What PDF permission restrictions are
The PDF format includes a permissions system, defined in the PDF specification, that allows a document creator to restrict specific actions. The permissions that can be controlled include printing (allow or deny), copying text or images (allow or deny), editing or annotating the document (allow or deny), and filling in form fields (allow or deny in some implementations). These restrictions are enforced by PDF reader software when an owner password is set. PDF readers that comply with the PDF standard — Adobe Acrobat Reader, macOS Preview, Foxit, PDF Expert — enforce these restrictions.
User password vs owner password: the key distinction
PDF security uses two distinct types of password. User password: required to open and view the document. Anyone without this password cannot see the content. Owner password: required to change the document permissions or bypass restrictions. It does not prevent viewing — it controls what actions are permitted after the document is open. A PDF can have one, the other, or both. To restrict printing and editing without requiring a password to open the file, set only an owner password. To require a password to open the file and also restrict permissions, set both. Most permission-restriction use cases only require an owner password.
Common use cases for PDF permission restrictions
Distributing a proposal or report that recipients may read but not copy or reuse the text. Sharing a form that recipients should fill in but not edit the form structure. Distributing a design or presentation where you want to prevent high-resolution printing. Sending a draft document for review where you want to prevent edits or annotations. Providing a price list or catalogue that should be read-only. Sharing a contract where you want to prevent modifications while still allowing the recipient to print a signed copy.
How to restrict printing and editing with MiniFiles
- Open minifiles.io in your browser (desktop or mobile). 2. Select the Protect tab. 3. Upload your PDF by dragging it onto the upload zone or clicking to select it. 4. Leave the user password field empty if you do not want to require a password to open the file — or enter one if you do. 5. Open the Advanced Options section. 6. Enable the owner password option and enter a strong owner password. 7. Configure the permission restrictions — select which actions to restrict (printing, copying, editing). 8. Click Protect. 9. Download the restricted PDF. The restrictions are applied locally — no upload to any server.
How PDF permission restrictions are technically enforced
When an owner password is set, the PDF specification requires that the permission flags be stored in the file's encryption dictionary. PDF readers check these flags and enforce the restrictions accordingly. The encryption applied when an owner password is set is AES-256 in MiniFiles — the same encryption used when a user password is set. The difference is that the owner password is used to unlock permission changes, while the user password (if set) is used to decrypt the content for viewing.
Limitations of PDF permission restrictions
PDF permission restrictions are enforced by compliant PDF readers. A compliant reader — Adobe Acrobat Reader, macOS Preview, Foxit — respects the restrictions. However, dedicated PDF manipulation tools and command-line utilities (such as Ghostscript or PDFtk) can sometimes remove or bypass owner-password-only restrictions. This is a known limitation of the PDF permissions system documented in the specification itself. For documents where strict access control is critical — medical records, legal contracts, financial data — evaluate whether PDF permission restrictions alone provide the level of control you need, or whether additional access controls (DRM, secure document sharing platforms) are appropriate.
Choosing a strong owner password
The owner password protects the permission settings themselves. If the owner password is weak, a determined recipient could use a PDF tool to remove the restrictions. Use an owner password of at least 12 characters combining uppercase letters, lowercase letters, numbers, and symbols. The owner password does not need to be shared with recipients — only the user password (if set) needs to be communicated to authorised viewers. Store the owner password securely in case you need to update permissions later.
Restricting printing specifically: what this means in practice
When printing is restricted in a PDF, compliant PDF readers will grey out or disable the print function. Recipients cannot print directly from Adobe Acrobat Reader or macOS Preview. However, this does not prevent a recipient from taking a screenshot of the PDF page — screen capture is not controlled by PDF restrictions. For documents where preventing any reproduction is critical, PDF permission restrictions are insufficient; more restrictive DRM solutions would be required.
Using MiniFiles to compress before restricting
A common workflow is to compress a PDF to reduce its size and then apply permission restrictions before sharing. Both operations can be done locally in MiniFiles. First, use the PDF compression tab to reduce the file size — the Balanced preset suits most documents, and Pro adds High Quality for print. Then switch to the Protect tab, apply the owner password and permission restrictions, and download the final file. Both steps run entirely on your device without any server upload.