Lock PDF
Lock a PDF with a password in seconds to protect sensitive documents. Upload your PDF, set a strong password, and download a secured version instantly—ideal for contracts, invoices, reports, and personal files. Fast, secure, and free to use with no registration required.
Lock PDF
The Lock PDF tool adds password protection to any PDF file. Upload your document, set a password, and download an encrypted version that requires that password to open. Without the correct password, the file cannot be read — the content is encrypted and inaccessible to anyone who does not have it.
Password-protecting a PDF is the appropriate step when you need to control access to sensitive documents sent by email, shared via a file transfer service, or stored in a shared location. Contracts, financial statements, legal documents, HR files, and personal identification documents all benefit from password protection before distribution.
How to use the Lock PDF tool
- Click Select a File or drag and drop your PDF into the upload area. Guest users can upload up to 5 files per session (10 MB each); registered users up to 20 files (40 MB each).
- Enter a strong password. Use at least 12 characters with a mix of uppercase letters, lowercase letters, numbers, and symbols. See the password strength guidance below.
- Confirm the password when prompted. This prevents errors — a mistyped password that is not confirmed would produce a file you cannot open yourself.
- Click Lock PDF. The tool applies AES encryption to the document using your password and generates a protected copy.
- Download the locked PDF and test it immediately — try opening it in your browser or PDF viewer to confirm the password prompt appears and the correct password opens the file. Send the password to the recipient through a separate channel from the file itself.
Always keep the original un-locked PDF. The Lock PDF tool creates a new password-protected copy — it does not overwrite your original. Store the unprotected version securely. If you ever need to edit the document, change the password, or send an unlocked copy to someone with appropriate clearance, you will need the original. A locked PDF that you have also lost the password to is inaccessible to everyone, including you.
How PDF password protection works — AES encryption explained
When you lock a PDF with a password, the tool does not simply attach a password prompt to the file. It encrypts the entire document content using AES (Advanced Encryption Standard) — the same encryption algorithm used by governments, financial institutions, and security software worldwide. The content of the file — text, images, fonts, page structure — is scrambled using a cryptographic key derived from your password. The result is a file that appears as unreadable data to anyone without the key.
Modern PDF encryption uses 128-bit or 256-bit AES. Both are considered secure for all practical purposes — a 128-bit AES key has more possible values than there are atoms in the observable universe. The critical point is this: the encryption algorithm itself is not the weak link. The weak link is always the password. A file encrypted with 256-bit AES and the password "1234" can be cracked in seconds. The same file with an 18-character random password is computationally impossible to crack with any foreseeable computing power. Password strength is the deciding factor in how secure the locked file actually is.
Two types of PDF password protection — what each one does
The PDF standard defines two distinct types of password, each serving a different purpose. Understanding the difference ensures you apply the right protection for your situation:
| Open password (user password) | Permissions password (owner password) | |
| What it does | Encrypts the entire PDF file. Anyone who tries to open the document must enter this password before the content becomes visible. Without it, the file cannot be read. | Restricts what an authorized viewer can do with the document — such as printing, copying text, or editing — without requiring a password to open the file. |
| Encryption | Yes. The open password triggers full AES encryption of the document contents. The file data is scrambled and unreadable without the decryption key derived from the password. | No. The permissions password does not encrypt the file. It only sets restriction flags in the PDF structure. Viewers who can open the file can see the content. |
| Security level | Strong when combined with a strong password. With AES-256 encryption and a 12+ character password, brute-force cracking is computationally impractical. | Weak as a standalone security measure. Permissions flags can be removed by many free PDF tools without knowing the password, because the file content is not encrypted. |
| Typical use | Confidential documents: contracts, financial records, medical files, legal documents, personal identification. Any situation where unauthorized access is a genuine risk. | Brand documents, template protection, preventing accidental edits in distributed forms. Suitable for deterrence rather than hard security. |
| Supported by the Lock PDF tool | Yes — the ToolsPiNG Lock PDF tool applies an open password with AES encryption, preventing the document from being opened without the password. | This depends on the tool's implementation. Check the tool output to confirm which protection type is applied. |
Permissions passwords (owner passwords) are not a security control — they are a deterrent. Because the file content is not encrypted, the restrictions can be removed by free tools without knowing the password. Do not rely on a permissions-only password to prevent determined access to sensitive content. For genuine document security, an open password with AES encryption is required. If you need both access control and action restrictions, apply both an open password and permissions settings in a PDF editor such as Adobe Acrobat.
Password strength — the deciding factor
The security of an AES-encrypted PDF depends almost entirely on the strength of the password chosen. The table below illustrates the difference between weak and strong passwords:
| Password type | Strength | Why |
| "1234" or "password" | Very weak | Common passwords and simple numeric sequences are cracked in seconds by dictionary and brute-force tools. Never use these. |
| "london" or "company2025" | Weak | Single dictionary words, place names, and predictable combinations like word + year are found quickly by tools using wordlist attacks. |
| "P@ssw0rd!" or "Tr0ub4d0r!" | Moderate | Substituting letters for symbols (a→@, o→0) is widely known and specifically targeted. Better than simple words but still vulnerable. |
| "kB3#mQzL9!wR" (12 random chars) | Strong | A 12-character random mix of uppercase, lowercase, numbers, and symbols. Brute-forcing this with current technology is impractical — would take years. |
| "kB3#mQzL9!wRp7@xN" (18 random chars) | Very strong | 18+ random characters. Computationally impossible to crack with any foreseeable computing power. The recommended level for genuinely sensitive documents. |
| Passphrase: "correct-horse-battery-staple" | Strong and memorable | Four or more random unrelated words produce a long password that is hard to crack and easier to remember or communicate verbally. Good for passwords you need to type. |
Password management — storing and sharing safely
- Use a password manager (Bitwarden, 1Password, KeePass, or similar) to generate and store strong random passwords. Do not try to remember complex passwords from memory.
- Send the document and the password through separate channels. If you email the locked PDF, send the password by text message, phone call, or a secure messaging app. An intercepted email that contains both the PDF and its password provides no security at all.
- Use a unique password for each document. Reusing the same password across multiple locked PDFs means that anyone who learns the password for one document can open all of them.
- Never include the password in the same email, message, or upload as the locked PDF. This is the most common mistake that renders password protection useless.
What locking a PDF does — and does not — do
Password protection with an open password encrypts the document content so only the password holder can open it. Understanding what it does not do helps you apply the right tools for your complete security needs:
- Locking does not prevent screenshots or photographs. Once a document is opened on a screen by an authorized recipient, they can photograph or screenshot any page. No PDF tool prevents this.
- Locking does not verify the recipient's identity. Password protection controls who can open the file, not who the file was intended for. If the recipient shares the password, anyone with it can open the document.
- Locking does not provide a digital signature. A digital signature verifies who created or approved the document and proves it has not been tampered with. Password protection only controls access. These are separate tools for separate purposes.
- Locking does not watermark the document. A watermark (CONFIDENTIAL, company name, recipient name) communicates status and ownership visibly. For maximum document security, apply a watermark first, then lock the PDF.
- Locking a PDF that was already edited does not hide revision history. Some PDFs retain metadata. If you are concerned about prior revision content being visible, clean the document before locking it.
Common use cases
| Document type | Why password-protect it | Additional steps to consider |
| Contract or legal agreement | Contracts sent by email travel through servers and inboxes where access is not always controlled. A password ensures only the intended parties can open and read the document. | Complete all content edits before locking. Add a watermark (DRAFT or CONFIDENTIAL) before locking if the document is still in negotiation. Send the password through a separate channel. |
| Financial record (invoice, statement) | Bank statements, tax documents, pays lips, and invoices contain personal or business financial data. Password protection prevents casual access if the email is forwarded or the file is found on a shared device. | Use a document-specific password rather than a shared team password. Keep a record of the password in a password manager alongside the document reference. |
| Medical or personal health record | Medical documents contain sensitive personal data subject to privacy regulations in many jurisdictions. Password protection adds a layer of access control above the email delivery channel. | Consider whether emailing medical records is appropriate at all given applicable regulations. If required, password protect and deliver the password by phone. |
| HR document (offer letter, contract) | Employment offers, salary information, and HR records are shared with specific individuals and should not be accessible to anyone who forwards the email or has access to the recipient's inbox. | Use a unique password per recipient. Communicate the password by phone call rather than email or message. |
| Client proposal or sensitive report | Proposals contain pricing, strategy, and business information that should only be accessed by the intended client contact. Password protection prevents the document being forwarded uncontrolled. | Combine with a watermark (client name, PREPARED FOR: [Name]) before locking. The watermark identifies which copy is which even after the document is opened. |
| Identification document scan | Scans of passports, driving licenses, or national identity documents should never be sent unprotected. A password protects against interception or access via a compromised inbox. | Consider whether emailing identification documents is necessary. If it is, password protect and share the password by a completely separate channel. |
Usage limits
| Account type | Daily uses | Max file size | Files per session |
| Guest | 25 per day | 10 MB per file | Up to 5 files |
| Registered | 100 per day | 40 MB per file | Up to 20 files |
Related PDF tools
- Unlock PDF — remove password protection from a locked PDF when you have the password and are authorized to unlock it.
- Watermark PDF — add a visible text or image watermark (CONFIDENTIAL, company name, recipient name) before locking. Combining watermarking and locking provides both a visual deterrent and an access barrier.
- Merge PDF — combine multiple documents into one PDF before locking, so the recipient receives one protected file.
- Organize PDF — reorder and correct pages before locking, so the final locked file is in the right order.
- Remove PDF Pages — strip out any pages you do not want to share before locking the document.
Frequently asked questions
What does 'Lock PDF' do?
It applies AES encryption to a PDF file using a password you set. The encrypted file cannot be opened without the correct password — the content is scrambled and unreadable to anyone who does not have it. Once the correct password is entered, the file decrypts and displays normally in any standard PDF viewer. The tool creates a new encrypted copy of your file; the original is not modified.
What encryption does the tool use?
The tool applies AES (Advanced Encryption Standard) encryption — the same standard used by governments, banks, and security software globally. AES is available in 128-bit and 256-bit key lengths. Both are secure for all practical purposes. The critical factor is password strength, not the AES bit length. A 256-bit AES file with a weak password ("1234") is trivially easy to crack. The same file with a 16-character random password is computationally impossible to crack with current or foreseeable computing power.
What is the difference between an open password and a permissions password?
An open password (also called a user password) encrypts the file — anyone trying to open the PDF must enter this password or the content remains inaccessible. A permissions password (also called an owner password) sets action restrictions on an unencrypted file — preventing printing, copying, or editing — without requiring a password to view it. The Lock PDF tool applies an open password with AES encryption. Permissions passwords alone are not a security measure — the file content is accessible without encryption, and permissions restrictions can be removed by free tools.
Can I remove the password later if I need to?
Yes, if you know the password. Use the ToolsPiNG Unlock PDF tool: upload the locked file, enter the password, and download the unlocked version. This requires you to know the correct password — there is no way to unlock a file without it. This is why keeping the original unprotected version and storing the password in a password manager is essential. Forgetting the password to a locked PDF means the document is permanently inaccessible.
Will locking change the file size or content?
The content of the PDF — text, images, pages, and layout — is not changed by locking. The same document appears once the correct password is entered. The file size impact of AES encryption is minimal — typically less than 1% larger than the original. Locking does not compress, alter, or reformat the document in any way beyond adding the encryption layer.
What should I do if I forget the password?
If you have forgotten the password to a locked PDF, you cannot open it without it. AES encryption with a strong password is not reversible without the key. This is why keeping an unprotected original and recording the password in a password manager is so important. Do not lock a document using only a password you have memorized without also recording it securely. There is no recovery mechanism built into the PDF standard — a forgotten password means permanent loss of access.
Is it safe to upload sensitive documents to lock them online?
ToolsPiNG processes your uploaded files only to apply the encryption and does not permanently store or publish documents. For most professional use cases — contracts, invoices, proposals — this is a practical and acceptable approach. For documents of the highest sensitivity (identification documents, medical records, privileged legal materials), consider whether a local desktop tool (Adobe Acrobat, LibreOffice with PDF export) is more appropriate for your security requirements. Never upload sensitive documents on a shared or public device.
Is the Lock PDF tool free?
Yes. The tool is free within the daily usage limits shown above. Guest users can run 25 lock sessions per day and upload up to 5 files per session (10 MB each) without creating an account. Registering a free ToolsPiNG account increases the daily limit to 100 sessions, the file size limit to 40 MB per file, and the per-session file count to 20.