Time-Locked PDF — Password + Auto-Expiry

Lock a PDF behind a password that stops working after a date you choose — 100% in your browser. Your file is never uploaded. ⏳🔐

Time-Locked PDF

Password + self-expiring viewer

Drop a PDF here or click to choose
Up to 20 MB · encrypted locally, never uploaded

How to Create a Time-Locked PDF

  1. Add your PDF — it's read and encrypted on your device, never uploaded.
  2. Set a password and expiry — pick how long the file should stay openable, and an optional expiry message.
  3. Download the .html file and send it. The recipient opens it in any browser, enters the password, and it locks itself after your deadline.
🔐

Real password encryption

AES-GCM with PBKDF2 key stretching — without the password the document genuinely cannot be opened.

Self-expiring viewer

After your chosen date the built-in viewer refuses to unlock and shows your expiry message instead.

🕵️

100% private, no upload

Encryption happens in your browser. Your PDF and password are never sent to any server.

About the Time-Locked PDF Tool

Want to password-protect a PDF with an expiration date — a quote that should lapse in 30 days, a draft contract that shouldn't circulate forever, or a sensitive document you only want readable this week? This free tool wraps your PDF in a self-expiring, password-protected viewer, right on your device. You set the password and the deadline; it produces one self-contained file that anyone can open in a browser, no software required.

The protection has two layers. First, your PDF is encrypted with AES-GCM using a key stretched from your password with PBKDF2 — so without the correct password, the bytes are unrecoverable. That part is genuine cryptography. Second, the built-in viewer checks the current time against your expiry and, once that moment passes, stops unlocking and shows your custom message instead.

It's important to be honest about what time-based expiry can and cannot do. A file, once downloaded, lives on the recipient's device — so the expiry is enforced by the viewer and the device clock. That makes it a strong, practical deterrent for normal recipients, but a determined technical user could change their clock or tamper with the file. For guaranteed, audited expiry you need a server-based document-rights system. Use this tool for everyday "please don't keep this forever" situations, not for material where a breach would be catastrophic.

Everything runs 100% in your browser — nothing is uploaded, stored, or seen by anyone. It works on Windows, Mac, iPhone, iPad, Android and Chromebook. Need plain protection instead? Use our Protect & Unlock PDF tool for a standard password that opens in Acrobat, or Sign & Fill PDF to sign before you lock.

Time-Locked PDF FAQ

The tool wraps your PDF in a small self-contained HTML viewer. Your PDF is encrypted with the password (AES-GCM), and the viewer checks the current date against the expiry you set. After that moment it refuses to unlock and shows your expiry message instead.
Yes. The PDF bytes are encrypted with AES-GCM using a key stretched from your password with PBKDF2. Without the correct password the document genuinely cannot be opened — that part is strong, standard cryptography.
No, and we say so plainly. Once a file is downloaded it lives on the recipient’s device, so the expiry is enforced by the viewer and the device clock. It is a strong deterrent for normal recipients, but a determined technical user could change their clock or tamper with the file. For guaranteed, audited expiry you need a server-based document-rights system.
A single .html file (not a .pdf). They open it in any modern browser, enter the password, and view or download the PDF while it is still valid. No software or account is needed.
No. Everything — reading, encrypting and building the viewer — happens 100% in your browser. Your PDF and password are never sent to any server.
The encrypted PDF is embedded inside the HTML viewer so it works offline as one file. Keeping it under 20 MB keeps that file a sensible size to email and open quickly.
Browsers only allow the built-in encryption (Web Crypto) on secure pages, so the generator runs on the https site. The recipient opening the downloaded file from their device is also a secure context, so decryption works there too.

More Utilities