September 14, 2026
How to Email a Confidential Report as One Password-Protected PDF
A Word report, two scanned appendices and a mail server that caps attachments. Five steps turn them into one marked, locked PDF you can send off tonight.
The quarterly report is finished in Word, all 28 pages of it. Finance has sent over the two appendices as PDFs: a scanned, signed bank reconciliation and the auditor's letter. The board wants the whole thing before Thursday's meeting, as one file, and it has to be clear to anyone who sees it that it is not for circulation.
Then you try to email a confidential report the obvious way and hit three walls at once. Three attachments instead of one. A 23 MB scan that your company mail server bounces, because it stops at 20 MB. And nothing stopping a board member from forwarding the lot to their accountant with a cheerful "FYI".
No single tool fixes all of that. Five do, in one browser session, and the intermediate files never land in your Downloads folder. Each result goes straight to the next tool, and the only thing you download is the finished, locked PDF.
The chain at a glance
- Turn the Word report into a PDF so everything is the same kind of file
- Put the report and both appendices into one document, in reading order
- Stamp every page as confidential
- Shrink the packet under the attachment limit
- Lock it with a password, last
Step 1: Get the report out of Word
Merging only understands PDFs, so the .docx has to change shape first. Drop it in and check Page size. It defaults to A4; if your board reads on US Letter, switch it to US Letter now, because the scanned appendices will sit next to these pages and a mismatch shows on every scroll.
With a single file, Combine into one PDF makes no difference, so leave it off. Hit Convert to PDF. A text-only report comes out small, usually a fraction of the size of the scans it is about to join.
Don't download it. Under Send to another tool, pick Merge PDFs and the converted report goes straight across.
Step 2: Put the packet in reading order
Your report arrives on its own, and a merge needs at least two files. Click Add more files and bring in the reconciliation scan and the auditor's letter from wherever finance sent them.
Drag them into the order a board member will read: report first, then the reconciliation, then the letter. Change Output filename from merged.pdf to something that survives an inbox, like q3-board-report.pdf.
If one of the appendices refuses to load with Could not read this PDF. It may be password-protected., that is finance being careful. Ask them for an unlocked copy, or unlock it first. Nothing downstream can work with a file it cannot open, and that rule matters again in step 5.
When the merged file is ready, Watermark PDF is in the suggestions under Send to another tool.
Step 3: Mark every page as confidential
Leave Watermark type on Text and replace the placeholder © Your Name with CONFIDENTIAL. Or, better, make it traceable: CONFIDENTIAL - Board copy - Q3. A forwarded page that names its audience is a lot more awkward to forward.
The defaults are built for a copyright mark, not a document stamp, so change four things:
- Color: the default is red. A mid grey prints cleanly and does not shout over the figures.
- Opacity: bring it down from 60% to around 25%, so the numbers underneath stay readable.
- Rotation: drag it to 45° for the familiar diagonal stamp.
- Size mode: keep % of width and push the width to about 70%, so the stamp crosses the page.
The preview shows page 1 only, but under Pages, All pages applies the mark to the appendices too. That is the point of doing this after the merge.
Click Apply watermark, then pick Compress PDF from the suggestions.
Step 4: Get it under the attachment limit
Choose Recommended. It is tuned for email and sharing. Screen gets smaller still, but it softens small print, and a reconciliation is nothing but small print. Print barely moves the number.
Know what this step actually does before you run it. The compressor redraws every page as an image. That is why a 23 MB scan shrinks so much. It also means the text in the finished file is no longer selectable or searchable. If you drop in a report that has no scans and is already small, the tool notices it could not beat the original and hands the original back, tagged No reduction.
So read the size line on the result screen, shown as original size → new size. If the packet was already under your limit before this step and your board likes to search for "EBITDA", you can skip compression and go straight to step 5. When a scan is the heavy part, as here, the trade is worth it.
Protect PDF is in the suggestions. Pick it.
Step 5: Lock it
Type the password into Password and again into Confirm password. The strength indicator turns Strong at twelve or more characters that mix at least three of: lowercase, uppercase, digits and symbols. Four random words, one of them capitalised, with a number between two of them, get there and are still easy to read out over the phone.
You will see Show permissions, with switches for printing, copying and editing. Leave them alone. Anyone who opens the file with the password can lift those restrictions, and many readers ignore them anyway. The password is the lock.
Hit Protect PDFs, and now download. The result screen warns you there is no way to recover a forgotten password, and it means it. Keep a copy of the unprotected version somewhere safe on your own machine if you might need to edit it later.
Send the PDF by email and the password by a different route: a text message, a call, the board's chat channel. A password in the same email as the attachment is just a longer filename.
Why this order
Protect goes last, always. An encrypted PDF is a closed box to every tool in this chain. Merge reports it cannot read the file, the watermark tool cannot draw on it, and the compressor cannot render its pages. Lock it any earlier and the rest of the chain stops.
Merge before you watermark. The appendices came from finance with no marking at all. Watermarking the merged file stamps all of their pages in one pass, with one set of settings, so every page wears the same mark at the same angle.
Watermark before you compress. This is the one nobody thinks about. The watermark tool adds the stamp as a separate layer on each page, and a determined recipient with a PDF editor can select it and delete it. The compressor then redraws each page as a single image, which bakes the stamp into the page itself. After step 4 the mark is not something you delete. It is part of the picture of the page.
Compress once, on the finished packet. The 20 MB limit applies to the attachment, not to its parts. Compressing the scan alone and then merging would leave you measuring the wrong file, and running the compressor twice redraws pages that were already redrawn once.
What you end up with
One PDF, named for what it is, with the report and both appendices in reading order, a grey diagonal mark on every page, comfortably under your mail server's limit, and unreadable without a password that travelled separately. The first time takes about ten minutes, most of it spent on watermark settings. Next quarter it takes three.
Ready to start? Open Word to PDF →