A normal PDF can hold only one open password, so “one password per recipient” always means one copy – or one link – per recipient. Acrobat, Mac Preview, Word and online tools all encrypt a file with a single password; anyone who has the file and that password can open it, and you cannot tell later whose copy leaked. To give each person their own password you either make a separate copy for each of them (ideally with their name watermarked on every page), encrypt for each person’s digital certificate, or stop sending files and send each person their own protected link. This guide compares the options and shows the steps.
Why one shared password fails
- It travels with the file. The password usually goes out in the next e-mail or message; forward both and the protection is gone.
- You cannot revoke one person. Changing the password means re-sending a new file to everyone else.
- A leak has no name on it. Ten people received the same file with the same password – any of them could have passed it on.
- The password stops opening, not copying. Once someone has opened it, they can save an unprotected copy, print or screenshot it. Permission restrictions (no print, no copy) depend on the reader app honouring them; the qpdf documentation puts it bluntly: there is “fundamentally no way” to stop an application from ignoring them.
Options compared
| Method | Own password per person? | Leak traceable to a person? | Revoke one person? | Cost |
|---|---|---|---|---|
| One encrypted PDF, one shared password (Acrobat, Preview, Word, online tools) | No | No | No | Free–Acrobat licence |
| A separate encrypted copy per recipient | Yes | Only if each copy is also watermarked | No – the file is already sent | Free, manual work |
| Watermarked copy per recipient (free tool) + a password on each copy | Yes | Yes – the e-mail is on every page, plus an invisible fingerprint | No | Free, up to 20 recipients per batch |
| Acrobat certificate encryption (recipients’ digital IDs) | Yes – each opens with their own certificate | No | No | Acrobat licence; recipients need digital IDs |
| One protected link per recipient (passcode or e-mail code) | Yes | Yes – opens are logged per link; watermark with the reader’s e-mail | Yes – disable or expire that link | Paid in most tools (HelpRange Pro $39/team/month) |
Option 1: a personalised, password-protected copy for each recipient (free)
Good for a handful of recipients who must have a file – e.g. a board pack or a price list sent as an attachment.
- Open the free PDF watermark tool, upload the PDF and paste the recipients’ e-mail addresses (up to 20 at a time, 10 MB per file). You get a ZIP with one copy per person, their e-mail printed across every page and an invisible code that our leak tracer can read back from a forwarded copy.
- Put each copy through the password-protect tool (AES-256) with a different password. You can also do this in Acrobat or Preview – see how to password-protect a PDF.
- Keep a list: recipient → file name → password. Use a password manager rather than a spreadsheet next to the files.
- Send each file to its recipient and the password through a different channel (phone, SMS, messenger) – never in the same e-mail.
What you get: nobody can open a copy meant for someone else without that person’s password, and a leaked copy shows whose it was. What you do not get: control after sending. A recipient who opened the file can save a decrypted copy, and you cannot take the file back.
Option 2: certificate encryption in Acrobat
Adobe Acrobat can encrypt a PDF for a list of recipients’ digital certificates (Protect a PDF → Encrypt with Certificate). Each recipient opens the same file with their own digital ID, and Adobe’s help pages describe setting printing and editing permissions per recipient. It works well inside organisations that already issue digital IDs. For most external recipients it is impractical – they have no certificate to give you – and Adobe warns that if the digital ID used for encryption is lost, the files encrypted with it cannot be opened again.
Option 3: one protected link per recipient
If the goal is “only this person can read it, I know when they did, and I can stop it later”, do not send the file at all. Upload it once and create a separate link for each recipient:
- Upload the PDF to HelpRange (or another document-sharing tool).
- Use Create link for specific user/group and give the link a label with the recipient’s name.
- Choose the gate: Passcode protect with a passcode only that person gets, or a Landing page (ask for e-mail) with Require Email Verification on, so the reader has to confirm their address with a code sent to it. In HelpRange the passcode belongs to the link – one link per recipient means one passcode per recipient.
- Turn off Allow download & print, turn on the watermark with the reader’s e-mail, and set an expiration date or a views limit if needed.
- Send each person their own link. You see who opened which link and which pages they read; if one person leaves the deal, disable just their link.
For more than a few people, a data room is easier than individual links: guests sign in with a one-time password sent to their own e-mail, so there are no passcodes to hand out at all.
Which to choose
- The recipient must keep a file (accountant, regulator, offline reading) → personalised watermarked copy with its own password.
- Everyone has a digital ID (same company or public sector) → Acrobat certificate encryption.
- Investors, buyers, clients, candidates → one protected link per person, so you can see activity and end access. See how to restrict access to a PDF.
FAQ
Can one PDF have different passwords for different users?
Not with ordinary password protection: the PDF standard gives a file one open password and one permissions (owner) password. Different people need different copies, certificate encryption, or separate links.
Is it safe to send the password in the same e-mail?
No. Anyone who gets the e-mail – including through forwarding – gets both. Send the password by phone, SMS or a messenger, or use links that check the reader’s e-mail instead.
Can I stop a recipient from sharing the PDF and the password?
Not once they have the file. You can make sharing traceable with a personal watermark, or keep the document online behind a per-person link that verifies the reader’s e-mail and can be switched off.
How do I know who leaked a PDF?
Only if each recipient got a distinguishable copy. Copies from our free watermark tool carry the recipient’s e-mail on every page and an invisible fingerprint that the PDF leak tracer reads back.
Are per-recipient passcodes free in HelpRange?
Passcodes, e-mail verification, expiry, download blocking and watermarks are in Pro ($39 per team per month, not per user) and in the 3-day trial; the Free plan gives tracked links with page-by-page analytics for 15 document views a month. See pricing.
Related: how to password-protect a PDF · make a PDF expire · track PDF opens · restrict access to a PDF.