When you share a PDF, you're sending a file you no longer control. The recipient can print it, copy the text, edit it with the right software, or forward it to anyone. PDF permissions let you restrict some of those actions — without requiring a password to open the document. Here's what they actually do, where they fall short, and how to set them up.
Open Password vs. Permissions Password — The Key Distinction
PDF supports two separate password types, and it's important not to confuse them:
- Open password (user password) — required to open and view the document. Without it, the PDF is inaccessible. This is true security.
- Permissions password (owner password) — applied to restrict actions like printing or copying, but the document still opens freely. The content is visible; only certain operations are blocked.
Permissions restrictions can be applied alone (document opens freely but actions are restricted) or combined with an open password (document requires a password AND has action restrictions).
What PDF Permissions Can Restrict
| Permission | When Enabled | When Disabled |
|---|---|---|
| Printing | Recipient can print | Print option grayed out in PDF reader |
| High-quality printing | Full resolution printing allowed | Only low-resolution/draft printing |
| Copying text & images | Text/images can be selected and copied | Selection and copy are disabled |
| Editing | Content can be modified | Editing tools disabled |
| Form filling | Interactive form fields can be filled | Form fields are read-only |
| Commenting | Annotations and comments can be added | Annotation tools disabled |
| Page extraction | Pages can be extracted or rearranged | Page manipulation disabled |
How Strong Are Permissions Restrictions?
Here's the honest answer: permissions are enforced by the PDF reader software, not by the encryption itself. Legitimate PDF readers — Adobe Acrobat Reader, Foxit, Preview on Mac, browser PDF viewers — all respect permissions restrictions. But the restrictions can be bypassed by:
- Taking a screenshot of each page
- Using PDF tools that don't enforce permissions (some third-party tools ignore them)
- Printing to a virtual printer and saving as a new PDF
- Using PDF cracking tools designed specifically to remove permissions
This means permissions restrictions are best understood as a friction barrier, not a security wall. They stop casual misuse — someone who receives a document and absent-mindedly tries to copy and paste text or print it. They do not reliably stop a determined person who specifically wants to work around them.
When Permissions Are Sufficient
Permissions-only restrictions work well for:
- Internal documents — discouraging (not preventing) casual editing or printing by colleagues
- Read-only reports — ensuring recipients treat the document as final rather than editable
- Form distribution — allowing form filling while preventing other modifications
- Branded materials — reducing the likelihood of unauthorized editing of logos or design elements
When You Need an Open Password Instead
If the content itself must be protected — not just certain actions — you need an open password. Use an open password for:
- Confidential contracts, financial documents, or personal records
- Any document where viewing by unauthorized recipients is the primary risk
- Documents with legally sensitive content
See our guide on how to password protect a PDF for the full walkthrough on both password types.
How to Set PDF Permissions at PDFToolShack
- Open the Protect PDF tool
- Upload your PDF
- Set a permissions password (required to apply restrictions)
- Choose which permissions to restrict — printing, copying, editing, etc.
- Optionally add an open password as well for complete access control
- Click Protect and download the restricted PDF
- Permissions restrict actions (printing, copying, editing) without blocking viewing
- They are enforced by PDF reader software — not the underlying encryption
- Determined users can bypass permissions through screenshots, virtual printing, or third-party tools
- Permissions work well as friction barriers for casual misuse, not as hard security
- For true content protection, combine permissions with an open password
- PDFToolShack's Protect PDF tool applies both open passwords and permissions — free in your browser
Set PDF permissions and passwords — free.
Restrict printing, copying, and editing. Applied in your browser, file never leaves your device.