How to Password Protect (and Unlock) a PDF
Not every PDF needs a password, but the ones that do — tax returns, signed contracts, anything with a Social Security number or bank details sitting in it — really do need one, and it's worth understanding what that password actually protects before you rely on it.
What password protection actually does
PDF security generally covers two separate things that get lumped together under "password protecting a file." The first is an open password (sometimes called a user password), which encrypts the file so it can't be opened at all without entering the correct password — this is the real protection, since without it the content is genuinely unreadable, not just hidden behind a prompt. The second is permissions, which control what someone can do once the file is open — printing, copying text, editing — even without necessarily requiring a password to view it. These are different guarantees: an open password protects the content itself, while permissions are more like a polite request that most PDF viewers respect but that a determined person with the right tools can often work around. If your goal is genuinely keeping the content private, the open password is the part that matters.
When it's actually worth doing
Password protection earns its place for documents where the content itself is sensitive and the file might end up somewhere you don't fully control — attached to an email that gets forwarded, sitting in a shared drive, stored on a device that could be lost or accessed by someone else. Tax documents, signed contracts, medical records, anything with financial account details are the clear cases. It's overkill for most everyday files — a flyer, a public report, a document you're sharing internally where sensitivity isn't really a concern — and adding a password to those just creates friction (another password to track, another step for anyone who legitimately needs to open it) without protecting anything that needed protecting. Protect PDF handles adding that encryption when it's actually warranted.
Removing a password from a file you own
If you have a password-protected PDF and the rights to access it — your own document, a file you were given the password for — but you're tired of typing the password every time or need to share it with a workflow that can't handle protected files, Unlock PDF removes the encryption. You'll need the current password to do this, which is the point — it's meant for removing protection from files you're authorized to open, not for getting into files you aren't.
Signing is not the same as encrypting
People sometimes reach for password protection when what they actually want is a signature, and the two solve completely different problems. An open password controls who can see the file. A signature confirms who agreed to it and that it hasn't been altered since. If you need to sign a contract, add your name to an agreement, or get someone else's signature on a document, that's Sign PDF, not encryption — a password on a contract does nothing to indicate anyone actually agreed to its terms.
Redaction is not the same as password protection
The other common mix-up: password protection controls who can open the whole file, but it doesn't remove anything from inside it. If a document has a section that shouldn't be shared at all — a Social Security number in an otherwise shareable form, a confidential clause in a contract you're sending to a third party — password protecting the file doesn't address that; anyone with the password still sees everything. What you actually need there is Redact PDF, which permanently removes specific content from the document itself rather than just gating access to the whole thing. Redaction and encryption solve different problems and it's common to need both on the same document — redact the sensitive section, then password protect what's left.
The short version
Add a password when the content itself is genuinely sensitive, skip it when it's just adding friction to a file nobody's trying to get into anyway, and remember that a password gates access to the whole file — it doesn't remove specific content (that's redaction) and it doesn't prove anyone agreed to anything (that's a signature).