How secure is a PDF password? The truth about the two kinds

A PDF with an open password (user password) has its entire content mathematically encrypted. Without the password, the text and images inside are indistinguishable from random noise. Modern PDFs use AES-256 — the same encryption strength class as online banking.

But the strength rests on the password itself. The best algorithm in the world protects nothing behind “1234” or a birthday; automated guessing tears through those. A document worth encrypting deserves a long, unpredictable password.

The permissions password (owner password) is different. A PDF set to “viewing allowed, but printing/copying/editing disabled” is not encrypted in any meaningful sense — the viewer must read the content to draw it on screen. The restrictions are just flags written in the file.

“Printing disabled” is therefore a request to the viewer application. Standards-compliant viewers honor it; tools that ignore it exist in abundance, and permission-removal tools operate widely and legally. Treat permission flags as a mistake-prevention lock, not security.

Forgetting a permissions password (the file opens but won't print or edit) is recoverable, for exactly the reason above. For your own documents, or documents you have rights to, an unlock tool strips the restrictions.

Forgetting an open password is another matter. The content is genuinely encrypted, and without the password there is realistically no way in. If you can shortlist candidates (“it's one of these five”), try them; otherwise the practical answer is recreating the document or requesting reissue from whoever produced it.

In practice, documents rarely leak through broken encryption. They leak through the password written in the same email as the file, the file and password posted side by side in a group chat, and cloud links left open to “anyone with the link”.

One principle fixes most of it: send the file and the password by different channels. File by email, password by text message or phone — that alone removes the biggest risk on the path.

Encryption stops a file being opened; a watermark makes a leak traceable. Distribute copies watermarked with each recipient's name, and a leaked copy identifies its source — a fact that itself deters leaking.

Document metadata cuts the other way: it can expose what you didn't mean to share. For outbound documents, check that author names and similar fields carry nothing sensitive.

Match the measure to the document.