Security & Privacy
How to Restrict Editing in a PDF
Stop a PDF being casually altered — what permission settings actually achieve, and the three approaches that provide genuine assurance.
"Make this uneditable" is a reasonable request with an awkward answer: PDF permission settings ask software not to allow editing, and any software may decline the request.
What permission flags do
Setting an owner password writes flags into the document — no editing, no copying, no printing. Compliant readers grey out those functions. The file itself is not encrypted against the reader, and a tool that ignores the flags has complete access.
They are still worth setting. They stop accidental edits, they make intent explicit, and most people use compliant software. They are a fence, not a wall.
The three approaches that do more
Flatten the document
Merging form fields and annotations into the page removes the easy edit paths. Someone can still alter the page content with the right tool, but the casual "click and type" route is gone.
Sign it digitally
A digital signature does not prevent editing — it detects it. Any change breaks the cryptographic seal and the reader displays a warning. For contracts and filings this is the meaningful control: you cannot stop alteration, but you can make it undeniable.
Encrypt it
A user password stops anyone opening the document without the key. It does not restrict what a key holder does, but it does control who gets that far.
| Goal | Best control |
|---|---|
| Prevent accidental edits | Permission flags plus flattening |
| Prove the document is unaltered | Digital signature |
| Control who can read it | User password |
| Prevent all copying and forwarding | Not achievable with PDF alone |
What to do in practice
- 1Flatten form fields and annotations so nothing is casually editable.
- 2Apply permission restrictions to signal intent.
- 3Sign the document if alteration would matter.
- 4Encrypt it if only certain people should read it.
- 5Keep the authoritative original yourself — the strongest control of all.
Setting expectations with the recipient
The most effective control is frequently not technical. Saying plainly which version is authoritative, that changes must come back as comments rather than edits, and that you will circulate any revision yourself, resolves most of what restrictions are reaching for.
Combine it with a footer stating the version and date, so any copy in circulation identifies itself. When someone quotes a clause from an old draft, the version marker settles the question in one line.
Keeping the authoritative copy
Whatever protection you apply, the copy you hold is the one that matters. Keep the original somewhere you control, note what you sent and to whom, and treat every distributed copy as a snapshot rather than as the document. That framing is more robust than any flag in the file.
Do it now
Protect PDF
Add password protection to PDF. It runs in this browser tab — your file is not uploaded anywhere.
Open Protect PDFFrequently asked questions
Can I make a PDF completely uneditable?+
No. You can make editing inconvenient and detectable, which is what the available controls achieve.
Do permission passwords work?+
Compliant readers honour them; other software ignores them. Useful against accident, not against intent.
Is a digital signature better?+
For proving integrity, yes — it makes any change visible to the recipient.
Does converting to images stop editing?+
It makes text editing hard and destroys searchability, accessibility and file size. Rarely a good trade.