Sending a confidential document by email should not mean trusting a cloud server to encrypt it for you. When you upload a PDF to an online password-protection service, your unprotected file travels over the internet to a third-party server, gets processed, and then travels back — with your data briefly accessible to that service's infrastructure. For NDAs, financial documents, medical records, personnel files, and any document containing sensitive personal or business information, that is an unacceptable security model. The Utility Spark PDF Password Protector applies AES-128 encryption to your PDF entirely within your browser. The pdf-lib library handles the cryptographic operation locally using your device's processor. The password you set, and the document being protected, never leave your machine. The resulting encrypted PDF opens in any standard PDF reader — Adobe Acrobat, Preview on Mac, PDF viewers on iOS and Android — and requires the password you set before any content is visible. Encryption quality is equivalent to what desktop tools like Acrobat provide for standard password protection scenarios.
lightbulb When to use this tool
- check_circle Protecting a confidential contract, NDA, or legal agreement before emailing it to a counterparty.
- check_circle Adding password protection to payslips, offer letters, or HR documents before distributing to employees.
- check_circle Securing a PDF financial report or bank statement before sharing via email or cloud storage.
- check_circle Protecting a client deliverable (design brief, research report, proposal) before sending.
- check_circle Locking a personal document like a passport scan or ID copy before storing in cloud storage.
Why use our tool?
Encryption Happens Locally — Your Document Never Leaves Your Device
The critical difference between this tool and services like ILovePDF or Adobe online is where the encryption happens. Those services receive your unprotected PDF, encrypt it on their server, then return it. This tool applies AES encryption within your browser's local execution context. Your original PDF is never transmitted — only the already-encrypted output file is written to your downloads folder.
Standard AES Encryption — Compatible with All PDF Readers
The encrypted PDF uses AES-128 encryption, the standard algorithm implemented in Adobe Acrobat and compatible with virtually every PDF viewer in use today — desktop (Acrobat, Preview, Foxit), mobile (iOS Files, Android PDF viewers), and browser-based readers. Recipients simply open the file and are prompted for the password.
No Password Transmitted or Logged
The password you enter to protect the PDF is processed locally to generate the encryption key. It is never sent to Utility Spark's servers in any form — not as a parameter, not as a log entry, not as telemetry. We cannot recover or reset your password because we never received it.
Permission Controls — Restrict Printing and Copying
Beyond access password protection, the tool lets you set document permissions: restrict whether the recipient can print the document, copy text from it, or modify it. This is particularly useful for distributing read-only versions of reports or contracts where you want to prevent copy-paste of content.
Instant — No Upload Queue
Cloud encryption services queue documents on shared servers. This tool encrypts at the speed of your local CPU, which for standard PDFs is under one second. There is no upload wait, no processing queue, and no throttling based on server load.
How it works
Click 'Upload PDF' or drag your PDF file onto the upload area.
Enter the password you want to set in the 'Password' field. Use a strong, unique password — the encryption is only as strong as the password you choose.
Optionally, set permission restrictions: toggle off printing, copying, or editing permissions if you want to limit what recipients can do with the document.
Click 'Encrypt PDF'. The encryption runs locally — no upload progress bar, because no upload is occurring.
Click 'Download Protected PDF' to save the encrypted file. Test it immediately by opening it in a PDF reader to confirm the password prompt appears.
Examples
science Protecting an NDA Before Emailing
Document: mutual-nda-draft.pdf (8 pages, unprotected)
Password set: Strong passphrase (12+ characters)
Permissions: Printing allowed, copying disabled
Output: mutual-nda-protected.pdf — opens in any PDF reader, password-gated
Privacy: The original unprotected PDF never left the device during this process.
science Securing a Payslip for Employee Distribution
Document: employee-payslip-june2025.pdf
Password: Employee's date of birth (common HR practice for payslips)
Permissions: Read-only (no print, no copy)
Result: Encrypted PDF attached to HR email — only the intended employee can open it.