How to email a payslip privately

A payslip can include your address, employee number, pay, and tax details. If you must send it by email, protect the PDF with an opening password and give that password to the recipient through a separate, verified channel. If your employer offers a secure payroll portal, use that instead when possible.

A password-protected attachment helps keep the document contents private if the email is forwarded or accessed by someone else. It does not hide the email subject, sender, recipient, or other message details, and it cannot stop the recipient from sharing the payslip after opening it.

Protect the payslip PDF before attaching it

1. Open the protection tool. Use Protect PDF and select the payslip PDF from your device. The file is processed in your browser and is not uploaded.
2. Add an opening password. Choose a password that is difficult to guess and not reused on another account or document. A few unrelated words with separators can be easier to remember than a short, predictable password.
3. Keep the password private. Do not use your birthday, employee number, address, or another detail printed on the payslip. Someone who sees the document could guess those.
4. Save the protected copy. Keep the original separate, then give the protected file a clear, neutral name such as payslip.pdf. Avoid putting your full name, salary, or account details in the filename.
5. Check the copy before sending. Open the saved PDF and enter the password to confirm that it works and that the pages are readable. Make sure you attach the protected copy, not the original.
6. Send the password separately. Use a different channel, such as a phone number you have already verified with the recipient. Do not put the password in the same email or send it in a reply to that email.

The Protect PDF tool uses AES-256 encryption for the password protection. The tool can also limit printing, copying, or editing, but those permissions are not a substitute for an opening password when your goal is to keep the contents private.

Keep the email itself discreet

Use the recipient's exact address, and check it carefully before sending. If the address came from a new message or an unexpected request, confirm it through a contact method you already trust. A convincing display name does not prove that an email address belongs to the right person.

• Use a neutral subject. Write something like Requested document, not your salary, employee number, or other personal details.
• Keep the message brief. Say that the protected PDF is attached and that you will share its password separately. Do not repeat sensitive information from the payslip in the email body.
• Check the attachment. Confirm that the filename is the protected copy and that the recipient field contains only the intended person. Be careful with autofill and reply-all.
• Send the password out of band. Contact the recipient using a phone number or other channel you have verified before. If you are unsure who controls that channel, verify their identity first.

Sending the password in a second email to the same mailbox is not meaningfully separate if someone else can access that mailbox too. A separate, verified channel reduces the chance that one compromised email account exposes both the attachment and its password.

Choose the right level of protection

Use a company portal when one is available

An employer's payroll or document portal is usually the best route when it is provided for payslips. It avoids sending the file as an ordinary email attachment and may give the company a controlled way to receive documents. Follow your employer's instructions, especially if it requires a particular upload method or file format.

Use an opening password for an email attachment

If email is required, an opening password encrypts the PDF contents. The recipient will need the password to view the document. Keep the password unique, share it separately, and do not send an unprotected copy as a backup unless the recipient has specifically requested one through a trusted process.

Do not rely on printing or copying restrictions

Permissions that restrict printing, copying, or editing can discourage casual changes, but they do not prevent someone from photographing a screen, taking a screenshot, or sharing information they can read. Use an opening password for access control, and share the file only with someone who should see it.

What the password does not protect

Password protection protects the PDF contents while the file is closed. It does not secure the recipient's email account, computer, or saved copy. Someone who knows the password can open the file, and the recipient can forward the password or document. Choose a recipient you trust and send only the information they need.

The email service may retain the encrypted attachment, and people who can access the mailbox may still see who sent the email, who received it, and what the subject says. Keep those details neutral. Also check that your device is not syncing an unprotected original to a shared folder or cloud account.

If the recipient cannot open the PDF

The password is rejected

Check whether you sent the password exactly as created, including capitalization, spaces, and punctuation. Share it again through the verified separate channel. If it still fails, make a new protected copy with a different password and tell the recipient which password applies to that copy.

The PDF opens without asking for a password

Stop before sending it. You may have attached the original rather than the protected copy. Reopen the file you plan to send and confirm that it prompts for the password before showing the payslip.

The recipient cannot view the document after entering the password

Ask them to save the attachment and open it in a current PDF reader. If the document still will not open, create and test a new protected copy before sending it again. Do not remove the password and email an unprotected version just to work around an opening problem.

If you forget the password, the protection tool cannot find or recover it. Keep a secure record of the password until the recipient confirms they received and opened the document, then delete the record if you no longer need it.