When you protect a PDF with a password, you might not realize there are actually two different types of PDF passwords — and they do completely different things. Using the wrong one for your situation either over-restricts the document or leaves it less protected than you intended. Understanding the distinction takes two minutes and saves real confusion later.
The Open Password (Document Open Password / User Password)
An open password — also called a user password or document open password — controls who can open the file at all. When a PDF has an open password, anyone who tries to open it sees a password prompt. Without the correct password, the document is completely inaccessible. Nothing is visible, not even the filename's page count or metadata.
This is the type of PDF Password most people think of when they hear "password-protected PDF." It's encryption in the true sense — the file contents are scrambled and only the correct password unlocks them.
Use an open password when:
- The document contains genuinely sensitive information that should only be readable by specific people
- You need to control who can access the content — not just what they can do with it
- The document is being sent to external parties and interception is a concern
The Permissions Password (Owner Password / Restrictions Password)
A permissions password — also called an owner password or restrictions password — does something very different. It doesn't prevent the document from opening. Anyone can open and read the PDF without any password at all. What the permissions password restricts is what recipients can do with the content after they open it.
With a permissions password, you can restrict:
- Printing — prevent the document from being printed, or allow only low-resolution printing
- Copying — prevent text and images from being selected and copied
- Editing — prevent changes to the document content
- Annotations — prevent adding comments, form filling, or signing
Use a permissions password when you want people to read the document but not extract or modify the content — a proposal you don't want copied from, a report you're distributing without wanting it edited, a template you want filled in but not restructured.
An Important Limitation of Permissions Passwords
Permissions restrictions are enforced by the PDF viewer software — not by encryption. Adobe Reader and Acrobat respect them. Many other viewers, including Chrome's built-in PDF viewer and various mobile apps, may ignore them entirely.
This means permissions passwords deter casual misuse — someone who opens the PDF in Adobe Reader and sees copying is disabled will likely respect that. They don't prevent determined circumvention by someone who opens the same PDF in a viewer that ignores restrictions. For content that genuinely cannot be copied, an open password with encryption is the more reliable protection — the content is encrypted and inaccessible without the key.
Using Both Passwords Together
A PDF can have both an open password and a permissions password simultaneously. This is the most restrictive combination: recipients need the open password to access the document at all, and the permissions password controls what they can do once inside. The two passwords are set independently and can be different.
In practice, most business PDF protection uses one or the other rather than both. Sensitive documents going to specific recipients use an open password. Documents distributed more broadly where content protection is the goal use permissions restrictions. Both together is appropriate for high-sensitivity documents where access control and content restriction both matter.
How to Set Each Type
In Adobe Acrobat Pro, go to File > Properties > Security > Security Method > Password Security. The dialog shows two separate sections: one for the document open password and one for permissions, with checkboxes for each restriction type.
WukongPDF's PDF Security tool at www.wukongpdf.com adds an open password to PDFs without needing Acrobat — upload the file, set the password, download the protected version. For permissions restrictions specifically, Adobe Acrobat Pro or a comparable desktop tool gives the most control over which specific operations to allow or block.