screen readers can still read the text even if copying is disabled.
6. Choose encryption compatibility: pickAcrobat 7.0 and later for AES-128 (good balance of security and compatibility) or Acrobat X and later for AES-256 (strongest, but older readers cannot open it). AvoidAcrobat 6.0 — it uses RC4, which is broken.
7. Click OK. Acrobat applies the encryption when you save. Choose File → Save (or Save As to keep the unencrypted original).

The encryption happens locally. The password never leaves your machine — only the encrypted bytes are written to disk.

Encryption strength: AES vs RC4

PDF supports three encryption algorithms. Acrobat DC 2024 defaults to AES, but you should know the difference:

• RC4 (PDF 1.4 and earlier): deprecated and broken. Do not use. Acrobat still offers it for backward compatibility — do not pick it.
• AES-128 (PDF 1.5, Acrobat 7.0+): secure and widely compatible. The right default for most documents.
• AES-256 (PDF 1.6 / PDF 2.0, Acrobat X+):strongest, but older PDF readers cannot open it. Use for highly sensitive documents where you know the recipient has a modern reader.

Common mistakes

• Forgetting the password. Acrobat cannot recover it. Store the password in a password manager before you save.
• Setting only an owner password. The PDF can still be opened by anyone — only the restrictions are protected. If you want to keep the document private, set a user password.
• Using RC4 for compatibility. RC4 is broken. If compatibility is a concern, use AES-128, not RC4.
• Believing permissions stop a determined attacker.Owner-password restrictions are advisory — many tools ignore them if the user can open the file. The user password is the real protection; permissions are a convenience, not a wall.
• Saving over the only copy. Save As to a new file so you keep the unencrypted version in case you forget the password.