PDF privacy: metadata, passwords and redaction that works
Short answer: Before sharing a PDF, strip the document metadata, redact any sensitive content properly by removing it rather than covering it, and use encryption only when you genuinely need to control who can open the file. Always verify redaction by trying to select and copy the text afterwards.
Every PDF carries more than the words on the page: the author name from the account that made it, the application that produced it, edit timestamps, and sometimes GPS coordinates inside embedded photos. On top of that sit two widely misunderstood controls, password protection, which does less than people assume, and redaction, which most people do wrong. These guides cover what leaks, what protects, and how to check that it worked.
Every guide in this topic
- How to remove hidden metadata from a PDF before sharing, A PDF stores your name, your software, edit timestamps and sometimes GPS data from embedded photos. How to see all of it and strip it before you share.
- How to password protect a PDF, and what it actually protects, User password versus owner password, AES-256 versus legacy schemes, and why print and copy restrictions are advisory. Plus the tools that genuinely encrypt.
- How to redact a PDF so the text is really gone, A black rectangle does not redact anything: the text stays in the file and copies straight out. The method that really removes it, and how to verify it.
- Are online PDF tools safe? What happens to your file, Some PDF sites upload your file to a server, others process it in your browser. How to tell the difference in thirty seconds, and what GDPR and HIPAA require.