Security guide

Password-protect and unlock PDFs with realistic expectations

A PDF password can reduce casual or unauthorized access, but it is only one part of document security.

What password protection changes

Protecting a PDF encrypts the file so compatible readers require a password before opening it. PDFora uses a browser-based qpdf WebAssembly workflow for the protection operation, so the document is processed on the device rather than being intentionally uploaded to PDFora application servers.

A strong password matters. Longer, unique passphrases are generally harder to guess than short dictionary words or reused passwords.

Keep the password separately

If you lose the only password to an encrypted PDF, recovery may be difficult or impossible depending on the encryption and available backups. Store the password in a reputable password manager or another secure system appropriate for the document.

Do not overwrite your only unencrypted original until you have tested the protected copy in a separate PDF reader.

Unlock only files you are authorized to access

The Unlock PDF tool is intended for documents where you know the current password and have the right to remove that protection. It does not recover an unknown password.

  • Open the source file with the known password first if possible.
  • Create an unlocked copy only when your workflow requires it.
  • Treat the unlocked result according to the sensitivity of the document.
  • Delete unnecessary copies from shared or public devices.

Encryption does not solve every security problem

Password protection does not control screenshots, printing after authorized opening, malware on a user’s device, or accidental sharing of the password. Sensitive workflows can require access controls, secure storage, identity verification, or organizational policies beyond a PDF password.

For highly sensitive documents, follow the security requirements of the organization that owns the data.

Use the right tool

Use Protect PDF to add password encryption, or Unlock PDF when you know the existing password and need an unencrypted working copy.