Local PDF access control

Password Protect a PDF Offline on Windows

Create a password-protected copy on your PC, test it in another reader and keep a safe way to recover the password.

By Osenpa · Updated

Short answer

Open Protect & Clean and add the PDF you want to protect. Set a strong open password, then save a new file.

Close the new PDF and open it again. Make sure it asks for the password and opens only when you enter the correct one.

This guide covers Osenpa PDF Tools. Check requirements and download options before you begin.

On this page

Password types | Prepare | Steps | Checkpoint | Limits

Open password and owner password

An open password is needed to view the file. An owner password is a separate credential used with PDF permissions. This workflow does not offer individual switches to block printing, editing or copying, so entering an owner password is not proof that those actions are disabled. Use an open password when viewing should require a password.

Before you start

  • Keep the unprotected source in an authorized safe location.
  • Choose a long unique password and store it in a trusted password manager.
  • Decide how the recipient will receive the password through a separate channel.
  • Use a new filename so the protected and unprotected files cannot be confused.

Protect the file you actually send

Use clearly different names, such as report-original.pdf and report-protected.pdf. Test the protected copy in another reader before attaching it. Send its open password through a separate channel, and keep the unprotected source only in a location where it is authorized.

Protect the copy

  1. Add the PDF

    Open Protect & Clean and select the local copy you are allowed to protect.

    You should see: the correct filename and its current protection status.

  2. Choose the action and enter the password

    Choose Add open password, then enter Password to open the new copy. There is one new open-password field, with no repeat-to-confirm field. Use Show password privately to check the value and save it in your password manager. Owner password is optional. An already locked source also needs its Current PDF password.

    You should see: the Add open password action and the required password field filled. Verify the value yourself before continuing.

  3. Create separate output

    Choose a clear name and destination, then select Create PDF copy.

  4. Test before sending

    Close the file, reopen it in another reader and enter the new open password.

    You should see: a password prompt, followed by the full document after the correct password.

Checkpoint

Verify access and content

  • The file refuses to open without the new password and rejects an incorrect password.
  • The stored password opens it in another reader.
  • All expected pages, links and forms still work.
  • The intended recipient can use the chosen password method.

Recovery and security limits

Osenpa PDF Tools can remove protection only when you know the current password. It does not recover an unknown password. Owner-password limits are stored as permission flags inside the PDF, and readers enforce those flags differently. Test the protected file in the recipient's reader. These limits are not the same as robust digital rights management. Password protection also does not remove metadata or visible sensitive content. Use metadata cleanup for supported properties. For visible secrets, use another tool with a documented redaction workflow.

Osenpa PDF Tools