What a PDF password actually does
Protecting a PDF encrypts its contents — the text, the images, the fonts — with a key derived from your password. Without the password the file is unreadable noise; with it, any PDF reader opens it normally. This uses AES-256, the strongest encryption the PDF standard defines and the one every current reader supports.
PDFs actually carry two passwords. The one you set here is the open password, which is what people usually mean. The second, the owner password, guards permissions such as printing and copying text. If you leave it empty a long random one is created, so the permissions you choose cannot be lifted by someone who only knows the open password.
- Nothing is uploaded
- The encryption happens in this tab. Your password and your document never reach a server, which is the point of protecting them.
- Lose it and it is gone
- There is no recovery. Strong encryption cannot have a back door for the owner without having one for everyone else, so keep the password somewhere safe.
- Permissions are a request
- ‘No printing’ and ‘no copying’ are honoured by mainstream readers, but they are rules the reader agrees to follow, not encryption. The open password is the part that actually keeps people out.