Safe PDF Handling: A Practical Guide

Most PDF-related incidents start with a file from an untrusted source — an email attachment, a download link, a shared drive. Before opening a PDF you did not create, ask whether you expected it and whether the sender is who they claim to be. When in doubt, open it in a viewer that does not execute embedded JavaScript rather than a full application.

If a document contains personal, financial, medical, or legal information, do not upload it to an online tool just to compress or rotate a page. Use alocal-first tool that runs in your browser instead. The result is the same; the data exposure is not. See why local processing matters for the full reasoning.

Before sending a PDF externally, clear the metadata you do not want to share — author, creation tool, timestamps, and any XMP blocks. This is especially important for documents that originated inside an organization. A localmetadata editor can do this without uploading the file. Seewhat PDF metadata reveals for what is at stake.

PDFs can request elevated permissions or prompt for a password. A password prompt from a document you did not expect is a red flag. Embedded JavaScript, form actions, and "launch" actions are legitimate features that are also commonly abused. Most modern browsers open PDFs in a restricted viewer that blocks these by default; keep that default rather than switching to a permissive reader.

When you are the one protecting a sensitive document, use a local protect PDF tool to add a strong password — and remember that PDF encryption is only as strong as the password and the encryption standard the writer uses.

Covering text with a black rectangle in a word processor isnot redaction. The text is still in the file — a reader can select it, copy it, or delete the covering shape. True redaction removes the underlying text and graphics objects from the PDF content stream so they cannot be recovered.

For sensitive removals, use a tool that deletes the content rather than hiding it, then re-saves the PDF so the original objects are purged. If you are not sure whether a redaction is real, open the result in a text viewer and search for the redacted phrase — if it still appears, the redaction was only visual.