Choosing a security method for PDFs
- Acrobat User Guide
- Introduction to Acrobat
- Workspace basics
- Opening and viewing PDFs
- Working with online storage accounts
- Acrobat and macOS
- Acrobat notifications
- Grids, guides, and measurements in PDFs
- Asian, Cyrillic, and right-to-left text in PDFs
- Workspace basics
- Creating PDFs
- Editing PDFs
- Edit text in PDFs
- Edit images or objects in a PDF
- Rotate, move, delete, and renumber PDF pages
- Edit scanned PDFs
- Enhance document photos captured using a mobile camera
- Optimizing PDFs
- PDF properties and metadata
- Links and attachments in PDFs
- PDF layers
- Page thumbnails and bookmarks in PDFs
- Action Wizard (Acrobat Pro)
- PDFs converted to web pages
- Setting up PDFs for a presentation
- PDF articles
- Geospatial PDFs
- Applying actions and scripts to PDFs
- Change the default font for adding text
- Delete pages from a PDF
- Scan and OCR
- PDF forms basics
- Create a form from scratch in Acrobat
- Create and distribute PDF forms
- Fill in PDF forms
- PDF form field properties
- Fill and sign PDF forms
- Setting action buttons in PDF forms
- Publishing interactive PDF web forms
- PDF form field basics
- PDF barcode form fields
- Collect and manage PDF form data
- About forms tracker
- PDF forms help
- Send PDF forms to recipients using email or an internal server
- Combining files
- Combine or merge files into single PDF
- Rotate, move, delete, and renumber PDF pages
- Add headers, footers, and Bates numbering to PDFs
- Crop PDF pages
- Add watermarks to PDFs
- Add backgrounds to PDFs
- Working with component files in a PDF Portfolio
- Publish and share PDF Portfolios
- Overview of PDF Portfolios
- Create and customize PDF Portfolios
- Sharing, reviews, and commenting
- Share and track PDFs online
- Mark up text with edits
- Preparing for a PDF review
- Starting a PDF review
- Hosting shared reviews on SharePoint or Office 365 sites
- Participating in a PDF review
- Add comments to PDFs
- Adding a stamp to a PDF
- Approval workflows
- Managing comments | view, reply, print
- Importing and exporting comments
- Tracking and managing PDF reviews
- Saving and exporting PDFs
- Enhanced security setting for PDFs
- Securing PDFs with passwords
- Manage Digital IDs
- Securing PDFs with certificates
- Opening secured PDFs
- Removing sensitive content from PDFs
- Setting up security policies for PDFs
- Choosing a security method for PDFs
- Security warnings when a PDF opens
- Securing PDFs with Adobe Experience Manager
- Protected View feature for PDFs
- Overview of security in Acrobat and PDFs
- Attachments as security risks
- Allow or block links in PDFs
- Electronic signatures
- Accessibility, tags, and reflow
- Searching and indexing
- Multimedia and 3D models
- Add audio, video, and interactive objects to PDFs
- Adding 3D models to PDFs (Acrobat Pro)
- Displaying 3D models in PDFs
- Interacting with 3D models
- Measuring 3D objects in PDFs
- Setting 3D views in PDFs
- Enable 3D content in PDF
- Adding multimedia to PDFs
- Commenting on 3D designs in PDFs
- Playing video, audio, and multimedia formats in PDFs
- Add comments to videos
- Print production tools (Acrobat Pro)
- Preflight (Acrobat Pro)
- PDF/X-, PDF/A-, and PDF/E-compliant files
- Preflight profiles
- Advanced preflight inspections
- Preflight reports
- Viewing preflight results, objects, and resources
- Output intents in PDFs
- Correcting problem areas with the Preflight tool
- Automating document analysis with droplets or preflight actions
- Analyzing documents with the Preflight tool
- Additional checks in the Preflight tool
- Preflight libraries
- Preflight variables
- Color management
For a full list of articles about security, see Overview of security in Acrobat and PDF content.
By adding security to documents, you can limit viewing, editing, printing, and other options to only the specified users.
Choosing which type of security to use
Security features range from relatively simple measures to sophisticated systems adopted by corporations and agencies. Which feature you choose depends on what you want to achieve. Here are some examples:
You want only certain people to view your PDF. The easiest solution is to add a password to the PDF and send it to your intended recipients. (See Add password security.)
You don’t want anyone to print or edit your PDF. You can block printing and editing from the same dialog box that you use to add a password. (See Add password security.)
You want to assure your recipients that the PDF is really from you. The best way is to purchase a digital ID from a certificate authority. Alternatively, you can create a self-signed digital ID if you are communicating with a group that you trust. (See About digital IDs and Securing documents with certificates.)
You want an organization-wide security solution for PDFs. You can devise a solution specifically for a company handling sensitive data. Some organizations use Adobe LiveCycle Rights Management ES to apply a policy to documents. The policy contains the list of recipients and their individual set of permissions. Individuals can use a policy to apply the same security settings to numerous documents. (See Securing documents with Adobe LiveCycle Rights Management ES.)
A security policy enforces systematic constraints on information flow and exchange within an organization. You can use Adobe LiveCycleRights Management ES to apply a policy to documents without the need for digital signatures and certificates. If you often apply the same security settings to PDFs, consider creating a security policy to simplify your workflow. Different policies are useful for accommodating different requirements.
You can secure multiple documents by embedding them in a PDF envelope. You can encrypt envelopes to prevent unauthorized users from accessing the contents and certify them to provide proof of origin. Authorized recipients can open the envelope and extract the files to view them.
LiveCycle Rights Management ES policy
Adobe LiveCycleRights Management ES policies are stored on a server, and users must have access to the server to use them. Creating these policies requires specifying the document recipients from a list on Adobe LiveCycleRights Management ES.
Password and certificate policies
Save your password or certificate settings and reuse them to encrypt PDFs without setting up the password or certificate for each instance.
If you apply security settings to a PDF Portfolio in Acrobat Pro, including the component documents, you can automate the steps by using Action Wizard (Choose Tools > Action Wizard).
Require a password to open a PDF, or copy or print its contents
Choose Tools > Protect > More Options > Encrypt with Password. For a PDF Portfolio, choose View > Portfolio > Cover Sheet. Then choose Tools > Protect > More Options > Encrypt With Password.
If your company is signed up, you can also use Adobe LiveCycle Rights Management ES to secure documents.
When you use Action Wizard to apply security to PDF Portfolios in Acrobat Pro, the child documents are secured, but the cover sheet is not.
Indicate that you approve of the PDF content
Sign and certify the PDF. You must obtain a digital ID to add digital signatures. Buy a digital ID (see the Adobe website for security partners) or create a self-signed one. See Create a self-signed digital ID.
For Asian languages, you can add an approval stamp.
Prevent forms from being tampered with
Use LiveCycle Designer to secure forms and create locking signature fields. See the Adobe LiveCycle Designer Help.
Send secure file attachments via email
Use security envelopes. (Tools > Protect > More Options > Create Security Envelope.
Allow only the people you specify to view a PDF
Choose Tools > Protect > More Options > Encrypt With Certificate, or apply security using Adobe LiveCycleRights Management ES. You must have certificates for users who can view the documents.
For more information on using security features, see these resources:
Legal Professional: blogs.adobe.com/acrolaw/
Security Matters blog: blogs.adobe.com/security
Choosing security methods within FIPS mode (Windows)
Acrobat and Reader provide a FIPS mode to restrict data protection to Federal Information Processing Standard (FIPS). FIPS mode uses FIPS 140-2 approved algorithms using the RSA BSAFE Crypto-C Micro Edition (ME) 18.104.22.168 cryptographic module.
The following security options are not available in FIPS mode:
Applying password-based security policies to documents. You can use public key certificates or Adobe LiveCycleRights Management ES to secure the document. However, you cannot use password encryption to secure the document.
Creating self-signed certificates. To create a self-signed digital ID, it must be saved to the Windows certificate store. You cannot create a self-signed digital ID that is saved to a file.
RC4 encryption. A PDF file can only be encrypted by using the AES encryption algorithm when in FIPS mode.
MD5 or RIPEMD160 digest methods. In FIPS mode, only the SHA-1 and SHA-2 families of digest algorithms can be used when creating a digital signature.
In FIPS mode, you can open and view documents that are protected with algorithms that are not FIPS compliant. However, you can’t save any changes to the document using password security. To apply security policies to the document, use either public key certificates or Adobe LiveCycleRights Management ES.
FIPS mode is configured in the Windows registry by a system administrator. For more information, see Digital Signatures Guide (PDF) at www.adobe.com/go/learn_acr_security_en.