What this tool does
PDF Password Protector writes a new encrypted PDF. You must set an open password. An optional owner password is used when provided; otherwise the open password is reused as the owner password.
Choose this tool when…
- You have an unencrypted PDF you are allowed to encrypt before sharing.
- You want a Share, View only, Flexible, or Custom permission preset on the new file.
Typical jobs this page is built for
- Add an open password before emailing a working copy.
- Use View only when you want print/copy/modify/annotate flags all off in the new file.
- Set a separate owner password when you do not want it to match the open password.
How processing actually works
pdf-lib-plus-encrypt loads the bytes, then encrypt({ userPassword, ownerPassword, permissions }). Printing is stored as highResolution or false. The download is {base}-protected.pdf.
- Share
- Print on; copy, modify, annotate off.
- View only
- Print, copy, modify, annotate all off.
- Flexible
- Print, copy, and annotate on; modify off.
- Custom
- Each of those four flags is taken from the checkboxes.
Supported files, outputs, and limits
- Input
- One PDF, up to 50 MB.
- Output
- {base}-protected.pdf
- Passwords
- Open password required and must match confirmation. Generate-password helper builds a 12–32 character mix from a limited character set.
Step-by-step workflow
- Upload a PDF that is not already encrypted.
- Enter and confirm the open password.
- Optionally set a different owner password.
- Pick Share, View only, Flexible, or Custom.
- Click Protect PDF.
- Open {base}-protected.pdf in a reader and test the password.
What changes in the output
The result is a newly encrypted PDF. Rewriting typically invalidates existing certificate signatures. Store the password; the tool does not recover it later.
Privacy and where processing occurs
Encryption runs in the browser. The PDF and passwords are not uploaded to a protection API. Identified analytics may include byte counts and permission-preset labels, not the password strings or document text.
How this differs from nearby DevToolKit tools
- PDF Unlocker decrypts when you already know a current password, using QPDF WebAssembly.
- PDF Editor & Signer is a server-backed visual editor, not an encryption tool.
Output review checklist
- Confirm a reader prompts for the open password.
- Check print/copy behavior in the reader you actually use.
- Keep an unencrypted original if you still need it.
- Rewriting typically invalidates existing certificate signatures.