At the time of this writing, both
256-bit AES and
128-bit AES encryption are considered secure.
256-bit AES is stronger and should be preferred. However,
256-bit AES requires PDF version 1.7 whereas
128-bit AES requires just 1.6. Learn more about PDF encryption here.
Passwords should be 7 characters or more using a combination of numbers, characters and symbols.