Unfuss — built for humans who care about bytes.
Lock · Share · Peace of mind

Password-
protect any
PDF or XML.

Add a password to a PDF or XML file so that whoever you send it to needs that password to open it — in any viewer (for PDFs) or any unzip tool (for XML). Encryption happens on your machine; the original file never leaves your browser.

File protection Ready — drop a PDF or XML
How XML protection works: XML files are placed inside an AES-256 password-protected ZIP. Recipients open the ZIP with the password using any standard tool (macOS Archive Utility, 7-Zip, Windows built-in, The Unarchiver, etc.) and get the original XML out. The XML itself stays unmodified — only the wrapper is encrypted.

Word documents (.docx) aren't supported yet. Microsoft Office uses a proprietary encryption format that doesn't have a mature in-browser library. Export to PDF and protect the PDF here, or save as XML and protect that.

— Password on open

Anyone opening the PDF in Acrobat, Preview, Edge, or any viewer will be prompted for the password first.

— Private by design

The file is loaded into your browser, encrypted in memory, and saved as a new PDF. Nothing is uploaded.

— Control permissions

Optionally add an owner password to restrict printing, copying, editing, or form filling — even for a recipient who knows the user password.

How PDF passwords actually work

When you password-protect a PDF, the PDF's internal streams are encrypted with a key derived from your password. Any viewer that opens the file — Acrobat, Preview, Edge, a Kindle, an iPhone — will prompt for the password before rendering a single page. There's no special "Unfuss reader" required; the password travels with the file.

PDF supports two passwords at once:

How strong is PDF encryption?

Modern PDF readers use AES-256 encryption by default, which is military-grade. But here's the catch: the cipher is only as strong as the password that unlocks it. A four-character password can be brute-forced on a laptop in seconds; a twelve-character random one would outlive the sun. The algorithm doesn't matter if the key is weak.

How to pick a password that actually protects the file

Frequently asked

Is my PDF uploaded?

No. The PDF bytes are read into your browser tab, encrypted in memory with pdf-lib, and saved back as a new file. No part of your document or your password is transmitted anywhere.

What if I forget the password?

Nothing can be done. The encryption is one-way in a useful sense — without the password the document is unrecoverable. Unfuss has no reset mechanism because Unfuss never saw the password. Always keep a backup of the original, unprotected file.

Will every PDF viewer prompt for the password?

Yes. Password-protection is part of the PDF specification, not a Unfuss feature. Acrobat, Preview on Mac, Edge, Chrome's built-in viewer, Okular, and every serious mobile reader all support it.

Can I password-protect a PDF that's already signed?

Technically yes, but the signature will be invalidated because encrypting the file changes its bytes. Sign first, protect second, and communicate to your recipient that the signature is visual only if you used Unfuss Sign.

Can I remove a password from a PDF I received?

Not with this tool yet — decrypting an encrypted PDF requires the password and a slightly different code path. If you have the password, you can open it in Preview (Mac) or Acrobat and re-save without protection, then process it here.

How does XML password protection work?

XML is plain text — the format itself has no built-in password mechanism. Unfuss wraps your XML file inside an AES-256 encrypted ZIP archive. The recipient opens the ZIP with the password (in Finder, Explorer, 7-Zip, The Unarchiver, or any standard tool) and the original XML is extracted unchanged. This is the most portable option: no special software required on the receiving end.

Can the XML be opened directly without unzipping?

No. To protect XML, the bytes have to be encrypted, which means the output isn't a valid XML file anymore — it's a ZIP. The recipient unzips it (one click on every modern OS) and gets the original XML. If you need a workflow that keeps the file as XML, that requires W3C XML Encryption (xmlenc), which most consumer tools can't read; Unfuss doesn't offer that mode.

Why isn't DOCX supported?

Microsoft's Office format uses an encryption scheme (ECMA-376 Agile Encryption) that doesn't have a mature JavaScript implementation. Building one would be a significant project. For now, export your Word document as a PDF (File → Save As → PDF) and protect the PDF with this tool — the result opens anywhere and requires the password just the same.

— More from Unfuss