pdf file security

PDF File Security

PDF File Security – secure PDF files to stop sharing, copying, printing

Protect IP

Secure PDF files no matter where they reside:

Stop unauthorized access
Stop sharing and distribution
Strong US Gov strength encryption, DRM and licensing controls

Restrict Use

Set Expiry

Revoke Access

Watermark

Log Use

Comply Law

Benefits

Secure PDFs with Safeguard PDF security

How to secure a PDF file

Securing PDF files with Safeguard is very simple. Select your PDFs then the ‘Make Secure PDF’ menu option.

In Safeguard Secure PDF Writer, choose the PDF security controls:

Stop printing, allow printing or limit the number of prints.
Add dynamic watermarks to viewed and or printed pages. Dynamic variables replace actual user and system data when the document is viewed/printed so you only have to protect the document once for all users.
Make the PDF expire on a specific date, after a number of views, after a number of prints, or after a number of days from opening.
Stop screen grabbing applications (even from remote connections), prevent use of Windows print screen.
Log document views and prints.

Safeguard’s default PDF security

Stops users editing, copying and pasting text and images
Locks PDF files to specific devices so they cannot be shared
Revoke PDFs at any time regardless of where they reside
There are no passwords for users to enter, manage, or remove

Securing PDFs with Safeguard is more secure than Adobe password protection and provides total PDF security regardless of where your PDF files reside.

DID YOU KNOW?

You should NOT use passwords to secure PDFs

users can share passwords and thus ‘secure’ PDFs with others
passwords are easily removed with password recovery software
Adobe PDF permissions (stop copy, print etc.) can be removed without using any tools
once the user has the password they can unprotect the PDF and do what they like with it

“We purchased Safeguard PDF Security to secure PDF files and control access and un-authorised use. We now have greater control on who/how our material is accessed when distributed around the world, including limiting the number of prints and using expiry controls to manage subscriptions.

Safeguard PDF Security does what it says – it provides a manageable, cost effective uncomplicated way to secure PDF documents, your investment.

We would recommend Locklizard to other companies.”

PDF security & methods used to secure PDF documents

What is PDF file security?

While PDF encryption is used to secure PDF documents so they can be securely sent to others, you may need to enforce other controls over the use of your documents to prevent authorized users using documents inappropriately. For example, you may want to stop users copying text or printing PDFs.

So PDF file security is delivered by of a combination of different features – encryption, controls (digital rights management controls), etc. – that are relevant to the overall document controls you wish to achieve.

PDF file security can consist of the following components:

PDF encryption
PDF restrictions (Adobe PDF permissions)
PDF digital rights management controls
PDF password protection
Public Key Technology or PKI
Licensing controls
Proprietary security mechanisms

The amount of security you achieve depends upon the effectiveness of the controls you implement.

Underpinning the controls is the strength of the PDF encryption and the implementation method. If it is weak or can easily be subverted then it adds no value.

PDF Security components

PDF Encryption
Encryption is used to prevent unauthorized users from accessing your secure PDF files.
- Once a user has the decryption key they can unprotect the PDF and do what they like with it unless DRM controls have also been used
- If a PDF has been encrypted with a password then that may be easily removed with password recovery programs
- The most commonly used secure encryption algorithm for PDF encryption is AES 256 bit (US Government strength)
- PDF copy protection is implemented through the use of PDF encryption. It is almost impossible to prevent people from copying files – after all, everything on a computer has been copied in order to use it. But if a file is encrypted, even if it is copied, if the recipient does not know what the decryption key is then they cannot use the file even though they have a copy.
PDF Restrictions
PDF Restrictions give you limited controls over what an authorized user can do with a document. In Adobe Acrobat they are called PDF Permissions and enable you to restrict editing, printing, or copying text.

However they do not provide any actual security:
- Adobe PDF restrictions are easily removed due to a weak implementation method based on the ‘honor system’ – see How the Adobe PDF Security Handler works
- Password remover programs can remove PDF restrictions in seconds regardless of how strong the password used to secure the PDF file
- They can be bypassed easily using a Mac – see Bypassing Adobe Security controls on the Mac
- Third party PDF readers do not have to honor these controls so they may not be applied
- Google Drive also removes Adobe permissions – see Print secured PDF files & remove restrictions passwords
There is no point in applying PDF security controls that users can readily bypass.
DRM controls
DRM controls enforce what an authorized user can do with a document. These enable you to:
- Stop copying and pasting
- Stop editing / modifying
- Stop printing
- Stop screen grabbing
- Expire PDF files after a certain length of time
- Revoke PDF files no matter where they reside
Unlike Adobe permissions these cannot be removed.

PDF digital rights management is discussed in more detail here – PDF digital rights management.
PDF Password Protection
To encrypt a PDF you need to use a key. The most common method is using a password as the key. However, PDF Password Protection has serious issues and is not recommended if you want to secure PDF files from unauthorized use and distribution.
- Passwords can be shared around – they have to be sent in readable form so users can copy and forward them to anyone
- The password interface has to be exposed so can be readily attacked by password recovery programs – see Removing PDF Passwords
- Strong passwords are difficult to set up and use so weak passwords are normally implemented instead
- You have to manage a list of passwords if you use different passwords for each PDF document which can be complicated
Public Key Technology or PKI
PKI has two major uses. It is used to:
- protect the secret decryption key, preventing the user or attacker from finding it
- create a digital signature which establishes that the document has not been altered and verifies the sender
Public Key Technology is much more secure than password protection – the key is not exposed to the user so cannot be attacked. In addition there are no passwords to manage or for users to forget.
Licensing controls
Licensing controls allow you to establish policies, watermarks, and restrictions that are unique to each user.

You can distribute a single document that has different license conditions depending on the user. For example:
- User A is allowed to print document A but user B is not
- User A is allowed to view document A for 15 days but user B can view it forever
- You can revoke any access to a specific document for an individual user(s) or all users
Licensing controls also enable you to lock PDFs to specific devices and log document use.
Proprietary security mechanisms
These are used to control Operating System specific behaviour such as:
- preventing screen grabbing and third party screen grabbers from taking screenshots
- stopping printing to file drivers (i.e. Adobe PDF files)
- preventing temporary files being created that store unprotected copies of a PDF
Additional security implementations can be used to:
- identify unique machine information to enable locking of PDF documents to devices, IP address(es) and locations
- store decryption keys securely and prevent them from being shared

Securing PDF files

Why would I want to secure my PDF documents?

There are many reasons why you would want to secure your PDF documents using PDF file security. The main reason however is that you need protection for your PDF documents beyond what encryption provides. The most likely reason being is that you want to have some control of your PDF documents once they have been decrypted (for example whether a recipient can copy text from your document). This may be because the information is privileged for a certain group of people or you are selling information that you do not want to be distributed at your cost.

So how can I secure my PDF documents?

Well, at the basic level you could use a product like Adobe Acrobat. However, it is wise to bear in mind that there are tools freely available on the Internet that remove the copy controls you have applied literally within seconds. This is also true of other secure PDF products that use passwords or plugins to Adobe Acrobat.

If you are serious about protecting your documents then you will probably want to purchase a PDF file security product that is not password based – read PDF password protection to see why – and uses US Government strength encryption.

Download PDF file security software that uses US Government strength encryption, digital rights management controls, and does not use either passwords or plug-ins to secure your PDF documents.

Secure PDF online: securing PDF files in the cloud

Some PDF security applications enable you to secure PDF files online on a cloud server. Most of these programs however only provide standard PDF password protection. The other main disadvantage of this approach is that you have to upload unprotected PDF files to a cloud server where they could be easily compromized.

A much more secure approach to securing PDF files is to secure PDF files on your local computer (offline), and then to distribute the secure PDFs online. This ensures your secure PDFs are always under your control.

Weak PDF Security Implementations

There is no point in applying PDF security to secure PDF files if it can be easily bypassed or removed.

PDF Passwords
PDF password protection has been the traditional way to impose PDF digital rights management controls on PDF document users, but it has a number of drawbacks. One problem in password based PDF file security is that a number of suppliers provide tools for removing the protection controls on the basis that you are the document owner and you have ‘forgotten’ how to use a document that is yours. The weaker the password the sooner it is broken.

In Adobe Acrobat, a number of additional controls (PDF permissions) such as stopping printing, editing, and copying text, can be added when you secure a PDF file with a password. However, because the Adobe Security Handler design is poorly implemented – How the Adobe PDF Security Handler works – it means no matter how strong the password used to secure the PDF, the PDF restrictions can be removed in seconds. So reliance on some of the controls being provided may not be as wise at it seems – they are totally useless.
PDF Plugins
Some PDF Security products use plugins to secure PDFs from unauthorized use and to control what users can do with documents. However, plug-ins may (and often do) act in conflict with each other, and other plug-ins may be used to compromise the security of the PDF security plug-in.

Also, the Adobe PDF Reader was not designed to operate in a secure manner, and it is not possible, as a plug-in, to control what the application can do, so any ability to compromise the application will also compromise the security. See PDF Security Plug-ins.

PDF file security is achieved when the different components work together correctly. So if some of the controls are implemented by one supplier and others by another you need to make sure that the combinations work together.

Locklizard PDF Security cannot be compromised by plug-ins because we use our own Secure PDF Viewers that prevent plug-ins from being loaded. We supply and control the environment so that no vulnerabilities can be introduced.
Web based PDF security systems
Web based PDF security systems, such as those used for secure online document sharing, may seem convenient but use passwords that can be shared with other users. Since no software is installed on the device they cannot control Operating System behaviour so users can screen grab content and print to file drivers (e.g. Adobe PDF) if printing is allowed.

Strong web based PDF security systems let you control the number of times a user can be logged in simultaneously, and enable you to lock document use to specific locations so that secure PDF files cannot be readily shared.

Strong PDF security software to secure PDF files & documents

Safeguard PDF Security

Safeguard PDF Security gives you complete control over your PDF files, preventing unauthorized copying, modifying, printing and distribution. Securely share or sell PDF files by controlling who can access them and enforcing how long they can be used, no matter where they reside.

Safeguard PDF security enables you to:

stop copying & editing
stop or limit prints
expire and revoke access
stop screen shots
watermark PDFs with dynamic data to identify users

Protected PDFs are locked to authorized devices so they cannot be shared with other users and PDF files are decrypted in memory so there are no unprotected files that users can distribute.

Safeguard Enterprise PDF Security

Safeguard Enterprise is a PDF security solution for the larger organization.

In addition to the PDF security features of Safeguard, you can:

log document use
lock PDFs to specific countries and IP addresses on a user basis (i.e. only let user x view PDFs from an office location in the US)
control sub-administrators
enable flexible license checking and transfer
run reports (e.g. your most accessed documents and by whom)

Users view protected PDF files using our FREE secure PDF viewers. These can be installed on a device, or users can view secure documents in their browser or from a USB stick with our zero installation solutions.

Why Locklizard for PDF Document Security?

US Gov Strength PDF Security – Secure PDF files without passwords

Locklizard takes your document protection seriously.

Our DRM PDF Security products enable you to share documents securely without insecure passwords or plug-ins, and enforces access, location, expiry, and usage controls. Revoke PDFs at any time regardless of where they are.

Our DRM technology ensures your secure PDF files remain safe no matter where your documents reside.

See our customer testimonials or read our case studies to see why thousands of organizations use Locklizard PDF security to securely share and sell their documents.

Customer Testimonials

	PDF Encryption
	PDF Security
	PDF Digital Rights Management
	PDF Protection
	PDF Password Protection
	PDF Copy Protection
	PDF Lock
	Protected PDF
	Restrict PDF
	PDF Watermarks
	Adobe Content Server
	LiveCycle Rights Management
	Adobe Digital Editions
	PDF Tracking
	PDF Expiry
	Secured PDF
	Secure PDF Forms