How to Password Protect a PDF on Mac

Why password protecting PDFs matters more than you think

PDFs travel. You email them to clients, share them through cloud storage, upload them to portals, and send them through messaging apps. Once a PDF leaves your Mac, you have essentially no control over where it ends up. Password protection is the one safeguard that stays with the file itself, regardless of how it gets shared or where it lands.

There are two distinct types of PDF passwords, and understanding the difference is important before you choose a method. A user password (sometimes called an "open password") prevents anyone from opening the PDF at all without entering the correct password. The file is encrypted, and without the password, the contents are inaccessible. A owner password (sometimes called a "permissions password") lets anyone open and view the PDF, but restricts what they can do with it - printing, copying text, editing, or extracting pages can all be individually controlled.

You can apply both types of password to the same PDF. For example, you might set a user password so only authorised recipients can open the file, and also set an owner password that prevents them from editing or extracting pages. The encryption level matters too - modern PDFs support 128-bit AES and 256-bit AES encryption, which are effectively unbreakable with current technology. Older 40-bit and 128-bit RC4 encryption standards are considered weak and can be bypassed with readily available tools.

This guide covers three ways to password protect a PDF on Mac, with an honest look at what each method can and cannot do.

Method 1: Using Paradise PDF (recommended)

Paradise PDF is a native macOS application that gives you full control over PDF password protection, including both user and owner passwords, permission restrictions, and encryption level selection.

How to password protect a PDF with Paradise PDF

1. Open Paradise PDF and select the Protect tool from the sidebar. The interface presents a clean, focused workspace for securing your documents.
2. Add your PDF file. Drag and drop the file from Finder into the window, or click the add button to browse. You can protect a single PDF or batch-process multiple files at once.
3. Set a user password if you want to prevent unauthorised access entirely. Anyone who tries to open the PDF will need to enter this password first. Without it, the file contents are completely encrypted and unreadable.
4. Set an owner password and permissions if you want to control what recipients can do with the document. You can individually toggle permissions for printing, copying text, editing content, adding annotations, and extracting pages. This is ideal for distributing documents you want people to read but not modify.
5. Choose your encryption level. Paradise PDF supports 128-bit AES and 256-bit AES encryption. For maximum security, select 256-bit AES - it is the current industry standard and is used by governments and financial institutions worldwide.
6. Click Protect. Paradise PDF encrypts your file using native macOS security APIs. The protected PDF is saved to your chosen location, and your original file remains untouched.

Why this method works best

Paradise PDF is the only option here that gives you granular control over both password types and individual permission restrictions in a single, straightforward workflow. You can set a user password, an owner password, or both, and fine-tune exactly which actions are allowed or blocked.

The encryption happens entirely on your Mac. Your PDF never leaves your machine, which means the password and the unprotected content are never exposed to any network or third-party server. This matters enormously when you are protecting sensitive documents - the whole point of encryption is defeated if the unencrypted file passes through someone else's infrastructure first.

Paradise PDF also handles batch operations well. If you have a folder of contracts that all need the same password protection applied, you can process them all at once rather than repeating the steps for each file individually. The app is built in Rust, so even large PDFs with hundreds of pages encrypt quickly.

Method 2: Using macOS Preview

Preview, the PDF viewer built into every Mac, has a basic encryption feature that lets you set a password on a PDF. It is more limited than dedicated tools, but it works for simple password protection needs.

How to password protect a PDF with Preview

1. Open the PDF in Preview. If it doesn't open in Preview by default, right-click the file and choose Open With → Preview.
2. Go to File → Export as PDF. Do not use "Save" or "Save As" - you specifically need the Export as PDF option to access the encryption settings.
3. Click "Show Details" if the export dialog doesn't show the full set of options. You need to see the permissions section.
4. Check the "Encrypt" checkbox and enter a password. You will need to confirm the password by typing it twice.
5. Choose a save location and click Save. Preview creates a new encrypted copy of your PDF.

The limitations you should know about

Preview only sets a user password - an all-or-nothing open password. There is no way to set an owner password or configure individual permission restrictions. You cannot, for example, allow someone to view and print the PDF but prevent them from copying text or editing it. It is either locked or unlocked, with no middle ground.

Preview also does not let you choose your encryption level. It uses whatever default macOS applies, and you have no visibility or control over whether that is 128-bit or 256-bit AES. For most casual uses this is fine, but if you need to meet specific compliance requirements that mandate a particular encryption standard, Preview cannot guarantee it.

The workflow is also slightly unintuitive. You might expect a "Set Password" or "Protect" option in the menus, but instead you have to go through the Export as PDF dialog. Many Mac users do not realise this feature exists because it is hidden behind what looks like a file format conversion step.

For a quick, basic password on a non-sensitive PDF, Preview gets the job done. But for anything involving permissions control, batch processing, or compliance-grade encryption, you will need a dedicated tool.

Method 3: Online PDF protection tools

Several websites offer PDF password protection through a browser, including iLovePDF, Smallpdf, PDF2Go, and Adobe's online tools. The workflow is similar across all of them: upload your file, set a password, and download the protected version.

How online tools typically work

1. Visit the website and navigate to their password protection or encryption tool.
2. Upload your PDF file. The file is transferred from your Mac to the service's servers.
3. Enter a password. Some tools let you set both open and permissions passwords, though the interface is usually less detailed than a native app.
4. Click Protect and wait for the server to process the file.
5. Download the encrypted PDF. The password-protected file is downloaded back to your Mac.

Why this approach deserves serious scrutiny

Here is the fundamental contradiction of online PDF protection tools: you are uploading an unprotected, unencrypted document to a third-party server so that they can encrypt it for you. The file travels across the internet in its most vulnerable state - without any password protection at all - to reach a server you do not control.

If the document was not sensitive enough to need password protection, you would not be trying to protect it in the first place. Yet the online workflow requires you to expose the unprotected version to a third party as part of the protection process. This is a genuine security concern, not a theoretical one.

Even if the service uses HTTPS for the upload (most do), the unencrypted file still exists on their servers during processing. Most services claim to delete files after a short period, but you have no way to verify this. Their servers may be backed up, logged, or located in jurisdictions with different data protection standards.

Beyond the security issues, online tools often limit file sizes (typically 25-100 MB on free tiers), restrict the number of files you can process per day, and require a paid subscription for features like batch processing or custom permissions. The experience is also slower than local processing, since it involves an upload, server-side encryption, and a download for every file.

Understanding PDF encryption levels

Not all PDF passwords are created equal. The encryption algorithm and key length determine how resistant your protected PDF is to brute-force attacks. Here is what you need to know:

40-bit RC4 (PDF 1.1 - 1.3)

This is the oldest and weakest standard. It was introduced in the mid-1990s and can be cracked in minutes with modern hardware. If a tool creates PDFs with 40-bit RC4 encryption, the password provides essentially no real security. It is a speed bump, not a barrier.

128-bit RC4 (PDF 1.4 - 1.6)

A significant improvement over 40-bit, but still based on the RC4 cipher, which has known vulnerabilities. It offers reasonable protection against casual attacks but is not considered secure by modern standards. Some compliance frameworks explicitly prohibit RC4 encryption.

128-bit AES (PDF 1.6+)

AES (Advanced Encryption Standard) is the current gold standard for symmetric encryption. 128-bit AES is strong and widely considered secure for most purposes. It is significantly more resistant to attack than any RC4-based encryption.

256-bit AES (PDF 2.0)

The strongest encryption available for PDF files. 256-bit AES is used by governments, militaries, and financial institutions worldwide. It is the recommended choice for any document containing sensitive or confidential information. Paradise PDF supports this standard.

Owner passwords vs user passwords: a practical guide

Choosing the right password type depends on what you are trying to accomplish. Here are common scenarios and the recommended approach for each:

Scenario: Confidential document shared via email

Use a user password. You want to prevent unauthorised people from opening the file at all. Share the password through a separate channel - for example, send the PDF by email and the password by text message. This way, even if the email is intercepted, the file remains encrypted and unreadable.

Scenario: Published report that should not be edited

Use an owner password with editing restrictions. Allow viewing and printing, but disable content editing, text copying, and page extraction. The document can be freely opened and read, but recipients cannot modify it or extract parts of it without the owner password.

Scenario: Legal contract sent to a specific party

Use both passwords. Set a user password so only the intended recipient can open the file, and set an owner password to prevent them from editing the contract terms after signing. This gives you maximum control over both access and usage.

Comparison: All three methods side by side

Here is how the three approaches compare across the factors that matter most when you need to password protect a PDF on Mac:

When to use each method

Use Paradise PDF when...

You need full control over encryption settings, want to set both user and owner passwords, need to restrict specific permissions, or are protecting documents that contain sensitive information. It is the right choice for professionals who regularly handle confidential files - lawyers, accountants, HR departments, healthcare workers, and anyone dealing with client data.

Use Preview when...

You need a quick open password on a non-sensitive PDF and you do not need permissions control. It is fine for locking a personal document with a basic password, as long as you do not need to specify encryption strength or restrict individual actions like printing or copying.

Use online tools when...

The PDF contains absolutely nothing sensitive, you are on a machine where you cannot install software, and you need a one-time password protection. If the document contains any personal, financial, legal, or confidential information, uploading it to a third-party server defeats the purpose of protecting it.

Related reading

• Protect PDF tool
• remove a password from a PDF
• PDF permissions and restrictions