PDF Encryption and Permissions

Definition

A PDF can be encrypted with two passwords. The user password (often empty) controls who can open the file; the owner password controls permissions — whether it can be printed, copied, or edited. Encryption is a lock on the door: it governs access, and the content is still inside. It is not redaction, and a file whose permissions forbid copying can still have its text read by tools that ignore permission flags.

Example

A shipment manifest password-protected so a carrier can open it but cannot edit the pages. When the manifest’s recipient needs the shipment data in a spreadsheet, the password is supplied and the content is read — the permissions setting never removed the data, it only framed who was supposed to use it.

In the PDFLean tools

• password-protect a PDF — applies the encryption
• unlock a PDF — removes it for files you are entitled to open
• check PDF permissions and check if a PDF is encrypted — inspect what a file actually enforces

Related reading

• Redaction — the operation that actually removes content
• PDF Metadata — what encryption leaves untouched
• PDFLean’s Privacy Model — how encryption applies to files in transit and at rest