Back to blog
Protect PDFUnlock PDFPDF PasswordTutorial

PDF Passwords Explained: Owner vs User Permissions

July 28, 2026 7 min read·The Evoke Team, Product
PDF Passwords Explained: Owner vs User Permissions

Protect / Unlock PDF lets you add a password so only people who know it can open the file, or remove protection when you already have the password. Evoke AI runs both flows in your browser so sensitive contracts, invoices, and IDs never need to leave your device.

What is PDF password protection?

A protected PDF is encrypted so readers must enter a user password before the document opens. That is different from a watermark or “read-only” tip — without the password, most apps will not show the pages at all. Unlocking means decrypting with the correct password and saving a new copy that opens freely.

How to protect a PDF with a password, step by step

  • Open Protect / Unlock PDF online free in your browser
  • Choose Protect mode
  • Drop or select your PDF
  • Enter a strong password and confirm it
  • Download the protected PDF
  • Share the file and send the password through a separate channel

How to unlock a password-protected PDF

  • Open the same tool and switch to Unlock
  • Upload the protected PDF
  • Enter the current password
  • Download the unlocked copy
  • Store the new file securely if it still contains sensitive data

How does protect / unlock work?

Protect encrypts the PDF with a user password using standard PDF security. Unlock decrypts the file when the password is correct, then writes a new PDF without encryption. Wrong passwords fail safely — the tool does not crack or guess passwords.

Why password-protect a PDF

  • Share contracts and HR files with less risk if the email is forwarded
  • Keep bank statements and tax PDFs private on shared drives
  • Send client deliverables that should not open by accident
  • Meet basic security expectations without a paid desktop suite

When should you unlock a PDF?

  • Before merging, compressing, or converting a file that tools reject as encrypted
  • When you need to print or annotate in an app that struggles with encrypted PDFs
  • Before archiving an open copy you control, after removing the password you no longer need
  • When a teammate shared a password-locked draft and you must edit elsewhere

Tips for safer results

Use a unique password you do not reuse for email. Send the password in a different message than the PDF. Remember that unlocking creates an open file — treat that copy as sensitive. If a PDF uses an exotic encryption scheme, some browsers may not support it; try a different export from the original app.

A password on the PDF is a simple gate — keep the password off the same email as the attachment.

Protect PDF vs watermark vs Sign PDF

Protect blocks opening without a password. Watermark stamps visible ownership text but does not encrypt. Sign PDF proves who approved a page. Use protect when secrecy matters; watermark when attribution matters; sign when approval matters.

Frequently asked questions

No. Evoke AI only unlocks when you provide the correct password.

No. Encryption runs in your browser on your device.

Any modern PDF reader that supports password prompts will work.

Unlock with the old password, then protect again with a new one.

Yes — free in your browser on Evoke AI.

Protect or unlock a PDF

Open Protect / Unlock PDF