Your protected PDF still lets people print it

You password-protected the dealer price list before mailing it to four distributors. Three weeks later a competitor is quoting off your slab rates, in your table order, down to the same footnote.

The file was encrypted. Nobody broke it. One of the four opened it with the password you gave them, hit Ctrl+P, and printed to PDF — and the printed copy carried no password at all.

That is not a flaw in the encryption. It is what the permission set on a protected PDF actually says, and it is worth knowing before you rely on it.

What gets applied when you lock a PDF

PDF Password Protect does two separate things in one step.

The first is the part everyone understands: an open password, applied with AES-128 standard PDF encryption. Without it, the file will not open in Adobe Reader, in Chrome's built-in viewer, in Preview on a Mac, or in the ordinary Android readers. The bytes are genuinely encrypted; there is nothing to read.

The second is a permissions set, written into the same encryption dictionary and applied at the same time. Almost nobody sees this, because there is no screen for it. Here is what it says:

Why printing is on

Because a document that cannot be printed is useless in half the situations you would send one. An invoice a shopkeeper cannot print for the file. A ticket. An application form that has to be signed. A quotation the site engineer wants on paper. Blocking printing turns a locked PDF into an object of frustration rather than a secure document.

There is also a plainer reason. Print blocking is the least enforceable restriction in the entire set. Every operating system ships with a print-to-PDF driver. Every phone has a camera. Turning the flag off buys you almost nothing and costs you the legitimate uses.

Accessibility is on for a similar reason with a sharper edge: switching it off means a blind colleague running a screen reader cannot use the document at all. That is a real cost for a restriction that stops nobody.

Form filling is on and editing is off, which sounds contradictory until you separate the two. Filling a field is using the document as intended. Editing is changing what the document says.

The part you have to be honest with yourself about

Here is the distinction that decides whether password protection does what you think it does.

The open password is security. The permission flags are etiquette.

The encryption is real. Without the password, the content is not accessible, full stop. But the permission flags — no copying, no editing, no annotating — are not enforced by mathematics. They are instructions carried inside the file, and viewers honour them because they are written to. Software that chooses not to honour them simply does not.

So once somebody has the password, treat the restrictions as friction rather than a wall:

• Printing is allowed outright, and a print-to-PDF produces a clean, unrestricted copy of your document.
• Copy is blocked, but a screenshot is not, and running that screenshot through OCR turns the picture back into selectable text in under a minute.
• Editing is blocked, but retyping is not. A price list is a table. Tables get retyped.

None of this makes the protection worthless. It makes it precise. It stops the wrong person opening the file. It does not control what the right person does after they have opened it.

One password, not two

Some PDF workflows distinguish between an owner password, which controls the restrictions, and a user password, which controls opening. In theory you can set an owner password only: the file opens for anyone, but editing and copying stay blocked.

This tool does not offer that split. It sets the open password to what you typed and derives the owner password from it internally, so there is exactly one password and it is the one that opens the document. If your actual requirement is "anyone can read it, nobody can edit it", password protection is not the mechanism you want.

What to do when the leak actually matters

Three approaches that work better than tightening flags nobody enforces.

Send less. The distributor who needs the slab rates for one product category does not need the whole book. Pull out only the relevant pages with Extract PDF Pages and protect that. A four-page file cannot leak forty pages.

Mark each copy differently. This is the underrated one. A visible watermark carrying the recipient's name across every page survives printing, survives screenshotting, and survives being retyped badly. Watermark PDF applies custom text across all or selected pages with control over colour, font size, opacity and position — diagonal, centred or along the bottom. At around 15% opacity it stays readable underneath while being impossible to miss.

That does not prevent the leak. It tells you whose copy leaked, which changes behaviour in a way that no permission flag ever has.

Mark the intent. For documents that are being circulated internally rather than guarded, Stamp PDF drops a proper seal — APPROVED, CONFIDENTIAL, a date, a signature image — positioned where you drag it and applied across a page range. It is a statement about the document's status rather than a lock on it, and for internal paperwork that is usually what was actually needed.

Both of those run entirely in your browser, unlike the encryption step, which needs a server to apply standard PDF encryption and holds the file in memory only for as long as that takes.

Where password protection genuinely earns its place

Not as a leash on a recipient. As a lock on a file at rest and in transit:

• A salary slip going out on an email thread where the wrong person might be copied.
• Bank statements and tax paperwork sitting in a cloud drive that syncs to three devices.
• A signed agreement on a laptop that travels.
• Documents on a shared office machine where four people know the Windows login.
• Anything you are handing over on a pen drive.

In every one of those, the threat is casual access by someone who should not have it, and an open password answers that completely.

Taking it off again

When it is your own file and the restrictions have become the nuisance — you want to merge it into a larger document, extract its text, or stop typing the password four times a day — PDF Unlock removes the encryption and hands back an ordinary PDF. It runs in your browser and needs the current password, because it decrypts rather than cracks.

That is also the reason to keep the unprotected original somewhere safe. The password is never stored anywhere in the process, so if it is gone, it is gone. The rest of the security and page-handling tools sit together on the PDF tools page.