How to password-protect a PDF before emailing sensitive documents

At a glance

You can password-protect a PDF for free using tools already on your device — Preview on Mac, Microsoft Word on Windows, or a trusted app on your phone — so anyone who gets the file still can’t open it without the password. Two rules make it actually safe: do it on your device, not by uploading to a random free “lock PDF” website (that hands your file to a stranger), and send the password through a separate channel, never in the same email as the file.

Educational resource only. This is a practical guide to handling personal documents safely in India, in line with the safe-handling ideas behind India’s Digital Personal Data Protection Act, 2023 (DPDP Act); it is not formal legal advice.

On this page

• Why a plain attachment is risky
• On a Mac (Preview)
• On Windows (Microsoft Word)
• On a phone
• The two rules that make it actually safe
• FAQ

Why a plain attachment is risky

An unprotected PDF can be opened by anyone who ends up with the file — and email scatters copies widely. Once you send a document as a plain attachment, it sits in the recipient’s inbox, their email backups, and on any device where they read mail — openable by anyone with access to any of those. A password turns the file itself into a locked box: even if the attachment leaks or lands in the wrong inbox, it’s useless without the key. For a bank statement, salary slip or ID scan, that’s the difference between a stray file and a stray readable file.

Many bank statements arrive already password-protected for exactly this reason — you’re simply applying the same idea to documents you send yourself.

On a Mac (Preview)

Preview can encrypt a PDF with no extra software:

1. Open the PDF in Preview.
2. Go to File → Export.
3. Click the Permissions button (or the “Encrypt” option) and select Require Password To Open Document.
4. Enter a password and retype it to confirm.
5. Click Apply, then Save.

The protection takes effect the next time the PDF is opened.

On Windows (Microsoft Word)

If you have Microsoft Word, it can export a password-protected PDF:

1. Open the document (or the PDF) in Word.
2. Go to File → Export → Create PDF/XPS.
3. Click Options.
4. Tick “Encrypt the document with a password.”
5. Enter and confirm your password, then click Publish.

If you don’t have Word, use a trusted offline PDF application that runs on your computer rather than an online uploader.

On a phone

Use a trusted, on-device app — not a website you upload to. Several reputable PDF apps for Android and iPhone can add a password to a file locally on the phone, without sending it anywhere. Install one with a clear privacy policy, open your PDF, choose the “protect” or “set password” option, and save the locked copy. The key rule is that the file should never leave your phone to be “processed” in the cloud (see below).

The two rules that make it actually safe

Password-protection only helps if you don’t undo it with how you do it. Two rules:

• Don’t upload sensitive files to free online “lock PDF” sites. The moment you upload an unprotected Aadhaar or bank statement to a random website to “add a password,” you’ve handed the readable file to whoever runs it — the opposite of protecting it. Do it on your own device.
• Send the password separately. Putting the password in the same email as the attachment is like taping the key to the box. Share it through a different channel — a phone call or a separate message — and ideally not in writing at all.

A strong, unique password helps too: long, not reused from your other accounts, and not something guessable like your date of birth.

FAQ

Can I password-protect a PDF for free? Yes. Preview on Mac and Microsoft Word on Windows both do it at no cost, and trusted on-device phone apps can too — none require paid software or uploading the file anywhere.

Is it safe to use a free online tool to lock a PDF? Not for sensitive documents. Uploading an unprotected file to an online service hands the readable version to whoever runs the site. Use an on-device method instead, so the file never leaves your control.

How should I send the password to the recipient? Through a different channel from the file — a phone call or a separate message. Never put the password in the same email as the attachment.

What makes a good PDF password? Long, unique, and not guessable — avoid your date of birth, phone number, or a password you reuse elsewhere. The protection is only as strong as the password behind it.