How to send a password protected PDF (without Acrobat)

There are three ways to send a PDF that only the right person can open. They are not equivalent. Encrypting the file is what most people do first, and it is the weakest of the three in practice. Here is how each works, how to do it, and when it's the right choice.

Method 1: Encrypt the PDF file itself

This bakes a password into the file. Anyone opening it, in any PDF reader, is asked for the password first.

How to do it

• Adobe Acrobat: All tools > Protect a PDF > Protect with password, choose Viewing, set the password, save.
• macOS Preview: File > Export, click Permissions, tick Require password to open document, set it, save.
• Microsoft Word: File > Save As > PDF > Options, tick Encrypt the document with a password.
• Free online tools (Smallpdf, iLovePDF, PDF2Go and others) will encrypt an uploaded file. Bear in mind you are uploading a confidential document to a third party to do it.

What's good about it

It works offline, in any reader, with no account for anyone. For a file that will be stored, not just read, that matters.

What's wrong with it

• Once opened, it's unlocked. The recipient can Save As to a copy with no password and forward that.
• You can't change your mind. The password you set is the password forever. There's no revoking access to a file already in someone's inbox.
• No visibility. You never learn whether it was opened.
• Old encryption is weak. PDFs protected with RC4 or AES-128 by older tools can be stripped by free utilities in seconds. Use AES-256 if the tool offers it.
• You still have to send the password. If it goes in the same email as the file, the protection is theatre.

Method 2: A cloud link with a password

Dropbox, OneDrive, and Box can put a password on a shared link, on some plans. Google Drive cannot; it only supports sharing with named accounts.

How to do it

• Dropbox: Share > Link settings > Require password. Available on Professional and team plans.
• OneDrive: Share > Link settings > Set password. Available on Microsoft 365 personal and business plans.

Trade-offs

Better than method 1 because you can change the password or kill the link later. But the recipient can usually download the original file, and once they have, you're back to method 1 without the encryption. Tracking is limited or absent, and the viewer is whatever the storage provider gives you.

Method 3: A gated share link

Upload the PDF to a sharing tool that shows a password screen before the document loads, and never serves the raw file at a public address. This is what PDF Deck's password protected link does.

How to do it

1. Upload the PDF to PDF Deck.
2. On the document's settings page, tick Require a password, enter one, save.
3. Send the link by email and the password by another channel.

Why it's usually the right choice

• You can change or remove the password at any time, and the change applies to everyone with the link.
• View tracking stays on, so you know when the document was opened and from where.
• Downloads are your call. Turn them off and the reader can view but not save the file.
• Repeated wrong guesses lock the viewer out for a while, which encrypted files can't do.
• Update the document and the same link shows the new version.

Where it falls short

The recipient needs to be online. If they need the file on a plane, encrypt it (method 1) as well. And it protects the link, not the pixels: a determined reader can screenshot pages. No method stops that.

Sending the password

Whatever method you use, don't put the password in the same message as the link or the file. The conventional pattern is link by email, password by text message or a call. If you're sending to many people, use a password you can say out loud and change it after the round of sharing is done.

Which to use

For most business sharing, a proposal, a price list, a report for a client, a gated link is the right default, with an encrypted copy only if the reader truly needs the file offline. For regulated material, none of these replaces the controls your compliance team requires; they are the layer on top.