PDF Open Password vs. Permissions Password: Which to Use

The two types of PDF passwords

The PDF format supports two different passwords, which are often confused:

• Open password (also called a user password): without it, the file won’t open. The contents are encrypted, so anyone without the password sees only a jumble of bytes.
• Permissions password (or owner password): the file opens normally, but the reader is instructed to block actions such as printing, copying text, or editing.

A PDF can have both: a password to open it, plus extra restrictions for anyone who opens it.

What each password really protects

An open password, when paired with strong encryption such as 256-bit AES, truly protects the contents: if the password is strong, anyone who intercepts the file can’t read it.

Permissions restrictions are more like a polite warning. Anyone who opens the PDF can see everything; the restrictions only work if their PDF reader honors them. Programs and unlocking tools can remove restrictions from a file that opens without a password, and it’s always possible to photograph or capture the screen. So:

• Use an open password for confidentiality: pay stubs, medical reports, account statements, and personal documents sent by email.
• Use restrictions to discourage casual copying and editing of materials you distribute, knowing they aren’t an absolute safeguard.

How to protect a PDF

1. Open Protect PDF with a password and choose your file.
2. Enter the open password and confirm it. The tool uses 256-bit AES encryption, and the process happens on your device.
3. Choose the permissions: whether to allow printing, text copying, and editing.
4. Download the protected PDF and test it by opening the file before you send it.

Write down the password and keep it somewhere safe. There’s no way to recover the contents of an encrypted PDF without it.

How to send the password without compromising security

Sending the PDF and its password in the same message defeats the protection: anyone with access to the email has both. Best practices:

• Send the password through a different channel (the file by email and the password by text or phone call).
• Agree on a system with people you send files to regularly, without writing it down alongside the file.
• Use long passwords. Short numeric passwords, such as birth dates, can be guessed.

Banks and companies often use part of a customer’s account number as the open password for bills and pay stubs. It’s convenient, but weak: anyone who knows your account number can open the file.

I received a password-protected PDF. What now?

If it’s your document, such as a bill, account statement, or pay stub, the password is usually provided in the email or on the sender’s website. To avoid entering it every time, you can save an unlocked copy with Unlock PDF: enter the current password and download the unlocked version. The guide How to remove a password from a PDF walks you through the steps and explains where to find common passwords.

If the file opens but won’t let you print or copy, the same tool can remove the restrictions, as long as the document is yours or you’re authorized to use its contents.

Which protection to use in each situation

• Pay stub, account statement, or medical report sent by email: use a strong open password and send it through a different channel.
• Course materials or an ebook for sale: copy and editing restrictions can discourage sharing, but what really helps is adding a watermark with the buyer’s name to every page.
• Business proposal: preventing edits keeps someone from changing the amounts and resending it as if it were theirs. Keep the original version to compare if needed.
• Document for a government agency or court: don’t use a password. These systems need to open and validate the file.
• File you plan to keep for years: avoid using a password, or store it with your important documents. A forgotten password can turn the file into digital junk.

Frequently asked questions