Security & Privacy
How to Share a PDF Securely
Sending a confidential document by email is riskier than most people assume. Practical steps that fit real workflows, ranked by how much they help.
Most confidential documents leak through ordinary carelessness rather than attack: sent to the wrong address, forwarded onward, left in an inbox for a decade, or handed to a website in order to be compressed.
Before you send anything
- 1Send only what is needed — extract the relevant pages rather than the whole pack.
- 2Redact anything the recipient should not see, and verify it.
- 3Strip the metadata, which routinely names the author and the file path.
- 4Check the filename does not itself disclose something.
- 5Check the recipient address character by character. Autocomplete is the leading cause of misdirected documents.
Choosing how to send it
| Method | Protection | Practicality |
|---|---|---|
| Plain email attachment | Very little | Universal |
| Password-protected PDF by email | Good, if the password goes separately | Universal |
| Cloud link to a named person | Good — revocable, and access is logged | Very good |
| Cloud link with "anyone with the link" | Weak — the link is the credential | Very good |
| Secure file transfer service | Strong | Needs the recipient to cooperate |
| Encrypted archive | Good | Awkward on phones |
The advantage of a revocable link
An attachment is permanent — once sent, it exists in someone else's mailbox forever and is beyond your reach. A link shared with a named account can be revoked, expired, and audited, and if you sent it to the wrong person you can withdraw access before it is opened.
The caveat is the "anyone with the link" setting, which turns the URL into the password and is regularly indexed, forwarded and pasted into tickets.
Preparing the document itself
If you are compressing, converting or redacting before sending, do it locally. Uploading a confidential file to a third-party tool in order to prepare it for secure delivery undoes the point of the exercise — and it is easy to check whether a tool uploads.
After it has gone
- Note what you sent, to whom, and when.
- Set an expiry on links rather than leaving them open indefinitely.
- Review shared-link permissions periodically; they accumulate.
- If you send to the wrong person, revoke immediately and say so — speed matters more than embarrassment.
Do it now
Protect PDF
Add password protection to PDF. It runs in this browser tab — your file is not uploaded anywhere.
Open Protect PDFFrequently asked questions
Is emailing a PDF secure?+
Transport is usually encrypted, but the file sits readable in mailboxes at both ends indefinitely. For confidential material, protect the file or use a link.
Password protection or a cloud link?+
A link to a named person is stronger, because access can be revoked and audited. A password is more universal.
How should I send the password?+
By a different channel — text or phone. Never in the same email as the file.
Is a link with "anyone can view" safe?+
Only as safe as the link, which will be forwarded. Restrict to named accounts for anything sensitive.