How to Password Protect and Redact PDFs Securely

PDF security encompasses two distinct operations that are often confused: encryption (password protection) and redaction (permanent removal of information). Understanding the difference is critical — using the wrong approach can leave your sensitive data exposed.

Password Protection (Encryption)

Encryption scrambles your PDF's contents so that only someone with the password can open it. PDF AI Work uses 256-bit AES encryption — the same standard used by banks and government agencies.

User Password vs Owner Password

• User Password (open password): Required to open and view the document at all. Without it, the PDF is unreadable garbage data.
• Owner Password (permissions password): Controls what recipients can do — printing, copying text, editing, adding annotations. You can open the file but actions are restricted.

For maximum security, set both passwords. For convenience (e.g., sharing a read-only document), set only the owner password and leave the user password empty.

How to Password Protect a PDF

1. Open our Protect PDF tool
2. Upload your PDF (or use client-side mode — your file stays in your browser)
3. Set a user password (to restrict opening) and/or an owner password (to restrict permissions)
4. Click Protect and download your encrypted PDF

Best Practices for Passwords

• Use a strong, unique password — our Password Generator can create one
• Share the password through a different channel than the PDF (e.g., send the PDF by email, share the password by text or phone call)
• Don't use common words, birthdays, or "password123" — AES-256 is only as strong as the password protecting it

Redaction: Permanent Removal

Redaction permanently deletes sensitive information from the PDF's content stream. This is fundamentally different from drawing a black box over text — a black box can be removed by anyone who opens the PDF in an editor, revealing the "hidden" text beneath.

Common Redaction Failures

• Drawing rectangles over text: The text is still in the PDF. Anyone can select and copy it, or remove the rectangle.
• Changing text color to white: Same problem — the text is still there, invisible but extractable.
• Using annotation tools: Annotations are separate PDF objects. The underlying content is untouched.
• Adding a "confidential" watermark: Watermarks don't redact — they overlay.

Our Redact PDF tool uses pikepdf to truly delete the marked content from the PDF's internal content stream. Once redacted, the information is gone — permanently and irreversibly.

When to Use Which

• Sharing a contract with a client → Password protect (user password)
• Publishing a report that shouldn't be edited → Password protect (owner password)
• Removing Social Security numbers from a document before sharing → Redaction
• Hiding confidential figures in a financial report → Redaction
• Sending a sensitive document to multiple people → Password protect + redact any information they don't all need

Verification: Always Double-Check

After redacting, always open the output PDF and try to select or copy the redacted area. If you can, the redaction failed. A properly redacted document should have blank, unselectable areas where the sensitive content used to be.

Secure your documents now: Password Protect or Redact PDF — free, no signup.