How to Password Protect a PDF Without Adobe in 2026 (7 Free Methods)

Deqian Jia
Deqian Jia

Founder at Peony — building AI-powered data rooms for secure deal workflows.

Connect with me on LinkedIn! I want to help you :)

TL;DR: Adobe Acrobat Pro costs $22.99/month — but you don't need it. macOS Preview and Microsoft Word handle basic PDF encryption for free (AES-128), LibreOffice 25.8+ and PDFEncrypt give you AES-256 for free, and PDF24 works online with zero limits. But here's the thing: passwords can't track who opens your PDF, can't revoke access, and can't stop forwarding. For anything sensitive, Peony (free) provides identity-bound access, page-level analytics, dynamic watermarking, and screenshot protection — no passwords to manage.

Last updated: March 2026


I run Peony, a secure document sharing platform. We handle a lot of sensitive PDFs — investor decks, legal agreements, financial models — and I've seen every possible way founders and professionals try to protect them. Most of the time, password protection is the first thing people reach for, and most of the time, it's not enough.

But I also know that sometimes you genuinely need a password-protected PDF file. Maybe a counterparty requires it, maybe you're archiving something offline, or maybe you just want a quick layer of protection before emailing a contract. You shouldn't have to pay Adobe $22.99/month for that.

A password-protected PDF is a PDF file encrypted with AES (Advanced Encryption Standard) that requires a password to open. The encryption scrambles the file contents on disk, making it unreadable without the correct password. Modern tools use AES-128 or AES-256 — both are computationally infeasible to brute-force with a strong password.

Here are 7 methods I've tested, in order of how often I'd actually recommend them.


Quick Guide

#MethodPlatformEncryptionPriceBest For
1macOS PreviewMacAES-128FreeMac users who need it in 30 seconds
2Microsoft WordWin/MacAES-128Requires OfficeOffice users, no extra install
3PDF24Web (any)Not disclosedFreeQuick online, non-sensitive files
4LibreOffice 25.8+Win/Mac/LinuxAES-256FreeStrongest free encryption
5PDFEncryptWindowsAES-256FreeWindows users wanting AES-256
6iOS Files AppiPhone/iPadAES (likely 128)FreeMobile, no app install
7qpdf (CLI)Win/Mac/LinuxAES-256FreeDevelopers, batch processing

My honest take: For anything truly sensitive — investor materials, legal docs, HR records — password protection alone is not enough. Passwords can't track who opened your file, can't revoke access after sharing, and can't prevent forwarding. Peony handles all of that with identity-bound access and page-level analytics, starting free.


Method 1: macOS Preview

The fastest method if you're on a Mac. Preview is built into every Mac and handles this in about 30 seconds.

How to:

  1. Open your PDF in Preview
  2. Go to File > Export
  3. Check "Encrypt" (or click Permissions on some versions)
  4. Enter and confirm a strong password
  5. Click Save

Encryption: AES-128 (PDF 1.6 specification).(Apple Support)

Pros:

  • Free, built into every Mac — zero installation
  • Takes 30 seconds
  • Works completely offline
  • No file size limits

Cons:

  • AES-128 only, not AES-256
  • Mac-only (no Windows or Linux)
  • One file at a time — no batch processing
  • Cannot set granular permissions (print/copy/edit) separately from the open password

My take: This is what I use when a client says "can you just put a password on that?" and I need it done in 30 seconds. AES-128 is fine for most use cases — nobody's brute-forcing 128-bit encryption on your NDA.

Best for: Mac users who need a quick, one-off password on a PDF and don't need AES-256.


Method 2: Microsoft Word

If you already have Microsoft 365 or Office 2013+, Word can export password-protected PDFs without any extra software.

How to:

  1. Open a document in Microsoft Word (or open an existing PDF — Word will convert it)
  2. Click File > Export > Create PDF/XPS Document
  3. Click Options...
  4. Check "Encrypt the document with a password"
  5. Enter and confirm your password
  6. Click Publish

Encryption: AES-128 (not AES-256, even though Word itself uses AES-256 for .docx files).(Microsoft Q&A)

Pros:

  • Works on both Windows and Mac
  • No additional software if you already have Office
  • Creates a standard encrypted PDF any viewer can open

Cons:

  • AES-128 only (despite Word's .docx using AES-256)
  • Only sets an open password — cannot set permissions restrictions
  • Opening an existing PDF in Word may alter formatting during conversion
  • Requires Microsoft 365 ($6.99/month Personal)

My take: The formatting conversion when opening an existing PDF in Word is the real gotcha here. If you're exporting a document you wrote in Word, it's perfect. If you're trying to encrypt someone else's PDF, the layout will shift. I've seen it mess up tables and images badly.

Best for: Office users on Windows who don't want to install anything new.


Method 3: PDF24 (Online)

The standout free online tool. Unlike Smallpdf (2 tasks/day, 5 MB limit on free tier) or iLovePDF (file size limits, ads), PDF24 is completely free with no limits.(PDF24)

How to:

  1. Go to tools.pdf24.org/en/lock-pdf
  2. Upload your PDF
  3. Set a password
  4. Click Lock PDF
  5. Download the encrypted file

Pros:

  • Completely free — no paid tier, no file size limits, no daily task caps, no registration
  • No watermarks
  • Supports batch processing
  • Also available as a desktop app for Windows

Cons:

  • Your unencrypted file is uploaded to PDF24's servers (not suitable for sensitive documents)
  • Requires internet connection
  • Encryption algorithm not publicly documented

My take: I recommend PDF24 over Smallpdf or iLovePDF specifically because the free tier has zero catches — no "2 tasks per day" limits, no 5 MB file cap, no forced watermarks. But I'd never upload a contract or investor deck to any online tool. For those, use an offline method or Peony.

Best for: Quick, non-sensitive PDFs when you're not on your own computer.

Security warning: In July 2025, a misconfigured cloud archive exposed 3.5 million PDF files containing names, addresses, and order histories.(pdf.net) For anything confidential, use offline tools or a platform like Peony where your PDF never touches a third-party server.


Method 4: LibreOffice

The strongest free encryption option. LibreOffice 25.8 (released August 2025) finally upgraded from weak RC4 encryption to AES-256 — the same standard used by Adobe Acrobat Pro and government agencies.(AlternativeTo)

How to:

  1. Open any document in LibreOffice
  2. Go to File > Export As > Export as PDF
  3. Click the Security tab
  4. Click Set Passwords
  5. Enter a User Password (required to open) and/or Owner Password (to control permissions)
  6. Set permission checkboxes (printing, copying, editing)
  7. Click Export

Encryption: AES-256 on version 25.8+. Critical: older versions use RC4-128, which is significantly weaker.(Ask LibreOffice)

Pros:

  • Free, open-source, cross-platform (Windows, Mac, Linux)
  • AES-256 encryption (v25.8+) — strongest available
  • Supports both user and owner passwords
  • Granular permissions: control printing, copying, editing, page extraction
  • Works completely offline

Cons:

  • Must verify you're running version 25.8 or later (older versions use weak RC4)
  • Cannot encrypt an existing PDF directly — must import it first
  • Learning curve for non-technical users

My take: The version check matters. I've seen people encrypt PDFs with LibreOffice 7.x thinking they have strong protection, only to realize they were using RC4 — which is barely encryption by modern standards. If you're going this route, run libreoffice --version first and make sure it says 25.8 or later.

Best for: Anyone who wants the strongest free encryption available, especially on Linux.


Method 5: PDFEncrypt

A single-purpose, open-source Windows app that does one thing well: encrypt PDFs with AES-256.(PDFEncrypt)

How to:

  1. Download from pdfencrypt.net or the Microsoft Store
  2. Select your PDF
  3. Choose AES-256 encryption
  4. Enter a password
  5. Set permissions (printing, copying, editing)
  6. Click Encrypt

Pros:

  • Free, open-source (AGPL)
  • AES-256 encryption
  • All processing is local — no files uploaded anywhere
  • Simple interface, available in the Microsoft Store
  • Granular permissions control

Cons:

  • Windows-only
  • Single-purpose (only encrypts, no other PDF tools)
  • No batch processing

My take: If you're on Windows and need AES-256, this is the cleanest option. One purpose, no bloat, no account required. The Microsoft Store listing makes it easy to install and trust. I wish there were a Mac equivalent.

Best for: Windows users who want AES-256 encryption without paying for Foxit or Acrobat.


Method 6: iOS Files App

Since iOS 15, your iPhone can lock PDFs natively — no third-party app needed.(iGeeksBlog)

How to:

  1. Open the Files app
  2. Navigate to your PDF
  3. Tap to open it
  4. Tap the downward arrow next to the filename
  5. Select "Lock PDF"
  6. Enter and verify a password
  7. Tap Done

A lock icon appears on the file thumbnail.

Pros:

  • Free, built into every iPhone and iPad running iOS 15+
  • No app install required
  • Quick and intuitive

Cons:

  • Encryption level not publicly documented by Apple (likely AES-128)
  • No granular permissions control
  • One file at a time
  • No batch processing

My take: This is genuinely one of those features I didn't know existed until a founder asked me "can I lock a PDF from my phone?" and I went looking. Apple buried it but it works. No equivalent on Android — you'll need a third-party app there.

Best for: Quickly locking a PDF on your phone before sharing via Messages or email.


Method 7: qpdf (Command Line)

The power tool for developers and anyone comfortable with the terminal. qpdf supports AES-256, batch scripting, and runs on every platform.(qpdf docs)

How to:

# AES-256 encryption with user and owner passwords
qpdf --encrypt userpass ownerpass 256 -- input.pdf output.pdf

# With restrictions (no modification)
qpdf --encrypt userpass ownerpass 256 --modify=none -- input.pdf output.pdf

Install: brew install qpdf (Mac), apt install qpdf (Linux), choco install qpdf (Windows)

Python alternative (pypdf):

from pypdf import PdfReader, PdfWriter

reader = PdfReader("input.pdf")
writer = PdfWriter(clone_from=reader)
writer.encrypt("viewerpassword", "adminpassword", algorithm="AES-256")
writer.write("protected.pdf")

Pros:

  • Free, open-source (Apache 2.0)
  • AES-256 encryption
  • Batch processing via scripting
  • Cross-platform
  • Scriptable for automation workflows

Cons:

  • Requires command-line comfort
  • No GUI
  • Setup needed (install via package manager)

My take: If you need to encrypt 200 PDFs before uploading them to a deal room, this is the only sane option. I've used qpdf in bash scripts to batch-encrypt entire folders in seconds. The pypdf Python library is equally solid if you're already in a Python workflow.

Best for: Developers, DevOps teams, and anyone encrypting PDFs in bulk or in automated pipelines.


The Part Passwords Can't Do (Why I Built Peony for This)

Here's what I've learned running Peony: password protection solves the wrong problem for most sensitive document sharing.

Passwords encrypt the file. That's genuinely useful for archival or when a counterparty requires it. But the moment you email that PDF and text someone the password, you've lost control. You can't see who opened it. You can't revoke access. You can't stop forwarding. You can't tell if it leaked.

What you needPassword-protected PDFPeony (free)
Encryption at restYes (AES-128 or 256)Yes
Identity verificationNo (anyone with the password)Yes — email verification
Access revocationNo (file works forever)Yes — disable any link instantly
Page-level analyticsNoYes — who viewed which pages, how long
Dynamic watermarkingNoYes — viewer identity on every page
Screenshot protectionNoYes — active deterrence
Link expiryNoYes — automatic expiration
Forwarding controlNoYes — each link tied to one identity

For investor decks, legal agreements, M&A documents, HR records — anything where you need to know who saw what and maintain control after sharing — Peony is what I'd use instead of (or on top of) a password.

Start free at peony.ink — no credit card required.


By the Numbers

StatNumberSource
New PDFs created annually290+ billionSmallpdf
Total PDFs in existence2.5+ trillionSmallpdf
Adobe Acrobat market share~64%Smallpdf
Adobe Acrobat Pro price$22.99/monthAdobe
Average US data breach cost (2025)$10.22 million (all-time high)Varonis
Human element in breaches60%Verizon DBIR
Third-party/supply chain breaches30% (doubled from 15% in 2024)Verizon DBIR
Ransomware in breaches44% (up from 32% in 2024)Verizon DBIR
PDF software market (2024)$2.15 billionDataintelo
Projected PDF market (2033)$5.72 billion (CAGR 11.47%)Dataintelo

Quick Security Guide: Owner vs User Passwords

One thing most guides get wrong: there are two types of PDF passwords, and one of them is essentially security theater.

  • User (open) password: Encrypts the entire PDF. Without it, the file is unreadable. This is real security.
  • Owner (permissions) password: Restricts actions like printing, copying, or editing. Can be removed in seconds with free tools like Smallpdf Unlock or qpdf.(Locklizard)

Bottom line: Only the user/open password provides actual encryption. If a tool only lets you set "permissions" or "restrictions" without an open password, your PDF is not truly encrypted.


Practical Tips

  1. Use long passphrases, not clever short passwords. NIST guidance favors length (12-16+ characters) over complexity. "correct-horse-battery-staple" beats "P@$$w0rd!" every time.

  2. Never send the PDF and password in the same channel. Email the file (or Peony link), share the password via SMS, Signal, or a phone call. This limits the blast radius of a compromised mailbox.

  3. Keep an unencrypted master copy somewhere safe. If you lose the password, most tools cannot recover it. That's a feature, not a bug.

  4. Test on another device before sharing. Open the protected PDF on a different machine or reader to confirm the password prompt works and formatting is intact.

  5. For sensitive documents, skip passwords entirely — use Peony. Identity-bound access is stronger than a shared password, and you get analytics, watermarking, and revocation for free.


Bottom Line

For casual, low-risk PDFs (brochures, public reports): Use macOS Preview or Microsoft Word — it's free, takes 30 seconds, and AES-128 is plenty.

For moderate-sensitivity PDFs (internal reports, client deliverables): Use LibreOffice 25.8+ or PDFEncrypt — free AES-256 encryption, fully offline, no data leaves your machine.

For sensitive or confidential PDFs (investor decks, legal, financial, HR): Use Peony — because the real question isn't "can they decrypt the file?" but "can I control who sees it, track when they see it, and revoke access when I need to?"

Ready to share sensitive PDFs with real control? Start with Peony — free, no credit card required.


Frequently Asked Questions

How do I password protect a PDF without Adobe for free?

The fastest free methods are macOS Preview (File > Export > Encrypt, AES-128) and Microsoft Word (File > Export > Create PDF/XPS > Options > Encrypt). For stronger AES-256, use LibreOffice 25.8+ or PDFEncrypt (Windows). However, password-protected PDFs can't track who opens them or revoke access. Peony provides identity-bound access, page-level analytics, dynamic watermarking, and link expiry — a more complete solution for sensitive documents, starting free.

What is the strongest free PDF encryption without Adobe Acrobat?

LibreOffice 25.8+ (released August 2025) and PDFEncrypt both offer AES-256 encryption — the same standard used by Adobe Acrobat Pro and government agencies. macOS Preview and Microsoft Word are limited to AES-128. For documents where encryption alone isn't enough, Peony adds identity verification, access revocation, page-level analytics, and dynamic watermarking on top of encryption — starting free.

Can I password protect a PDF on iPhone without Adobe?

Yes. Since iOS 15, the built-in Files app can lock PDFs: open the PDF, tap the filename arrow, select Lock PDF, set a password. No third-party app needed. For sharing sensitive PDFs with investors or clients, Peony provides identity-bound access with email verification, page-level analytics showing who viewed which pages, and screenshot protection — all from your phone's browser.

Is it safe to use online tools to password protect PDFs?

For non-sensitive files, PDF24 (completely free, no limits) is fine. But for confidential documents, uploading unencrypted PDFs to third-party servers creates risk — in July 2025, a misconfigured cloud archive exposed 3.5 million PDF files.(pdf.net) Use offline tools for encryption, or share via Peony where your PDF never touches a third-party server and you get identity-bound access, dynamic watermarking, and complete audit trails.

What is the difference between a user password and an owner password on a PDF?

A user (open) password encrypts the PDF — without it, the file is unreadable. An owner (permissions) password only restricts actions like printing or copying, but can be removed in seconds with free tools. Only the user password provides real security. Peony goes beyond both: identity-bound access ties viewing to verified email addresses, page-level analytics track engagement, and dynamic watermarking deters leaks — no shared passwords needed.

Can I track who opens my password-protected PDF?

No. Password-protected PDFs provide zero visibility. Once you share the file and password, you can't see who opened it, when, or whether they forwarded it. Peony solves this: page-level analytics show exactly who viewed your PDF, which pages they read, how long they spent, and when they returned. Combined with identity-bound access and dynamic watermarking, you get complete visibility.

Can I revoke access to a password-protected PDF after sending it?

No. Once someone has the file and password, access is permanent — the file works offline, forever. Peony provides instant access revocation: disable any sharing link at any time. Combined with link expiry, identity-bound access, and page-level analytics, you maintain control that password protection cannot provide.

What is the best way to securely share sensitive PDFs in 2026?

Password protection is step one, but for truly sensitive documents — investor decks, legal agreements, financial records — you need identity verification, tracking, and revocation. Peony provides all three: share via secure link with email verification, track page-by-page engagement, add dynamic watermarking and screenshot protection, and revoke access instantly — starting free.


Related Resources