How to restrict PDF Editing without passwords

Restrict editing in PDF files permanently: protect PDFs without passwords

Why PDF tools that use passwords (such as Adobe Acrobat) are useless for restricting editing in PDF files, and the secure alternatives you can use to protect PDF files so that restrictions cannot be removed.

There are many tools that enable you to restrict PDF editing, the most popular one being Adobe Acrobat.  However, they all use passwords for protection which can be easily removed along with any restrictions you have applied.  In effect they are therefore useless.  In this article we cover how to restrict editing in PDF files using Adobe Acrobat – and show you how easily PDF restrictions can be removed, and Locklizard Safeguard as a secure and permanent solution.

  Introduction to PDF restrictions

The Portable Document Format (PDF) was designed by Adobe in the early 90s to be as universal as possible. At the time, there wasn’t much thought for PDF security – the Internet was in its infancy, and many of the complex attacks we see today hadn’t been developed.

By the mid-90s, however, it was clear that cybersecurity would be a major part of the technology landscape for years to come.  And though Adobe was quick to update its Acrobat application with printing, editing, and opening restrictions, it failed to address fundamental flaws in its protection – and frequently introduced new ones.  Many of these flaws still exist, which is why we’ll be showing you how to restrict editing in PDF files with both Adobe Acrobat and a more secure alternative: Locklizard Safeguard PDF Security.

  How does PDF restriction work?

PDF restriction works differently depending on the software you use to apply the restrictions, though there are some similarities.

Both Acrobat and Locklizard use encryption, for example, though with Acrobat the strength of that encryption depends on the version you have, meaning you have to choose between security and compatibility with older readers.  Adobe uses passwords to restrict PDF access and use, and Locklizard uses public key technology, licensing, secure and transparent key management, and DRM controls.  We will now cover how PDF restriction works in the two solutions.

  How does Adobe Acrobat PDF restriction work?

Adobe applies two different types of PDF restrictions, both of which use passwords as a key.

1. Restrict PDF open or view
   When you apply opening restrictions to a PDF with Adobe Acrobat, you encrypt the document with an “open password”, which acts as the key.  The idea is that without the password, a user will be unable to decrypt the PDF and view the contents of the document.  Due to the encryption, all they’ll see is random data.

In newer versions, this generally works quite well.  The problem, however, is that long passwords are hard to remember, and short passwords are easy to crack with PDF password removal software which can try hundreds of character combinations per second.  On top of this, passwords can easily be shared with outside parties, compromising the document.  The worst part is that publishers have no way of knowing whether the password has been shared or not, leaving them with no intel for future efforts.

• Restrict PDF editing and printing
  The second type of PDF restriction in Adobe Acrobat is the “permissions” password.  This password is used to protect restrictions you have applied (such as restricting editing and printing) from being removed – users have to know the password to change or remove restrictions.

  Unfortunately, Adobe PDF restrictions rely on an honour system – the effectiveness of the restrictions are based on whether other PDF Readers agree to honor them.  As a result, it’s next to useless.  Users can also upload Adobe password restricted PDF files to sites that will instantly remove restrictions for free.

So it is clear that if you apply restrictions with Acrobat or similar PDF tools to restrict opening, editing or printing, then you are just wasting your time.  We cover this in our blog How to Password Protect a PDF and why it is not secure which details the many ways you can remove PDF passwords and restrictions.

At best, an open password may stop hackers from viewing the PDF, but an authorized user (i.e. one you want to share the PDF with) can remove the open password and restrictions in seconds and freely share the unprotected PDF with others.  However, if you still want to use Adobe Acrobat to protect PDF files, then you can pretend to restrict editing by following the instructions below.

  How to restrict PDF editing and access in Adobe Acrobat

1. Open your PDF in Acrobat and press the “Protect” button in the sidebar.
   
2. Click “Protect Using Password” in the top bar.
   
3. Select “Viewing” or “Editing” and enter a secure password.
   

   Protecting a PDF with a password using Adobe Acrobat to restrict editing and opening

To avoid brute force attacks, you should use a strong password to protect PDF files – your password should be long, contain numbers and symbols and avoid words, phrases, names, and dates.  Once you have entered your password, click “Apply”.

  How does Locklizard PDF restriction work?

Locklizard PDF restrictions take a different and more secure route than Adobe Acrobat, using encryption with DRM controls, a secure PDF viewer, and a secure and transparent licensing and key management system to replace password protection.

It also provides much more functionality to control document use.  You can:

• Restrict editing
• Restrict copying and pasting
• Restrict printing or restrict the number of prints available.  If you want to allow printing then Locklizard automatically prevents printing to PDF and other unprotected file formats.
• Restrict sharing – protected PDF documents are locked to authorized devices so they cannot be shared
• Restrict page extraction
• Restrict saving to an unprotected PDF or other file formats
• Restrict access to a PDF after a certain date
• Restrict access to a PDF after a number of views or prints
• Restrict access to a PDF after a number of days use
• Add dynamic and permanent watermarks
• Block screen grabbing applications from taking screen shots
• Change PDF document restrictions after distribution

Protecting PDF files and adding restrictions to control use

You protect a PDF file using the PDF writer application, where any desired printing, anti-screenshotting, and expiry controls are selected.  Copying and editing restrictions are applied by default.  The document is encrypted with AES encryption and saved as a .pdc file.  This is an encrypted PDF file with DRM controls embedded in it.

To open encrypted PDF files (.pdc), the receiver must have two things:

1. the Locklizard Secure Viewer application
2. a license file that validates their identity

Once the user clicks on the license file to activate it, they can start viewing any protected PDF files that they have been authorized to use.

Safeguard Secure PDF Viewer with highlighted text.  Users can highlight text in restricted PDF files, add notes, search text, and print PDF files if authorized to do so.

Locklizard replaces the need for passwords, instead storing decryption keys (which are securely and transparently relayed from the licensing system) in an encrypted keystore that is locked to the user’s device.  The Secure Viewer enforces restrictions in a way that cannot be bypassed and there are no passwords for users to enter and share, or for applications to remove.  There are no options for users to save to unprotected formats, print to PDF or other file drivers, copy or edit content.  All of the information is decrypted in memory so that there are no temporary files created or available with unprotected content.

So Locklizard addresses the fundamental weaknesses of Adobe Acrobat restrictions by ensuring there is not easy way to crack or remove them.  PDF protection systems that rely on passwords provide weak security since they are vulnerable to simple attacks.

  How to restrict editing in a PDF with Locklizard

Every PDF that is protected by Locklizard is automatically made uneditable.  As a result, learning how to restrict editing in a PDF with the software doesn’t take long at all.  Here are the basic steps you need to follow:

1. Right-click on the PDF you want to restrict and select ‘Make Secure PDF’.
   

   Creating a protected PDF file

2. Select the restrictions you’d like to apply, including restricting access after a certain date, which can be found in the “Expiry & Validity” tab.  By default, editing, copying, and printing are disabled.
   

   Restrict editing on a PDF without passwords using Locklizard Safeguard PDF DRM

3. Press the Publish button to protect the PDF and apply restrictions.  On pressing the Publish button, Locklizard will output your protected PDF file, which can only be opened by users you give access to in the Safeguard Admin portal.  It can’t be edited, and content cannot be copied and pasted.  Printing is also blocked by default unless you specifically allow it.
4. Add new users, and/or select existing users you want to give access to your protected PDF files using the cloud-based Safeguard Admin System:
   

   Safeguard Admin System

5. Then distribute your protected PDF documents just like any other file – email it or let users download it from your web site or file sharing site.  It does not matter who downloads your protected PDF files (.PDC files) as only those authorized will be able to view them.

  How do I restrict sharing and printing of my PDF?

As well as being able to restrict editing in PDF files, you can use Locklizard to prevent printing, copying and pasting, and other methods of sharing, including screenshots.  This is something that Adobe Acrobat and other PDF password protection software is unable to do.

The process will also cover how to restrict material being copied from a PDF utilizing the PDF Writer application:

1. Right-click your PDF file in Windows File Explorer, and select the option ‘Make Secure PDF’.
2. Click on the “Printing and Viewing” tab and uncheck “Allow printing”.  If it is already unchecked then you don’t need to do anything – users will not be able to print your PDF documents.
3. In the “Environment Controls” tab, make sure “Disallow screen capture” is selected and optionally check “Add screen mask” to display a mask over your document content if focus is removed from the Secure Viewer window.  Disallowing screen capture will ensure that a user will be faced only with a black box should they try to screengrab PDF content regardless of the screen grabbing tools they have available.
4. If you want to restrict access to your PDF after a certain date then choose a date from the “Expiry & Validity” tab.
5. Press the “Publish” button at the bottom of the dialog.  On pressing ‘Publish’, an encrypted .pdc file is created, that only users you authorize in your Safeguard admin portal can access.  Unless specified otherwise, authorized users will be unable to copy and paste, screengrab, edit, print, or otherwise share the document.

Safeguard prevents users from sharing protected and restricted PDF files with others.  If an authorized user sends a protected PDF file to someone else, they will not be able to open it since they do not have the decryption key to do so.  The keystore (which holds decryption keys) will fail to open if it is copied to another computer since it is locked to the device the license file was activated on.  And as a license file can only be registered to one PC (unless you allow otherwise), they’ll be unable to share that, either.

  How to remove PDF restrictions from a password protected PDF

To demonstrate the flaws of PDF password protection, we’ll quickly show you how to remove PDF restrictions without a password and how to print a restricted PDF.  Due to the honour-based restrictions mentioned earlier, you can actually edit and print Adobe-protected PDFs through a variety of methods.

Before we start, we should note that while you can remove PDF restrictions without the permissions password, you will need the open password if one is applied.  Generally, you will know this since the document owner will have to share the open password with you so you can view the PDF.  However, if you don’t know it, you can use one of the many PDF password remover tools.

With that said, here’s how to remove PDF restrictions from password protected files.

  Remove PDF restrictions online

There are a number of tools available to remove PDF restrictions online.  Just Google ‘remove pdf restrictions online’.

With each tool it is just a simple matter of uploading the PDF file and then selecting the button to remove restrictions.  All processing is done in the cloud so you don’t have to download and install any software.

  Remove PDF restrictions with Google Drive

If you don’t want to upload your PDF files to an unknown third-party site to remove PDF restrictions online, then you can always use Google instead.

1. Drag and drop your document to Google Drive to upload it.

   Naturally, you’ll need a Google account to do this, so you’ll want to create one if you don’t have one already.

   

2. Double-click the PDF file to open the document preview and press the print icon in the top-right corner.

   If the preview doesn’t appear, it’s likely because your document is too large.  You’ll need to use a different method to remove its restrictions, such as a free online PDF password remover.

   

3. Press the print icon again in your browser’s PDF viewer.
   
4. How to remove PDF restrictions without a password

   To remove all PDF restrictions so you can edit, copy or print the PDF, select “Microsoft Print to PDF” from the printing dropdown and press the “Print” button.  You’ll be prompted to save a fresh PDF which will have all of the protections stripped.

   

5. How to print a restricted PDF

   If you just want to print the PDF, and don’t need to save it, you can select your printer directly from the print menu instead.  Click “Print” to print out the entire document without restrictions.

   

  PDF document restrictions that work

Whether you’re looking to restrict PDF editing, copying, screen shots, printing, or opening, the overarching message of this guide should be clear.

Password-based protection systems are not secure.  It’s trivial to remove PDF editing restrictions without a permissions password so there is no point in applying them to begin with.  They are as effective as adding a watermark that says “Do not edit, copy, or print this PDF document”.   Note that a watermark added with Adobe Acrobat or a similar PDF Editor can also be removed in a single action so it does not provide any protection either.

PDF DRM software like Locklizard will give you more security, more control, and the ability to stop sharing, piracy, and leaks.  As well as restricting PDF access and use without using useless passwords, you get the added benefit of permanent and dynamic watermarks, document expiry and revocation, device and location locking, tracking, and much more.

If you want to restrict PDF files without passwords then take a free 15 day trial of our PDF DRM software.