Files are processed in your browser, not uploaded. Privacy →
Deckle
Open a PDF
Skip to guide

Document security

How to choose the right security for a PDF

By DeckleUpdated

To choose the right security for a PDF, ask what could go wrong. If the wrong person might open it, add a password with Password protect PDF. If the file might reveal who made it or carry attachments, remove metadata with Remove PDF metadata. If the recipient must not see a detail on the page, remove it from the page. Many documents need two of these, applied in that order: content, then metadata, then password.

Password protect PDF

Three different privacy tasks

Password

Controls access

Metadata

Document properties

Redaction

Selected page content

Choose the change; inspect the saved copy

Conceptual comparison · access, properties and content require separate checks. No single task certifies complete privacy.

Match the risk to the control

What could go wrong Example Control
Someone other than the recipient opens the file A payslip emailed to the wrong address Password
The file names you, your app or your organisation A CV whose Author field is a previous employer Metadata removal
An attached file goes with it A report with the costing spreadsheet embedded Metadata removal (attachments)
The recipient sees something they should not A case file with another client's name on page 7 Redaction, or remove the page
Pages that are not needed go out Internal notes at the back of a proposal Remove or extract pages
The recipient forwards it widely A board paper sent to a trustee Password, and send only what is needed

How to apply the controls with Deckle

  1. Remove pages the recipient does not need. Open Organize PDF pages, select each page, choose Remove and choose Save pages. To send only a section, extract it with Split PDF.
  2. Remove content on the pages that must not be seen. Change the source document and export again, or redact it.
  3. Remove metadata. Open Remove PDF metadata, tick the author, dates, app names, XMP packet, document identifier and any attachments, and choose Remove metadata.
  4. Add a password. Open Password protect PDF with the cleaned copy, enter the password twice and choose Protect this PDF.
  5. Send the file and the password separately.

Each step saves a new copy, and the original stays as it was.

Three examples

Payslip to an employee. The content is meant for them, so no redaction. Remove the Author and Creator, which name the payroll operator and system, then protect the file. Send the password by text.

CV to an employer. The content is meant to be read and forwarded inside the company, so no password. Remove metadata so the file does not carry an old template author or editing history.

Report to the public. Remove internal pages and any names that must not be published, then remove metadata. No password, because the file is meant to be downloaded by anyone. How to clean a PDF before you publish it online covers this case.

Why the order matters

  • A password has to be removed before any other tool can change the file, so it goes last.
  • Editing or redacting can add new properties, so metadata removal comes after content changes.
  • A digital signature is broken by any change, so signing, if needed, comes after everything else.

What none of these do

  • Stop a recipient sharing what they can read. A password controls who opens the file, not what they do next.
  • Prove who sent it. That needs a digital signature; see password protection vs digital signature.
  • Hide text under a drawn box. Covering is not removing; the text stays selectable.

Tips

  • Start with the recipient. Decide what they need to see, then remove the rest.
  • Use the smallest file. Fewer pages means less to check and less to expose.
  • Check the final file. Open the exact copy you will send, look at its properties and page through it.
  • Use a strong password. See how to choose a strong password for a PDF.

Frequently asked questions

Is a password enough to secure a PDF?

For keeping strangers out, yes, if the password is strong and sent separately. It does not remove hidden properties or hide content from the person who has the password.

Should I remove metadata before or after adding a password?

Before. Password protect PDF needs a file without a password, and the cleaned copy should be the one you lock.

Do I need all three controls?

Rarely. Most documents need metadata removal plus either a password or content removal, depending on whether the recipient is trusted with the whole document.

Are files uploaded to apply these controls in Deckle?

No. Every tool processes the file in your browser.

Related tools

Sources