Watermark or Password: How to Actually Protect a PDF

“Protect this PDF” means at least three different things, and picking the wrong one is why people end up with documents that are annoying to use and still not protected.

The three mechanisms

1. Watermarking — labelling and tracing

A visible mark drawn onto every page. It does not restrict anything: anyone with the file can open and read it. What it does is make the document’s status obvious, deter casual redistribution, and — if the mark identifies the recipient — make leaks traceable.

Use it when: the document needs to be read, but you want its status visible, your branding on it, or accountability for where it ends up.

2. Password protection — restricting who can open it

The file is encrypted. Without the password it cannot be opened at all. This is real cryptographic protection, and its weakness is entirely practical: you have to get the password to the right people, and they have to not forward it alongside the file.

Use it when: the document must not be readable by whoever intercepts it. You can do this free at LockMyPDF.

3. Permission restrictions — limiting what can be done

A PDF can be marked to disallow printing, copying text or editing, while still opening freely. Enforcement depends on the reader honouring the flags, so treat this as a strong hint rather than a guarantee.

Use it when: you want to discourage casual copy-paste or printing, and you accept it is not airtight.

Which one do you need?

• Sending a draft internally → watermark. It needs reading; it needs its status obvious.
• Emailing sensitive material → password, plus a CONFIDENTIAL watermark so status stays visible after it is opened.
• Selling an ebook → per-buyer watermark. Passwords get shared alongside the file and mostly generate support tickets.
• Publishing a public report → watermark for branding only. Do not password-protect something you want read.
• Legal or regulated documents → usually all three, plus a proper audit trail.

Using them together

Watermarking and password protection are complementary, not alternatives. The password controls who gets in; the watermark travels with the document afterwards, which is precisely when the password has stopped helping — the moment a legitimate recipient opens it and saves an unlocked copy.

If you are doing both, watermark first, then encrypt. Applying a watermark to an already-encrypted file means decrypting it first, which is a needless extra step.

---

Related

• Adding a CONFIDENTIAL or DRAFT watermark
• How to add a watermark to a PDF