Encryption that stays on your device
The strange ritual of most "protect PDF" sites is uploading a private document plus its new password to a stranger's server — the two things that should never travel together. Here the encryption itself runs in your browser: qpdf, the standard PDF toolkit, compiled to WebAssembly. The file and the password never cross the network, and you can switch off your Wi-Fi after the page loads to prove it.
The protection is real AES-256 — the same standard Acrobat applies — not a viewer-level nag. That cuts both ways: without the password the file is genuinely unreadable, so store the password somewhere safe. Need the reverse later? The Unlock PDF tool removes a password you know.