PDF Security Hub

PDFs support two levels of password protection:

User Password (Open Password):

• Required to open and view the document
• Without this password, the PDF appears completely encrypted
• Recommended for truly confidential documents

Owner Password (Permissions Password):

• Controls what actions are allowed (print, copy, edit)
• The PDF can be viewed but restricted actions are blocked
• Can be bypassed by some PDF tools (provides guidance, not security)

Encryption Algorithms:

Best Practices:

• Use AES-256 encryption for sensitive documents
• Choose strong passwords (12+ characters, mixed case, numbers, symbols)
• Store passwords securely (password manager recommended)
• Consider who needs access and share passwords securely

Different industries have specific requirements for document security:

PIPEDA (Canada)

• Personal Information Protection and Electronic Documents Act
• Requires "appropriate security safeguards" for personal data
• Local processing eliminates server-side data exposure risks
• Organizations must protect information throughout its lifecycle

HIPAA (US Healthcare)

• Protected Health Information (PHI) requires encryption
• Access controls and audit trails are mandatory
• Local processing avoids creating additional PHI copies on third-party servers

GDPR (European Union)

• Requires data minimization and purpose limitation
• Data subjects have right to erasure
• Local processing means no data transferred to or stored by third parties

Financial Regulations (SOX, GLBA)

• Require protection of non-public personal information
• Audit requirements for document handling
• Encryption and access controls mandatory

Legal Privilege

• Attorney-client privilege requires confidentiality
• Work product doctrine protections
• Uploading privileged documents to cloud services may waive privilege

Are your tools really 100% local?

Yes. We use WebAssembly technology to process PDFs entirely in your browser. Your files never leave your device, and we have no mechanism to receive or store your documents.

How can I verify you don't upload my files?

Open your browser's Developer Tools (F12), go to the Network tab, then use any of our tools. You'll see that no file data is transmitted to any server.

Is password-protected PDF encryption secure?

AES-256 encryption with a strong password is very secure. However, the "owner password" (permissions) can be bypassed by some tools. For true security, use the "user password" (open password).

Should I avoid all cloud PDF tools?

Not necessarily, but you should understand the risks. Cloud tools require uploading your files, which creates additional copies of your data. For sensitive documents, local-first tools are safer.

What if I need to share a secure PDF?

Encrypt the PDF with a strong password, then share the file through a secure channel. Communicate the password separately (e.g., via phone call, not the same email).

How do I securely delete a PDF?

Simply deleting a file doesn't remove it from your hard drive immediately. Use secure deletion tools, or encrypt the drive where sensitive files are stored.

Can PDFs contain viruses?

Yes, malicious PDFs can exploit vulnerabilities in PDF readers. Keep your PDF software updated and be cautious with PDFs from unknown sources.

What's the most secure way to redact information?

Use proper redaction tools that permanently remove content, then flatten the PDF. Simply drawing black boxes over text doesn't remove the underlying data.