Toolerax logoToolerax
By ··7 min read

How to Restrict PDF Permissions

How to Restrict PDF Permissions

Sometimes you want a document read, but not reused. A price list a client should see and not paste into a spreadsheet. A draft contract that should not be edited before it comes back to you. A design proof you would rather nobody printed at home.

A password on the front door does not solve that — it stops people opening the file at all, which is the opposite of what you want. What you want is a PDF that opens freely for anyone and quietly refuses to be printed, copied or edited.

Two passwords, two completely different jobs

This is the part almost everybody gets confused about, and it is worth ninety seconds. A PDF can carry two separate passwords.

  • The user password (also called the open password) is the one that gates the document. Without it the file will not open at all. That is Protect PDF.
  • The owner password (also called the permissions password) does not gate opening at all. It locks a set of permission flags stored in the file — may this be printed, may text be extracted, may it be modified — so nobody can change those settings without it.

Restricting a PDF means setting an owner password and leaving the user password empty. The file opens instantly for everyone, and the actions you denied are greyed out in their reader.

Restrict a PDF, step by step

  1. Open the tool. Go to Restrict PDF Permissions and drop your file in.
  2. Set an owner password. This is required — without one, there is nothing stopping a recipient from simply turning the restrictions off again. Use something you will not need to remember daily, but store it somewhere you can find it.
  3. Choose what to deny. Printing, copying text and editing are three independent switches. Deny only what you actually care about.
  4. Apply and download. Our server rewrites the file with qpdf using 256-bit AES encryption and hands back the restricted PDF.

Open the result yourself before sending it. In most readers you will see Print greyed out, or a “Security” panel listing exactly which actions are not allowed.

What each switch actually does

Printing.Denying it removes Print from the reader’s menu. It also blocks the “print to PDF” route that would otherwise produce an unrestricted copy in one click, which is the more useful effect of the two.

Copying. Denying text extraction stops select-and-copy, and stops scripts and tools pulling the text out programmatically. Useful for price lists, quoted research, question papers and anything you do not want appearing verbatim elsewhere.

Modifying. Denying editing stops pages being reordered, deleted, annotated or filled in. This is the one to use for anything that has been signed or approved and should now travel unchanged.

How strong is this really?

Honest answer: it is a firm deterrent, not a vault. Permission flags are part of the PDF specification and mainstream readers — Acrobat, Preview, Chrome, Edge, the common mobile readers — respect them. For the ordinary case of a colleague or a client who would otherwise copy-paste without thinking, that is enough.

But the content itself is not hidden from someone determined. The document opens without a password, so the bytes are readable; specialist tools can strip permission-only protection, and nothing on earth stops a screenshot or a phone camera.

So pick by threat model:

  • Discourage casual reuse of a document that must stay easy to open → restrict permissions.
  • Keep the contents confidential from anyone without the password → Protect PDF with an open password, and share the password over a different channel than the file.
  • Both → set an open password and permissions together. Belt and braces for salary letters, medical reports and legal papers.

Good uses for permission-only protection

  • Quotations and price lists. Client reads them; competitors do not get a copy-pasteable version.
  • Approved final documents. Policies, certificates and signed agreements that must not be edited after approval.
  • Course material and question papers. Readable on screen, awkward to reprint and redistribute.
  • Design proofs and portfolios. Shown, not harvested.
  • Reports with licensed content. Where your own licence says the text may be read but not extracted.

Things worth knowing before you send it

  • Keep an unrestricted master copy. Restrict a duplicate, never your only version. If you lose the owner password, changing the settings later means rebuilding the file.
  • Already encrypted files fail. If the PDF has an open password, remove it first with Unlock PDF, then restrict.
  • Restrict last. Do your merging, splitting and compressing first — most PDF tools cannot process an encrypted file, including ours.
  • Accessibility. Denying text extraction can interfere with screen readers in some setups. If your audience may include assistive-technology users, deny printing and editing but leave copying allowed.

Is it private and free?

Applying encryption and permission flags needs a real PDF engine, so this tool runs on our secure server rather than in your browser. Your file and your password travel over an encrypted HTTPS connection, are processed in an isolated workspace, and are deleted automatically the moment the restricted PDF is sent back— nothing stored, logged or shared. Free: no watermark, no sign-up, no daily limit, files up to 100 MB.

For a genuinely sensitive document, a desktop tool that never leaves your machine remains the more cautious choice — that is true of any online service, ours included.

Frequently asked questions

Will recipients need a password to open it? No. That is the whole point. The owner password only locks the permission settings.

What if I forget the owner password? The file still opens and still obeys its restrictions — you simply cannot change them. Keep an unrestricted original and this never becomes a problem.

Can someone remove the restrictions? With the owner password, yes, legitimately. Without it, mainstream readers will not let them, though specialist tools can bypass permission-only protection. Treat it as a deterrent, not a guarantee.

Does it stop screenshots? No. Nothing does. If a document must never be seen by the wrong person, control who receives it in the first place.

Can I still restrict a scanned PDF? Yes — permissions apply to the file regardless of whether its pages are text or images.

Will the file get bigger? Marginally. Encryption adds a little overhead; the pages are untouched. If size matters, run Compress PDF first, then restrict.

Restrict your PDF now

Open Restrict PDF Permissions, set an owner password, choose what to block, and get a read-only document in seconds — free, watermark-free, and deleted right after.

Photo of S.R. Shohan

Written by

Healthcare Software Developer who builds hospital and laboratory systems in .NET — and the developer behind every tool on Toolerax. Each guide is written alongside the tool it explains and checked against how that tool actually behaves. More about S.R. Shohan

Tools mentioned in this article