Privacy
How to send a password-protected PDF safely
By DeckleUpdated
To send a password-protected PDF safely, protect the file with a strong password, send the PDF by one route and the password by another, such as email for the file and a phone call or text for the password. Use Password protect PDF: type the password twice and choose Protect this PDF. If one message is intercepted or forwarded, it does not open the document on its own.
Decide how the recipient gets both items
Protected PDF
Send the checked output to the intended recipient
Password
Use a separately verified communication route
Separate channels help only if the routes are trustworthy
How to send a password-protected PDF
- Clean the file first. Remove unwanted pages and run Remove PDF metadata to clear the author, dates and attachments.
- Open Password protect PDF and choose the cleaned PDF, or drop it onto the page.
- Generate a strong password, save it in your password manager, then paste it into Password and Confirm password.
- Choose Protect this PDF and download the copy with "(protected)" in its name.
- Open the download and check that the password opens every page.
- Send the PDF by email, file transfer or your usual channel.
- Send the password separately: phone, text message, or a different messaging app.
The result screen reads "Password required to open" with "AES-256 protection added". Before it appears, Deckle checks that the file refuses an empty password and opens with yours.
Choosing the second channel
| Send the PDF by | Send the password by | Notes |
|---|---|---|
| Phone call or text message | The most common pairing; easy for any recipient | |
| A messaging app you both use | Good when you already message each other | |
| File transfer link | Email to a known address | The link and the password arrive separately |
| Client portal | Phone call | Useful for regulated documents |
| Printed letter | Email or text | The password unlocks a digital copy sent separately |
Avoid sending both in the same email, in two emails one after the other to the same inbox, or with the password in the subject line or file name. Each of those puts the file and its key in the same place.
Agree the password in advance
For people you send documents to regularly, agree a way of passing passwords once. For example, call the recipient for the first file and agree that later passwords will come by text. Do not reuse one password for every file: if one document is shared further, the others stay closed.
Avoid ambiguous characters such as 0 and O, or 1, l and I, which cause most "wrong password" calls. How to choose a strong password for a PDF has examples that are hard to guess and easy to read out.
Check who you are sending to
A password protects the file in transit. It does not check that the recipient is the right person. Before you send:
- confirm the email address, especially if it was auto-completed,
- use a phone number you already have, not one from the email you are replying to,
- be wary of a sudden request to send documents to a new address.
What the recipient can do once it opens
Anyone with the password can read, print and save the document; Deckle does not set separate printing or copying restrictions. If the recipient must not see a detail, remove it from the pages before you protect the file. A password is about who can open the file, not what they can do afterwards.
Tips
- Store the password before you send. Deckle does not keep it, and a lost password cannot be reset.
- Tell the recipient which reader to use if they have problems. Current readers such as Acrobat Reader, Preview and browser viewers open AES-256 files.
- Delete the unprotected original from shared folders if it should not be there. Deckle never changes it.
- Change the password if it was exposed. Follow how to change the password on a PDF and resend.
Frequently asked questions
Is it safe to email a password-protected PDF?
Yes, if the password is strong and sent by a different route. The file is encrypted with AES-256, so the email alone does not reveal its content.
Should I send the password in a second email?
Not to the same inbox. Someone with access to the first email would have the second too. Use a phone call, text or another app.
Can the recipient remove the password?
Yes, with the password they can save an unprotected copy, for example with Unlock PDF. Protection is about who can open the file, not what they do with it afterwards.
Is the password sent to Deckle?
No. The file is encrypted in your browser. The password is not stored, sent or written into the result record.
Related tools
- Password protect PDF to add an AES-256 password
- Remove PDF metadata to clean the file before you protect it
- Unlock PDF to remove a password you know