Menu

Encrypt PDF — AES-256 Password Protection

Encrypt any PDF with AES-256 — the same standard used by banks and governments. Instant encryption, no account required.

AES-256 encryption
Industry-standard security
Files deleted after processing
Instant encryption
Works on all devices

Encrypt Your PDF with Industry-Standard AES-256

AES-256 is the encryption standard used by financial institutions, government agencies, and security professionals. When you encrypt a PDF with AES-256, the content is mathematically scrambled in a way that cannot be reversed without the correct password.

The encryption is applied to every content stream in the document — text, images, fonts. The result is a standard encrypted PDF that opens in any PDF viewer, prompting for the password.

Protect Your PDF

Add a password to your PDF document to restrict access

Drag & Drop PDF Here

or click to choose

Maximum file size: 50MB

What PDF Encryption Does

PDF encryption applies AES-256 to all document content streams. The encryption key is derived from your password using a key derivation function. Without the correct password, the document content cannot be decrypted. The encrypted PDF is a standard PDF file that any viewer can open — it just requires the password first.

Use cases include:

  1. 1

    Encrypting financial documents before sharing with accountants or advisors.

  2. 2

    Securing legal documents before sending to counterparties.

  3. 3

    Encrypting personal identification documents stored in cloud services.

  4. 4

    Protecting confidential business documents before distribution.

  5. 5

    Securing sensitive reports before emailing to stakeholders.

AES-256 encrypted PDFs provide strong, standard-compliant protection for sensitive documents.

How to Encrypt a PDF

Upload, set password, download encrypted document.

  1. 1

    Upload the PDF you want to encrypt.

  2. 2

    Set a strong password. This will be the decryption key.

  3. 3

    Download the AES-256 encrypted PDF.

Upload, set password, download encrypted PDF. The encryption is immediate.

How it actually works

Your password is processed through PBKDF2 with a random salt to derive a 256-bit encryption key.

Each content stream in the PDF is encrypted using AES-256 in CBC mode.

The encryption dictionary is added to the document catalog with algorithm parameters.

The output is a standard encrypted PDF that any viewer can open with the correct password.

Technical explanation

AES-256 encryption in PDFs follows the PDF specification's encryption dictionary.

A 256-bit key is derived from your password using PBKDF2 (Password-Based Key Derivation Function 2) with a random salt. The salt ensures that the same password produces different keys for different documents.

Each content stream (text, images, embedded fonts) is encrypted individually using AES-256 in CBC mode. The encryption is applied at the stream level, not the file level.

The encryption dictionary in the document catalog records the algorithm version, key length, and permissions flags. This allows PDF viewers to identify the encryption parameters and prompt for the password.

Why AES-256 Encryption Is the Right Choice

For documents requiring serious security, AES-256 is the appropriate standard.

You get a tool that’s:

  • 256-bit key — computationally unbreakable with a strong password.
  • Supported by all modern PDF viewers.
  • Standard-compliant — works with Adobe, Chrome, Preview, Edge.
  • Removable when protection is no longer needed.

AES-256 is the encryption standard for serious document security.

What PDF Encryption Provides

  • AES-256 encryption for all content streams.
  • PBKDF2 key derivation with random salt.
  • Compatible with all modern PDF viewers.
  • Document content unchanged after decryption.
  • Secure processing with immediate file deletion.
  • Works on all devices.
  • No account required.

When not to use this tool

  • Using a short or simple password. The encryption is strong, but a weak password can be guessed.
  • Storing the password in the document filename or in a note attached to the document.
  • Forgetting the password — encrypted PDFs cannot be recovered without it.

Best practices

  • For maximum security, use a randomly generated password from a password manager.
  • If you need to share the password, use an encrypted messaging app rather than email.
  • For documents with a long shelf life, document the password in a secure password manager with the document reference.

Alternatives

  • PDF encryption has evolved over time.
  • AES-256: Current standard. 256-bit key. Used in PDF 1.7 and later. Computationally secure with a strong password.
  • RC4-128: Older standard used in PDF 1.4-1.6. Considered weak by modern standards. Some older tools still use it.
  • RC4-40: Very old standard. Easily broken. Should never be used for sensitive documents.

Content upgrade in progress: this page has 679 words.

Frequently Asked Questions

Find answers to common questions about our PDF tools

What does encrypting a PDF mean?

Encrypting a PDF scrambles the document content using an encryption algorithm (AES-256) so it can only be read by someone with the decryption key — which is derived from the password. Without the password, the file is unreadable.

What encryption algorithm is used?

AES-256 (Advanced Encryption Standard with 256-bit key). This is the current industry standard used by banks, governments, and security-conscious organizations. It's considered computationally unbreakable with a strong password.

Is encrypting a PDF the same as password-protecting it?

In practice, yes. When you add a password to a PDF, the document is encrypted using that password. The password is the key to the encryption. Without the password, the encryption cannot be reversed.

Can encrypted PDFs be opened on any device?

Yes. All standard PDF viewers support AES-256 encrypted PDFs. Recipients enter the password when prompted and the viewer decrypts the content for display.

How do I know the encryption is working?

Try opening the encrypted PDF without entering the password — the viewer will prompt for a password or display an error. This confirms the encryption is active.

Still have questions?

Can't find the answer you're looking for? Please chat with our friendly team.

Ready to Transform Your PDFs?

Start using ShrinkMyPDF now — fast, secure, and completely free.

No registration
100% free
No uploads