How do I password protect a document before sending it?

This is worth doing for anything with financial or medical detail. The protection is real, but only if the password does not travel with the file, which is what most people do.

Step by step

1. Decide which kind of protection you need.A password to open the file encrypts it and is real protection. A password to restrict editing or printing is a courtesy setting that is trivially removed. They are different features.
2. Set an opening password in the office program.Look for protect document, or an options button within the save dialogue. Both major office suites support it, and modern versions use strong encryption.
3. Set one on a PDF at the export stage.Most PDF software offers a security or protection section when saving. On a Mac, the print-to-PDF dialogue includes security options without extra software.
4. Choose a passphrase, not a word.Three or four unrelated words is strong and can be read out over the phone. Avoid anything you use elsewhere — you are about to send it in the clear.
5. Send the password by another route.Phone call, text message, or in person. Putting it in the same email, or a follow-up email, means anyone reading the mailbox has both.
6. Consider a share link instead.A cloud link shared with a named person is often better than an attachment: access can be revoked, it expires, and you can see who opened it.
7. Keep a copy you can still open.Store the password in your password manager against that file. A protected document you cannot open is genuinely unrecoverable.
8. Check the recipient can open it.Very old software may not support current encryption. Ask before sending anything time-critical.

Tips

• A password-protected zip is widely compatible but its older encryption is weak. Prefer the document's own protection or an encrypted cloud share.
• Redact first, then protect. Removing information you do not need to send is stronger than protecting information you did not need to include.
• If you send documents regularly to the same person — an accountant, a solicitor — agree one method once rather than improvising each time.

Common mistakes

• Emailing the password with the file — It defeats the entire exercise. Anyone who reaches the mailbox, or the wrong recipient of a mistyped address, has both halves.
• Relying on restrict-editing to keep content private — It only asks programs politely not to allow changes. It does not encrypt anything and is removed by free tools in seconds.

If it doesn't work

Questions people ask