Adding a password to a PDF is only useful if the password is hard to guess. Many people protect a salary slip or contract with something like 1234, their phone number or their birth year — which offers almost no protection.
What Makes a PDF Password Strong
- Length first: 12 or more characters. Length matters more than complexity.
- Unpredictable: avoid names, dates, phone numbers, CNIC numbers and company names.
- Unique: do not reuse a password you use for email or banking.
A practical approach is a passphrase of three or four unrelated words with a number or symbol, for example mango-river-lamp-47. It is long, hard to guess and easy to type.
Weak vs Strong Examples
| Password | Why |
|---|---|
| 123456 | Among the most common passwords in the world |
| ahmed1990 | Name plus birth year — guessable |
| 03001234567 | A phone number — easy to find |
| MentorMakers! | Company name — the first guess |
| cloud-tiger-pencil-82 | Long, random words — strong |
Generate one with the Password Generator and test any idea with the Password Strength Checker.
How to Protect the PDF
- Open Protect PDF.
- Upload the document.
- Enter your password carefully (it must be at least a few characters long; longer is better).
- Download the protected file and test it: open it and confirm the password is requested.
Share the Password Safely
The biggest mistake is sending the password in the same email as the file. If that email is forwarded or accessed, both are exposed. Instead:
- Send the PDF by email and the password by SMS or a call.
- Agree a standing password with a regular recipient in person.
- Never write the password in the file name.
Keep a Record
Store important document passwords in a password manager. Properly encrypted PDFs are built so they cannot be opened without the password, and there is no reliable "forgot password" option.
What a Password Does Not Do
- It does not stop someone who has the password from forwarding the file.
- It does not prevent screenshots or photos of the screen.
- It does not remove information you should not have shared in the first place.
For sensitive documents, share only the pages needed — extract them first — and understand the difference between the two password types in our guide to open passwords vs permissions passwords. For the basics of the tool, see protecting a PDF with a password.
Passwords for Documents You Receive Regularly
If you send the same accountant or employer protected files every month, agree one strong passphrase with them once, in person or by phone, and use it for that relationship only. Change it if the relationship ends or you suspect it was shared.
