Send personal documents
Protect payslips, tax notices or ID documents before emailing them.
Encrypt a PDF with AES-256 and an open password: without it, the document can no longer be opened. Encryption runs locally in your browser, with no upload.
Your files are processed locally in your browser and are never sent to our servers.
Drop your file here
Recommended size: up to 100 MB
The password will be required to open the PDF.
Password-protecting a PDF encrypts the document: without the password, it can no longer be opened or read. It is the precaution to take before emailing a payslip, a medical file, a contract or a statement, especially if the message may be forwarded or the attachment intercepted. Encryption is applied in your browser; neither the document nor the password is transmitted.
The tool relies on qpdf, a reference library for handling PDFs, compiled to WebAssembly so it runs in the page. The document is encrypted with the AES algorithm and a 256-bit key, the strongest method defined by the PDF 2.0 standard (ISO 32000-2).
The password you enter becomes both the open password and the owner password. It is asked for twice to avoid a typo that would lock you out of the file. The resulting PDF opens normally in all recent readers (Acrobat, browsers, built-in system viewers), which then ask for the password.
The strength of the protection depends mostly on the password: AES-256 makes direct attacks on the encryption unrealistic, but a short or common password can be guessed by trial and error. Send it through a different channel from the document, for example by text message if the PDF goes by email.
Choose the document to protect; it stays on your device.
Both entries must match; a message warns you otherwise.
The protected file will ask for this password every time it is opened. Test it before sending.
Protect payslips, tax notices or ID documents before emailing them.
Encrypt a quote, a contract or a confidential report intended for a client.
Keep private documents on a USB stick or shared cloud without leaving them readable by everyone.
A passphrase of several words with digits and a symbol holds up far better than a 6-letter word. The password is then given to the recipient by phone, never in the same email as the file.
Input
payslip-march.pdf, password “Moon-Orchard-73!” entered twiceResult
PDF encrypted with AES-256 that asks for the password when openedAES with a 256-bit key, applied by qpdf. It is the highest level defined by the PDF standard and is supported by current readers.
The document can no longer be opened. Bethemesh keeps neither the file nor the password and therefore cannot recover it.
No. Common PDF readers, including those built into browsers, can open an AES-256 encrypted PDF once the password is entered.
No. It is only used for the encryption performed in your browser and is neither stored nor transmitted.
Yes, with Unlock a PDF and the password you chose.
No. Once the document is opened with the password, every action is allowed. To restrict printing or copying, use Change PDF permissions.
Related tools
Tools similar or complementary to this one.
Remove PDF password protection locally when you know the current password.
Control printing, modifications and content extraction with an AES-256 owner password.
Clean a PDF locally by removing metadata, JavaScript, automatic actions and embedded attachments.
Learn why covering text is not enough, how secure PDF redaction removes sensitive information and why sanitization matters before sharing.
A practical workflow for checking, merging, reordering, sanitizing, compressing and protecting a final PDF before sending it.
Understand why local processing matters for sensitive PDFs, what it reduces, and which privacy precautions remain necessary before sharing a document.
Understand how PDF files are structured, the difference between native and scanned PDFs, and the right operations for merging, reorganizing, converting or completing documents.