Optimize & secure guide
Password-Protect a PDF Before Emailing It
Updated
Short answer: Drop the PDF into Protect PDF, set a strong password, download the encrypted copy and send the password by a different channel from the file.
Email is routinely forwarded, synced to phones and stored for years. A password on a sensitive PDF, like a payslip, tax return or medical letter, means a copy that ends up in the wrong inbox is just noise.
Step by step
Step 1: Finish the document first: merge, sign or flatten it before protecting, as encrypted files are harder to work with.
Step 2: Open Protect PDF and drop the file.
Open Protect PDF(runs on our server)Step 3: Set a password of at least 4 characters; in practice, use 12 or more, or a few random words.
Step 4: Download the -protected copy and test it opens with the password.
Step 5: Email the file, then send the password by text message, phone call or another channel.
Why this works, and what to watch for
Protect PDF encrypts the file with AES-256 (the PDF 2.0 standard's revision 6 scheme), the strongest option the PDF format offers. Without the password, the contents are unreadable: not hidden, but scrambled. Every modern PDF reader, including the ones built into browsers, phones and macOS, can open it when the password is entered.
The encryption is only as strong as the password. AES-256 can't be broken directly, so attackers guess passwords instead, very quickly. A date of birth or a pet's name falls in seconds; four random words or a 12-character mix takes far longer than anyone will try. Avoid reusing a password from an account.
How you share the password matters most. Putting it in the same email as the file protects nothing, because anyone who has the email has both. Agree it in person, by phone or by text, or use a convention the recipient already knows. For a regular exchange, such as monthly reports to an accountant, agreeing one password in advance is reasonable.
We never store the password, and AES-256 can't be reversed, so if you forget it, the file is lost. Keep the unprotected original in a safe place, or save the password in a password manager.
The file and password are sent over an encrypted connection to our server, where the encryption is applied; neither is kept.