Is my PDF or password uploaded?

No. The PDF and the password stay in your browser — neither is uploaded or stored. The encryption runs on your device, so you can confirm it in your browser's network tab.

What encryption does it use?

AES-256 — the strongest standard PDF encryption, applied by a self-hosted qpdf engine running in your browser. Anyone opening the file will be asked for the password you set.

Can I restrict printing or copying, not just set a password?

Yes — you can mark printing, copying text, editing, and annotating/form-filling as restricted, independently of the open password. Keep in mind these permission flags are part of the PDF standard but are only enforced by the reader: Adobe Acrobat and most desktop apps respect them, while many browser PDF viewers ignore them. They're great for signalling intent, but for content that must never be extracted, redact it rather than relying on a permission flag.

How do I remove the password later?

Use the Unlock tool with the password you set — it saves a copy with the password (and restrictions) removed. Both run entirely in your browser.

Yes — unlimited, no account, no watermark.

Password-protect a PDF

Set an open password and lock down printing, copying, or editing — all in your browser. The file and password never leave your device, so nothing is uploaded to any server.

100% local. AES-256 encryption runs in this browser tab.
Granular permissions. Allow or block print / copy / edit / annotate.

Drop a PDF here

or tap to choose a file

Password-protect a PDF, in your browser

Add an open password and lock down printing, copying, or editing with AES-256 encryption — entirely on your device. The file and password are never uploaded.

Nothing is uploaded

The whole thing runs in your browser — open your network tab and watch: your file never leaves your device. Most online tools round-trip your document through their servers.

AES-256, encrypted locally

The encryption runs in this browser tab via a self-hosted engine — the PDF and your password never touch a server. Tools like Smallpdf and iLovePDF upload your file to encrypt it; AttachKit doesn't.

Granular permissions

Beyond an open password, mark printing, copying text, editing, and annotating/form-filling as allowed or restricted. Adobe Acrobat and most desktop readers honour these flags; many web-based viewers ignore them, so treat permissions as a request rather than an unbreakable lock — to truly remove sensitive content, redact it.