PDFNexus

PDFNexus tool

Protect PDF

Encrypt a PDF with a user password and optional owner controls. Limit printing, editing, and content extraction before sharing sensitive documents.

Protect PDF

Encrypt with AES-256 in your browser. Passwords are never uploaded or logged.

Processed locally

Drop a PDF here or click to browse

Processed in your browser — files stay on this device

Permissions (owner restrictions)

Owner permissions are not absolute — some PDF readers may ignore them. The user password is what reliably prevents opening the file.

Your file never leaves this device for this operation.

How it works

  1. Upload the PDF you want to lock.
  2. Set a user password (required to open) and optional owner password.
  3. Choose permissions for printing and editing, then download the encrypted PDF.

Privacy

This tool runs in your browser. Your file is not uploaded to process it.

Limits

  • Uses 256-bit AES encryption via a local WASM engine.
  • Choose a strong password — lost passwords cannot be recovered here.
  • Some third-party viewers may ignore permission flags even when set.

FAQ

What is the difference between user and owner password?
The user password is required to open the file. The owner password controls permission changes; if omitted, the user password is reused.
Can I restrict printing?
Yes. You can allow full printing or block it entirely in the permission settings before encrypting.
Is my password sent to a server?
No. Encryption runs entirely in your browser; passwords never leave your device.