You've got a PDF — a contract, a payslip, a scan of your passport — and you want a password on it before you email it. Search "password protect PDF" and you'll find dozens of sites happy to help, right after you upload your sensitive document to their server. For a file you're trying to protect, that's a strange first step.
Here's how to lock a PDF for free without uploading it anywhere — and an honest look at what "password-protect a PDF" actually buys you, because there are two very different things people mean by it.
Two kinds of "password-protected PDF"
1. A native PDF password. This is the password built into the PDF format itself — the kind that pops up a prompt when you open the file in a reader. It's convenient, but it's historically the weak option: older PDFs used breakable encryption, passwords can be brute-forced by cheap tools, and "owner passwords" (the ones that only restrict printing or editing) can often be stripped in seconds by free utilities. It also usually means uploading your file to whatever website adds the password.
2. Wrapping the PDF in strong encryption. Instead of relying on the PDF format's own protection, you encrypt the whole file into a secure container. The document becomes unreadable ciphertext that only the right password unlocks. This is stronger — but the recipient opens it a little differently (more on that below).
FileX does the second, done properly and entirely on your device.
Password-protect a PDF locally with FileX
The Encrypt tool treats your PDF like any other file and wraps it in authenticated AES-256-GCM encryption:
- Open the Encrypt tool and drop in your PDF.
- Choose a strong password. FileX derives a 256-bit key from it using PBKDF2-SHA256 at 250,000 iterations with a random salt — which is what makes guessing the password impractical.
- Download the encrypted
.filexfile. Everything above happened in your browser; the PDF was never uploaded. - Send the
.filexfile however you like, and share the password over a separate channel (a phone call or text, not the same email).
To open it, the recipient drops the .filex file into the Decrypt tool, enters the password, and gets the original PDF back — byte-for-byte. If the password is wrong, or the file was tampered with in transit, decryption is rejected outright rather than returning a damaged file (that's the "GCM" part doing its job — the full story is in how AES-256-GCM keeps your files safe).
The honest tradeoff
Be clear-eyed about what you get. FileX produces a .filex container, not a .pdf that shows a password box in Acrobat. That means:
- You gain genuinely strong, modern encryption (AES-256-GCM + slow PBKDF2 key derivation), and a workflow where your document is never uploaded — there's no server copy to breach or subpoena.
- You trade the "opens with a password in any PDF reader" convenience. Your recipient decrypts it back to the original PDF first, rather than opening the protected file directly in their viewer.
For genuinely sensitive documents going to someone who can decrypt them, that's the right trade: real protection over convenient-but-weak. For a low-stakes "please don't casually edit this," a native PDF password may be all you need — just don't mistake it for strong security.
A native PDF password is a lock you can pick. Wrapping the file in AES-256-GCM is a safe. Choose based on how sensitive the document actually is.
Before you send: strip the metadata too
Encryption hides the contents, but if you ever share the PDF unencrypted, remember it also carries hidden metadata — author name, the software that made it, timestamps. It's worth removing the PDF's metadata before it goes out, and inspecting what a file carries is a good habit in general.
The short version
- Avoid tools that make you upload a sensitive PDF just to protect it.
- Native PDF passwords are convenient but weak and often removable.
- To actually protect a PDF, encrypt it — do it free in your browser with FileX, which wraps it in AES-256-GCM locally, with nothing uploaded.
- Send the encrypted
.filexfile and the password over separate channels.
Ready to lock one down? Encrypt your PDF now — it runs entirely on your device, and the live monitor shows zero bytes leaving it.