Protect PDF
Encrypt PDFs with AES permissions and passwords.
Guide & FAQ
About this tool
Encrypt PDFs with a password before email - contracts, payroll, medical records - so only recipients with the key can open the file. JoyPDF applies AES encryption locally in your browser; the document and password never upload to JoyPDF servers. Free, no account. Choose a strong passphrase and share it through a separate channel (phone, Signal) - not the same email as the PDF attachment.
What you get
- Output: AES-encrypted PDF requiring password to open in standard viewers.
- Local: encryption via qpdf in browser - master file never transits third party.
- Compatibility: opens in Adobe Reader, Preview, Chrome PDF viewer with password prompt.
- Permissions: focus on open password - fine-grained print/copy flags depend on encryption profile.
- Recovery: lost password means lost access - JoyPDF cannot recover encrypted bytes.
- Limits: encryption increases file size slightly; very old PDF readers may lack AES support - rare now.
When to use
- Emailing salary slips or HR letters with mandatory encryption policy.
- Sending draft contracts to external counsel before dataroom access.
- Personal tax or medical PDFs over email as attachment baseline protection.
- Archiving sensitive exports on shared drives where folder ACLs aren't enough.
Why JoyPDF for this
Cloud encrypt-PDF services receive your plaintext document and chosen password on their servers - a critical security anti-pattern. JoyPDF encrypts locally: password and PDF meet only in your browser memory, never logged by JoyPDF infrastructure.
How to use
- 1Add your PDFDrop the file to encrypt - bytes stay on your device.
- 2Set passwordEnter a strong open password - you'll share it securely with intended readers only.
- 3Confirm choiceUnderstand recipients without password cannot open file - including search indexes on some systems.
- 4Download protected PDFSave encrypted file for transmission - keep unencrypted master offline if policy requires.
Common questions
How strong should my PDF password be?
Use long passphrases - twelve plus characters mixing words and numbers - not 'password123'. Password protects against casual access, not nation-state cryptanalysis on AES. Share via separate channel from PDF email. Password managers generate suitable strings. Document owner should record password in enterprise vault if employees leave.
Is AES PDF encryption secure enough for HIPAA or legal docs?
AES PDF encryption is industry standard for file-at-rest sharing - combined with transport TLS on email and policy on password sharing. It's not substitute for dataroom ACLs, MFA, or redaction. Assess compliance with your counsel - JoyPDF provides tool, not legal certification. Avoid weak passwords that defeat strong encryption.
Can recipients print protected PDFs?
Depends on permission flags applied during encryption - JoyPDF focus is open password. Many viewers allow print once opened with password unless owner password restricted printing at creation in source app. Re-protect after merge if permissions must reset.
Is my password stored by JoyPDF?
No. Password exists only in your browser session for encryption operation - not transmitted to JoyPDF servers or saved in account because no account required. Browser memory clears when tab closes - don't leave unlocked decrypted export on disk unprotected.
Protect PDF vs password-protect in Adobe?
Adobe offers granular permission matrices and certificate security - JoyPDF targets straightforward password encryption locally without Creative Cloud. Adequate for SMB and personal protection; enterprises with PKI may need Adobe or dedicated DLP.
Can I change password after protecting?
Unlock with current password via Unlock PDF, then Protect PDF with new password - no direct password change without decrypt intermediate. Keep unencrypted backup until new password verified with test open.