AES-128 vs AES-256: Which Protects Your PDF?
Drop your PDF here or click to browse
Supports PDF files up to 10MB
Password-protect your PDF in seconds — no registration, no uploads
You're choosing between AES-128 and AES-256 encryption for a PDF you need to protect. Some tools put AES-256 behind a paid tier and call it "stronger security." You want to know whether the difference between AES-128 vs AES-256 actually matters for a contract, a tax return, or a client file — and what the tool you're already using applies by default.
Here's the honest breakdown.
Protect your PDF with AES encryption — free
No account. Files stay in your browser.
Protect PDF Now — Free →How to password-protect your PDF
- Go to signmypdf.io/protect and upload your PDF.
- Enter a password for the document.
- Click Protect — AES-128 encryption is applied in your browser.
- Download the protected file.
- Send the password separately from the file, not in the same email.
SignMyPDF applies AES-128 automatically. That's the right baseline for what follows.
[IMAGE: SignMyPDF protect page with a PDF uploaded and a password field filled in before clicking the Protect button]
What AES-128 vs AES-256 actually means
AES stands for Advanced Encryption Standard — the algorithm used by most PDF readers for password protection. The number indicates the key length in bits.
Neither has ever been cracked by brute force. A 128-bit key has 2^128 possible values. Exhausting all of them with current and projected computing power is effectively impossible. A 256-bit key is vastly larger — 340 undecillion times more possible combinations — but for practical document security, both are unbreakable by computational attack.
The one area where AES-256 holds a theoretical advantage is long-term quantum computing resistance. Some cryptographers expect that sufficiently powerful quantum hardware could weaken AES-128 more than AES-256 over a long time horizon. For contracts, tax returns, and client records you're protecting today, this distinction is academic.
What actually determines whether your protected PDF is secure is the password, not the key length. Whether a password-protected PDF is actually secure explains why: a short or predictable password on a 256-bit file is far weaker than a strong passphrase on a 128-bit one. The encryption algorithm protects against computational attack; a weak password defeats that protection at the human level.
[IMAGE: Comparison showing AES-128 with a strong password versus AES-256 with a weak password — the weak password loses regardless of key length]
Why most PDF protection tools make this confusing
- AES-256 marketed as a premium feature. Upselling key length implies AES-128 is inadequate — it isn't for everyday documents. That framing drives upgrades, not security.
- Free tiers don't disclose which standard they apply. You protect a sensitive file without knowing what encryption you got.
- Overcomplicated settings. Key-size toggles, permission checkboxes, and certificate options overwhelm users who just need a password on a document.
- Server-side processing. The PDF is uploaded to an external server for encryption — which contradicts the point of protecting sensitive content in the first place.
Why SignMyPDF is straightforward
- Free, no registration, no paywall at download. AES-128 encryption applied automatically.
- Files processed in browser — the PDF never leaves your device during encryption.
- No account, no certificate management. Upload, set a password, download.
- Compatible with every PDF reader: Adobe, Preview, Chrome, and mobile apps on any platform.
The biggest mistake people make when protecting PDFs isn't choosing 128 over 256 — it's sending the password in the same email as the file. The algorithm matters far less than that habit.
FAQ
Does SignMyPDF use AES-128 or AES-256? AES-128. It's the standard supported by the PDF specification's security handler and is what most PDF readers apply when they add password protection. It's effectively unbreakable by brute force under current and foreseeable computing conditions.
Should I pay extra for a tool that offers AES-256 on PDFs? Not for everyday documents. The practical difference between AES-128 and AES-256 is negligible for contracts, tax records, and business files. A tool charging more for 256-bit encryption is selling a larger number, not meaningfully stronger protection against real-world threats.
What actually determines whether my protected PDF is secure? Three things: the strength of your password, how you share it (never in the same message as the file), and whether the tool encrypts in your browser or uploads your PDF to a server. Comparing password-protected PDFs against encrypted email covers when each approach is the right call for a sensitive document.
Password-protect your PDF — free, no account
AES encryption in your browser. No watermark, no sign-up.
Protect PDF Now — Free →