When this tool is useful
Adding password-at-open protection before storing or sharing a document through another channel.
How local processing works
AES-256 encryption is written in the browser. The opening password also has owner access, and document permissions remain enabled so the same password can remove protection later.
How to use it
- Choose the source files.
- Review the available settings and page order.
- Process locally, inspect the result, and download it.
Important limitations
This controls opening only; it is not DRM and cannot prevent screenshots, copying, editing, or redistribution after an authorized reader opens the file.
Private by design
Your files stay in this browser. The tool does not upload the source or output to our servers.
Questions and answers
Does this tool upload my files?
No. Processing happens in your browser; closing the page clears the working session.
Will the output always match the source exactly?
This controls opening only; it is not DRM and cannot prevent screenshots, copying, editing, or redistribution after an authorized reader opens the file.
Concrete input and output example
Input an unprotected 18-page PDF, enter a strong password, and download an AES-256 protected copy. Encryption and password handling occur locally; the password is not uploaded or recoverable by this service.
Browser compatibility notes
Reviewed against the implementation and required web APIs on 2026-08-12. Use a current browser where these APIs are available and verify important output on your device.
- Chrome / Edge (current desktop)
- Requires local @libpdf/core parsing, encryption APIs, and Blob download support.
- Firefox (current desktop)
- Password bytes remain in the local workflow; verify the protected or unlocked download.
- Safari (current desktop)
- Uses the local encryption workflow; keep the tab active during larger rewrites.
A tool-specific question
Can Image PDF Tools recover a forgotten password?
No. The password is not uploaded or stored by the application. Keep it in a trusted password manager before distributing the encrypted PDF.