How to Change PDF Security Settings after Sending

How to change PDF security settings retroactively to expire & limit distributed documents.

In this blog we’re going to discuss why the PDF solutions currently on the market aren’t able to modify the security of PDF files that have already been sent or distributed, and how you can use Safeguard PDF Security to change the expiry date, validity, number of prints, number of views, and more.

An all-to-often overlooked aspect of document security is that requirements are not always stationary or predictable.  Previously distributed PDFs can require stricter or milder security depending on the situation, their copyright status, legislation, and who is accessing them.  Without the ability to change security settings on the fly, organizations do not have protection across a document’s entire lifecycle.

Unfortunately, the vast majority of PDF protection solutions have not accounted for this.  Their security is based on Adobe Acrobat’s, which is little more than an afterthought.  While yes, you can take a document you have already protected, open it in Acrobat, and change the permissions, those changes won’t trickle down to the copies you have already distributed.  You would have to find and destroy every copy of the original document and then redistribute a new one with additional protections.  A near-impossible task.  Not that it really matters, since Adobe permissions can be trivially removed either way.

  PDF security choices

To be able to change PDF security settings for all users, the file must be regularly checked to ensure its settings still match and update them if necessary.  Various solutions can do this, but few do it well:

• Secure data/deal rooms

  These are essentially a secure space on a remote cloud server that outside or internal parties can log into via their browser to view confidential documents.  The problem is that while document permissions can typically be changed on the fly, they can only enforce so much due to the browser environment.  If printing is enabled, a browser cannot prevent printing to a PDF, for example, while browser plugins and the browser’s development mode can be utilized to bypass the controls in some cases.  Finally, access is typically controlled via a password, which can be passed on to other users, so it doesn’t prevent unauthorized sharing.

• Access control systems

  They work by controlling and monitoring the internal network and what users can do on their devices.  This is generally successful and can be modified through (somewhat tedious) policy management, but it’s not suitable if you send any documents to a network you don’t have complete control over.  Many documents these days end up on employees’ home PCs due to flexible work policies or with third-party contractors or partners, so it’s rapidly becoming outdated.

• Digital Rights Management

  DRM solutions such as Locklizard are a simple but effective way of applying controls to documents and modifying them on the fly.  The document checks its restrictions against a remote server either each time the user opens the PDF, every x days, or whenever an internet connection is available.  The newly updated permissions are then relayed and enforced by a bespoke secure viewer application that cannot be bypassed.

  Changing security settings on a PDF with Locklizard Safeguard

Locklizard Safeguard allows you to change security settings on a PDF after it has been sent or distributed, including:

• expiry date
• printing (whether it is allowed and the number of prints available)
• number of views available
• whether a user (or users) can access a document
• What countries and IP addresses a user can access the PDF from

Safeguard PDFs are automatically protected against copying/pasting and editing, and these controls cannot be modified after publication.  This is because we believe preventing modification and content extraction is key if you are to enforce all other controls (otherwise, the user can just copy to a new document to avoid them).

Changes to security options after publication are made through the Safeguard Admin system.  We’ll demonstrate how to implement the above-listed changes below.

   How to change expiry settings

Expiry is a good way to ensure that outdated documents do not remain in circulation or that sensitive information is not available for any longer than it needs to be.  If you changed your mind about when a document should expire, you can modify your expiry options in the admin portal.  Here’s how:

  Changing expiry settings for a specific document

Note that you can only change the expiry at the document level if you already have an expiry date applied that you’d like to change.  You can however expire document access for a specific user(s) even if you have not set an expiry date on the document by expiring their access to a document.

1. Open the ‘Documents’ tab in your portal and press the ‘More details arrow’ next to the document.
   
2. Press the date field next to ‘Expires:’ and change to it to your desired expiration date.
   
3. Press ‘Save’.
   

  Changing expiry settings for selected users of a specific document

You can change start and end dates for document expiry on a per-user level depending on how long they’re likely to need the document for.  This is useful if, for example, your accountant needs a financial report for a week before passing it on to somebody else for review.  Here’s how you change the dates for a specific document (or documents) for specific users in the admin portal:

1. Open the ‘Documents’ tab and press ‘More details’ arrow next to the document.
   
2.  Click on the ‘Grant or revoke access’ link in the more details panel.
   
3. Tick the users you’d like to modify and change the ‘With all checked’ dropdown to ‘Grant Limited Access’.
   
4. Change the ‘From’ and ‘Until’ dates and press ‘OK’.
   
5. Click ‘Save’ in the customer details panel.
   

  Changing when a user will lose access to all documents

You can make a user’s license to access all documents that you publish start and end on certain dates.  If you have an employee or contractor that will start after a certain date or leave at a set time, this setting can be of help.  You can also use it to prompt a period security review – expiring access after a certain period so you can reevaluate if the user still needs access.  Here’s how:

1. In the ‘Customers’ tab of your admin portal, press the ‘More details’ arrow next to the customer you’d like to adjust.
   
2. In the ‘Account Information’ section, change the start and end dates.
   
3. Press ‘Save’.
   
   Once the customer account has expired, access will now show up in red with the text ‘expired on xx-xx-xxxx’ under their name.

   How to change PDF security settings to revoke access

Safeguard PDF security allows you to remove viewing permissions on certain devices in the case the device is lost, stolen, damaged, or otherwise compromised.  You can also revoke the access of selected users to view a document and remove the ability to view it on all of their devices.

  Revoking access on certain devices

You can remove a device’s access in the ‘Customers’ tab of your admin portal:

1. Click the ‘Details’ arrow next to the customer whose device you’d like to revoke.
   
2. Press ‘Suspend or Activate’ next to the ‘Device:’ section under the ‘License information’ heading.
   
3. Tick the machine(s), change the ‘With all checked:’ dropdown to ‘Suspend’ and press ‘OK’.
   
4. Click ‘Save’ in the customer details panel.
   

  Revoking selected users’ access

Revoking access to a document for a user or multiple users can be achieved through the ‘Documents’ tab in the Admin portal.  Once it is open, follow these steps:

1. Press the ‘Details’ arrow next to the document and click ‘Grant or revoke access’.
   
2. Tick the users you’d like to revoke, change ‘With all checked’ to ‘Revoke Access’ and click ‘OK’.
   
3. Press ‘Save’ in the document details panel.
   

   How to Change PDF print settings

The number of prints a user has can be modified quickly and easily in the Safeguard Admin portal, regardless of whether print restrictions were set at the time of publication.  If you allow printing in Safeguard Writer but limit the number of prints to zero, then no one can print the document unless you grant them access by changing the number of prints available.  Here’s how:

1. Open the ‘Customer’ tab and press the ‘Details’ arrow next to a user’s name.
   
2. Under the ‘Manage Access’ section of the details panel, click ‘Change number of prints’.
   
3. Tick the documents you’d like to modify and change the ‘With all checked’ dropdown to ‘Change number of prints’.
   
4. Type your desired number in the ‘To:’ field and press ‘OK’.  To disable printing entirely, you can of course set the number of prints to 0.
   
5. Press ‘Save’.
   

   How to change PDF open or view settings

You can additionally make a PDF more secure by changing its number of opens or views for each user.  This is possible only if you limited the number of views available when you protected the document.

1. Open the ‘Customer’ tab and press the ‘Details’ arrow next to a user’s name.
   
2. Under the ‘Manage Access’ section of the details panel, click ‘Change number of views’.
   
3. Tick the documents you’d like to modify (only those with limited views are displayed here) and change the ‘With all checked’ dropdown to ‘Change number of views’.
   
4. Type your desired number in the ‘To:’ field and press ‘OK’.
   
5. Press ‘Save’ in the customer details panel.
   

   How to Restrict to IP and country location

To prevent secured PDF files from being accessed outside of the office or in certain countries, you can modify the IP addresses and countries your documents can be accessed from.  You can modify this information at any time to provide flexibility when users are travelling, or when sharing documents securely with third parties.

1. In the ‘Customers’ tab, click ‘Manage’, then the ‘Details’ arrow next to the user’s name.
   
2. Enter the desired IPs and countries in the ‘IP’ and ‘Country’ fields.
   
3. Press ‘Save’.
   

   Why choose Locklizard for your document security?

As we have demonstrated, Locklizard is far more effective than Adobe Acrobat, secure data rooms, and access control systems when it comes to PDF security.  It allows you to quickly and dynamically modify security settings after sending or distribution, enabling you to revoke PDF access and limit printing, viewing, control device and location access, and change expiry dates no matter the document’s location.  Security settings on a PDF can be changed after opening and updated controls are instantly enforced.

Keep your documents safe across their lifecycle by taking a 15-day free trial of our PDF DRM software.