PDF open password vs permissions password: what each does

A PDF open password (also called a document-open or user password) is required before someone can view the PDF. A permissions password (also called an owner password) is used to set or change limits on actions such as printing, copying or editing. Adobe describes these as separate controls: one restricts access to the file, while the other restricts selected features in a PDF reader. See Adobe’s password security overview.

A PDF can store permission flags that ask compatible readers to limit printing, editing, copying or comments. In Acrobat, the owner can set a permissions password and choose which actions are allowed; Adobe’s guide explains the printing, editing and copying options.

These flags are not the same as encrypting the contents behind an open password. BuzPulse’s PDF security implementation treats print and copy permissions as advisory: readers may honor them, but a permission flag is not dependable confidentiality or copy protection. Use an open password for private contents, and share that password through a separate channel from the PDF.

• The recipient must not see the contents without permission: use an open password and send it separately to the intended recipient.
• You only want to discourage printing or editing: a permissions password may help with readers that enforce the flags, but do not rely on it to keep information confidential.
• You need both: use an open password and configure permissions in a PDF application that explicitly offers those controls. Check the saved file in the reader your recipients use.

Use a password that is difficult to guess, and keep a safe copy. If the open password is lost, the file may be permanently inaccessible. BuzPulse cannot recover it.

Protect PDF adds an open password and encrypts the file with AES-128. You can optionally enter a different owner password for changing the PDF’s security settings. BuzPulse leaves printing, copying and other permissions allowed; it does not offer controls to disable those actions. Both passwords and the file stay in your browser.

1. 1

   Choose Protect PDF

   Select the PDF you want to protect.

2. 2

   Set the open password

   This is the password needed to open the finished file. BuzPulse requires at least four characters.

3. 3

   Optionally set an owner password

   Use a separate value if you want a different password for changing the PDF’s security settings. Leaving it empty uses the open password for both.

4. 4

   Download and check the result

   Open the downloaded copy in a PDF reader and confirm the recipient will be asked for the open password.

Unlock PDF removes encryption when you provide a password that opens the file. It cannot guess or recover an unknown password. A file that opens without a password but has only owner-level restrictions can be processed without entering a password; the restrictions are removed from the downloaded copy.

• It will not recover or crack a forgotten open password.
• Protect PDF will not block printing, copying or editing; those permissions remain allowed.
• Unlock PDF will not remove an open-password lock unless you provide a password that opens the file.
• It will not upload the PDF or either password to a server.