Lock PDF Online: How to Password-Protect a PDF Before Sharing It

CodexFuse Team · 2026-11-01T09:25:16.771Z · 11 min read min read

Learn how to lock a PDF online: plan passwords, 256-bit AES encryption and printing limits, then apply them safely before sharing.

To lock PDF files is to control who can open them and what they can do with them afterwards. A locked PDF asks for a password before it opens, or it blocks printing, copying and editing even after it opens. That control matters because a PDF feels final and safe, yet an unlocked file can be forwarded, printed, copied and changed in seconds.

Most people discover this too late. They send a contract, a price list or a client report, and only later realise the recipient could pass it on to anyone. This guide shows how to lock PDF documents properly, with a worked example you can copy, and it explains what PDF locking cannot do. You will plan the protection first with the free CodexFuse lock PDF planner, then apply it in the PDF app you already use.

What Does It Mean to Lock PDF Files?

A locked PDF is a document with access rules built into the file itself. An open password stops the file opening at all without the correct password. A permissions password, sometimes called an owner password, lets someone open the file but limits what they can do with it. These two passwords do different jobs, and confusing them is the most common locking mistake.

Encryption is the mechanism underneath both passwords. With 128-bit AES or 256-bit AES encryption, the content is scrambled until the right password unlocks it. The stronger 256-bit AES option is the sensible default for sensitive documents today, because the performance cost is negligible and the protection is stronger. Choosing 128-bit AES only makes sense when you must support a very old reader, and that case is now rare.

Why Unlocked PDFs Leak, Even Between Trusted People

PDFs leak for boring, everyday reasons rather than dramatic hacks. Someone forwards an email thread without checking the attachment. A colleague prints a copy and leaves it on a shared printer. A contractor downloads a file to a personal laptop and keeps it after the project ends. None of these people need to break anything, because the file itself never said no.

The risk grows with the value of the document. Price lists, employment contracts, medical summaries, tender responses and internal reports all travel as PDFs precisely because they look professional and portable. That portability is the problem. Once a file leaves your inbox, you cannot recall it, so the protection has to travel inside the file.

Worked Example: Locking a Client Proposal Before It Leaves the Office

Consider Sara, operations manager at a 12-person consultancy in Manchester. She must send an 18-page proposal to a prospective client, including a two-page pricing annex that the client should read but not forward, print or edit. The proposal is ready, the deadline is Friday, and the client contact will read it on a laptop and a phone.

Sara opens the lock PDF planner and enters the file name, proposal-acme-2026.pdf, and the page count, 18. She chooses 256-bit AES encryption. She ticks both password options: an open password, which she will send to the client through a separate channel, and a permissions password, which only her team knows. She then ticks all three restrictions: restrict printing, restrict copying and restrict editing.

The planner shows a live protection summary: file name, page count, both passwords planned, 256-bit AES selected, and all three restrictions on. Sara works through the before-you-share checklist, then follows the step-by-step guide for Adobe Acrobat to apply exactly that plan to the real file. She sends the locked PDF by email and the open password by a separate message. The result is concrete: the client can open and read the proposal, but cannot print the pricing annex for circulation, copy its text into another document, or edit the terms. Her team keeps the permissions password, so they alone can lift the restrictions later if the deal changes.

Notice what made this work. Sara decided the rules before she touched Acrobat, she used two different passwords, and she separated the password from the file. Skipping any one of those steps would have left a gap, however carefully she set the other options.

How to Lock PDF Files with the CodexFuse Planner, Step by Step

The CodexFuse tool is a planner, not an encryptor. It never uploads your file, never asks for a real password, and never produces a locked PDF by itself. That design is a privacy advantage: nothing sensitive leaves your device while you plan. You then apply the plan in Acrobat, Preview on Mac, or Chrome, following the guide the tool shows.

1. Enter the file details: type the file name, for example proposal-acme-2026.pdf, and the page count, so the summary matches the real document.
2. Choose the encryption strength: select 256-bit AES unless you have a specific reason to use 128-bit AES for an older reader.
3. Tick the password options: choose an open password to control opening, a permissions password to control changes, or both, depending on what the recipient should be allowed to do.
4. Set the restrictions: tick restrict printing, restrict copying and restrict editing as needed, rather than applying every restriction by default.
5. Review the protection summary: check the file, pages, passwords, encryption and restrictions together before you apply anything.
6. Work the checklist: tick the before-you-share steps as you complete them, so nothing is sent on autopilot.
7. Apply it in your PDF app: follow the step-by-step guide for Acrobat, Preview or Chrome, then test the locked file yourself before sending it.

Testing matters more than people expect. Open the locked file on a different device, try to print it, and try to copy a paragraph. If any test surprises you, fix the plan and re-apply it before the file goes to a client.

Which Restrictions Should You Actually Use?

Not every document needs every restriction, and over-locking creates its own problems. A public brochure that clients need to print should not block printing. A contract draft under negotiation should block editing, or you will receive back a version with silent changes. A price list should usually block copying, so its figures cannot be lifted into a competitor's comparison sheet in seconds.

A useful rule is to lock for the recipient's real job. If they only need to read and approve, block printing, copying and editing. If they need to print a copy for a meeting, allow printing but block copying and editing. If they need to sign, use your PDF app's signing workflow rather than leaving editing open and hoping nobody changes anything else. When a document is large, shrinking an oversized PDF before you lock it also makes the protected file easier to send and open.

What Locking a PDF Does Not Do

Honest limits matter here, because overselling PDF security leads to careless sharing. First, PDF permissions are enforced by reader software, and some tools ignore them. A determined recipient with specialist software can often remove permissions restrictions, even though ordinary readers respect them. Second, locking never stops screenshots or photographs of the screen. Third, once you share the open password, you cannot control where it goes next.

Fourth, a password is only as strong as the password itself. A short, guessable password on a 256-bit AES file is like a strong door with a weak lock. Use a long, unique password, store it in a password manager, and never reuse a password across documents. If you want stronger password habits generally, a secure password hashing guide explains why proper storage matters as much as password length.

Finally, remember the CodexFuse planner itself does not encrypt anything. That is deliberate and worth stating plainly: you plan on the lock PDF tool, then you apply the plan in Acrobat, Preview or Chrome. Any service that claims to lock your PDF without you ever applying a setting should be treated with suspicion, because it must have handled your real file and your real password.

Common Mistakes That Undo a Locked PDF

• Using one password for both jobs: sharing the permissions password with the recipient hands them the key to remove the restrictions.
• Sending password and file together: a single forwarded email then defeats the whole system.
• Forgetting to test the file: an untested lock may block the legitimate reader while leaving another route open.
• Locking the wrong version: protect the final file, not a draft, and re-check after any last-minute edit, which can strip protection in some apps.
• Assuming locked means backed up: a locked file still needs a backup, and a lost permissions password can lock you out of your own document, so store both passwords safely.

For a business, these mistakes compound across staff. One shared inbox password, one untested template, or one habit of emailing passwords with files can undo an otherwise sound policy. That is why the planning step matters: it turns a rushed click in Acrobat into a repeatable checklist the whole team can follow.

Frequently Asked Questions

Can I lock a PDF for free?

Yes. Planning is free with the CodexFuse planner, and applying the plan uses the PDF app you already have, such as Acrobat, Preview or Chrome. You do not need to buy a separate locking product for ordinary open and permissions passwords.

What is the difference between an open password and a permissions password?

An open password controls whether the file opens at all. A permissions password controls what a reader can do after opening it, such as printing, copying or editing. Use both when you want to limit both access and use.

Is 256-bit AES better than 128-bit AES?

Yes, 256-bit AES is stronger, and it is the recommended default for sensitive documents. The performance difference is negligible on modern devices, so there is rarely a reason to choose 128-bit AES unless an old reader requires it.

Does the CodexFuse tool upload or encrypt my PDF?

No. It is a planner only, with no file upload, no download and no password field. You plan the protection there, then apply it yourself in Acrobat, Preview or Chrome, so your real file and passwords never pass through the tool.

Can a locked PDF still be copied by screenshot?

Yes. Locking blocks copying text and printing through ordinary readers, but it cannot stop someone photographing or screenshotting the screen. For highly sensitive material, limit who receives the file in the first place rather than relying on locking alone.

What should I do if I forget a PDF password?

There is no reliable official recovery route, which is why storing passwords in a password manager before sending is essential. If the permissions password is lost, you may be unable to lift restrictions on your own file, so treat both passwords as part of the document's records.

Lock Your Next PDF Before You Send It, Then Fix the Bigger Problem

Locking a PDF takes five minutes once you have a plan, and it closes the easiest route by which sensitive documents leak. Plan the file, choose 256-bit AES, use two different passwords, restrict what the recipient actually needs restricted, test the locked file, and send the password separately. That routine alone puts you ahead of most businesses sending PDFs today.

But a locked PDF is only one document. If your hosting, business email, security and backups still live on separate subscriptions with separate bills and separate support queues, the same chaos will keep producing the next leak. Move your hosting, email and security to CodexFuse, where everything is fully managed on pay-as-you-go credits with no subscriptions and no lock-ins. Get started with CodexFuse today, plan your next protected document properly, and stop babysitting the IT that should be protecting your business.