Articles · PDF Tools
Put a real password on a PDF when the browser cannot
Most DevNestro PDF tools stay in the browser because pdf-lib can merge, split, and draw. It cannot write standard PDF encryption. Pretending otherwise would ship a fake “password” that any reader ignores. Protect PDF therefore sends the file through an ephemeral server endpoint that applies PdfSharp security settings and returns the encrypted bytes. The disclosure is intentional: briefly processed on the server, not stored, password not logged.
Why this is worth doing in the browser
You choose a password, confirm it, and see a simple strength meter. Optional permission checkboxes map to PdfSharp permit flags for print, modify, extract, and annotate. Viewer support for those flags varies — treat them as advisory if a reader ignores them. The endpoint is rate-limited. Client state clears password fields after the attempt. Already-encrypted or damaged inputs are rejected with a clear error.
How to use the tool
Drop a PDF, enter and confirm a password, optionally adjust permissions, protect and download, then clear. Related File Share can distribute the protected file with a 24-hour link if you still need a controlled send. Related Watermark marks drafts before you lock them.
- Use a password you can recover; DevNestro cannot reset it.
- Permissions are not a substitute for not sharing the file.
- Prefer a strong unique password, not a reused mailbox phrase.
- Remember this tool is the exception to fully local PDF processing.
Privacy
The PDF and password are used only to produce the encrypted download. DevNestro does not store the file or log the password. The endpoint is rate-limited.
Need an open password on a PDF? Use PDF Protect, download the encrypted copy, and keep the password offline.