PDF Security Guide — How to Protect Your Documents
Choose a protection method by the problem it addresses. Controlling opening access, communicating confidentiality, validating a signature and removing sensitive content are different tasks. PDFcraft does not supply one operation that proves all of them.
Do not treat these controls as interchangeable
| Concept | PDFcraft behavior | What it does not establish |
|---|---|---|
| Encryption and opening password | Protect applies AES-256 using a supplied password. | Perfect security or a strong password merely because encryption is enabled. |
| Permissions | Current Protect uses the same user/owner password and permits printing/extraction. | A read-only or copy-proof file. |
| Signatures/certification | No signing, identity-verification or signature-repair workflow is provided. | That a rewritten document retains a valid signature. |
| Watermark | Draws a visible text label. | Access control, permanence or evidence that content cannot be copied. |
| Page deletion | Removes selected visible pages and cleans supported navigation. | Secure sanitization of every recoverable object. |
| Unlocking | Decrypts supported input using a known password. | Cracking, recovering or guessing an unknown password. |
Start with the recipient and the original
Confirm what the recipient accepts before encrypting or rewriting a document. Keep an appropriate original, especially for signed files. If a viewer reports certification or signature restrictions, examine that status and ask the issuer for a suitable copy; do not use Unlock as a signature-repair method.
Choose a signing workflow before preparing the final copy
PDFcraft has no electronic-signature placement or certificate-based signing workflow. Ask whether the recipient requires a visible mark, a particular signing service or a certificate-based signature; these are not interchangeable requirements. Finalize the unsigned document before using the agreed signing method elsewhere. Reopen the returned file in an appropriate viewer, check its signature status and confirm recipient acceptance. A watermark or opening password is not a substitute for signing. Avoid later page edits unless their effect on the signature is understood; PDFcraft does not validate or guarantee signature preservation.
Separate preparation from distribution
Minimize what is necessary
Prepare only the content the recipient needs. Removing pages can reduce visible scope, but confidential-data purging requires a workflow designed and verified for sanitization.
Finish edits before protection
Complete ordering, overlays and size checks on an unencrypted copy. Page-copy tools reject AcroForm input and may reject other unsupported structures.
Protect and verify access
Choose a non-predictable password, confirm it, save the encrypted output and test opening it. The four-character minimum is not a strength assessment.
Check delivery access
Verify the address or sharing-link permissions. Where appropriate, provide the password through a separate channel; putting it beside the file offers little separation from whoever receives that message.
Local processing has a specific meaning
The document operations run in browser memory without a PDF-processing upload backend. Website requests still occur; qpdf WASM and PDF.js workers load remotely for the relevant tools. This is not a claim that every network request is absent, that memory is securely erased or that every device has been tested.
Evidence is narrower than a security certification
Controlled tests observed password acceptance/rejection and some parsed document features. Interactive forms, signature preservation and universal browser behavior are not established. A file that reopens successfully can still require checks for the particular property you rely on. Visible labels and rasterization do not make a document uneditable.
Continue with the appropriate tool
Frequently asked questions
Is a confidentiality watermark evidence that a file is encrypted?
No. It is visible content and can exist in an unencrypted document. Check opening access separately from labels.
Can Delete Pages certify that confidential information is gone?
No. PDFcraft does not provide a sanitization certificate or secure-redaction guarantee. Page visibility and complete data removal are separate concerns.