Protect PDF

Popular

Encrypt with a password.

Add a password and real AES encryption (qpdf) so only people with the password can open your PDF. Encryption runs on an encrypted, auto-deleting secure worker.

Secure workerIn: PDFOut: PDF

Files are processed on an encrypted, isolated worker and permanently deleted shortly after.

How it works

1Upload your PDF file over an encrypted connection.
2Choose your options.
3The secure worker processes the file and deletes the input when the job finishes.
4Download the result — the link stops working after 60 minutes.

Secure-worker encryptionChecking…

Protect PDF runs on an encrypted secure worker

Encrypting a PDF needs the native qpdf engine, so it runs on an isolated, auto-deleting secure worker rather than in your browser. Your password is sent to that worker only to encrypt the file, and the input is wiped right after.

Checking whether a secure worker is available…

Pressing it sends us the tool's name — nothing about you.

What happens to your file

1. Encrypted uploadYour file is uploaded directly to short-lived, encrypted storage over a pre-signed URL.
2. Structural preflightEach file is checked that it really is the type it claims to be, and malformed ones are rejected. Files are not scanned for malware here.
3. Isolated processingA single-job sandbox with no network egress does the work, then is destroyed.
4. DownloadYou get a signed, expiring link to the result — no account required.
5. Auto-deleteInputs are wiped right after processing; outputs auto-delete within the retention window.

InputOne PDF

OutputPDF

RetentionInput wiped after processing · output 60 min

Limit100.0 MB/file

No account required. This runs on an isolated secure worker: files are encrypted in transit and at rest, processed in a sandbox with no network egress, and deleted automatically. Your password is used only to perform the operation and is never stored or logged.

Common questions

What happens to my file after Protect PDF runs?

The file is processed on an encrypted, isolated worker. Inputs are wiped when the job finishes, the download link stops working after 60 minutes, and stored copies are erased by a daily storage rule.