“Securing” a PDF can mean five very different things: stopping the wrong people opening it, removing a password you already have, marking a document as yours, cleaning out the information hidden inside it, or permanently deleting content that must never be seen. They’re easy to confuse — and using the wrong one leaves a document you think is safe but isn’t. This guide walks through each, when to reach for it, the mistake that puts “redacted” files in the news, and the one step almost everyone forgets before sharing a file publicly.
First, decide what “secure” means
Before you touch a tool, name the goal. Each does something genuinely different:
| Your goal | Use |
|---|---|
| Only certain people should be able to open it | Protect PDF (password) |
| Stop typing a password you already know | Unlock PDF |
| Label it as a draft, proof or confidential | Watermark PDF |
| Clear the hidden info before publishing | Remove Metadata |
| Permanently delete content that must never be seen | Redact PDF |
Password-protect: control who can open it
The strongest lock is a password. Protect PDF encrypts the file so it simply can’t be opened without the password you set — the contents are scrambled, not just hidden. This is the right choice for anything sensitive you send by email: contracts, statements, medical or HR documents. Choose a long passphrase, store it somewhere safe (there’s no back door if you lose it), and share it separately from the file — a text or a call, never the same email. One nuance worth knowing: a PDF can carry either a password to open it (real encryption) or weaker restrictions on printing and copying — our guide on protect vs. unlock explains the difference and why only the first is genuine security.
Remove a password you already know
The opposite job is just as common. Banks and payroll systems often send statements locked with a password, which is annoying when you want to store or print them freely. If you can already open the file, Unlock PDF removes that password for good. It only works on documents you can already open — it isn’t a way to break into a file you don’t have the password for.
Watermark: mark it as yours
Sometimes you don’t need to lock a document, just label it. Watermark PDF stamps text like “DRAFT”, “CONFIDENTIAL” or your company name across every page. It’s a deterrent and a signal, not encryption — anyone can still open the file — but it clearly marks a proof, a draft, or a copy that shouldn’t circulate. See adding a watermark for the how-to.
The part people forget: hidden metadata
Every PDF carries information you can’t see on the page: the author’s name, the software that made it, creation and edit timestamps, and sometimes more. It’s harmless inside your organisation — and a quiet leak the moment you publish a document to the world. Before you post a PDF publicly, strip that hidden data with Remove Metadata. The visible pages don’t change at all; only the hidden details are cleared.
Redaction: removing what must never be seen
Truly removing visible content is a separate, careful job. Drawing a black box over text in most editors only covers it — the words are still underneath and can be copied out. That’s how real redaction failures make the news. Redact PDF avoids the trap: any page you redact is flattened to an image on download, so the text and data beneath the black boxes are permanently gone, not just hidden. Our guide on redacting a PDF the right way shows exactly why a plain rectangle isn’t enough.
A checklist before you send a sensitive PDF
- Only specific people should read it? Password-protect it, and send the password separately.
- Publishing it publicly? Remove the metadata first.
- It contains text that must never be seen? Redact it — don’t just cover the words.
- It’s a draft or a proof? Add a watermark.
For truly sensitive files, layer them as shown above — each step closes a different gap, and skipping one is usually how a “secure” document leaks.
Is it private, and is it free?
Watermarking, redacting and stripping metadata all run in your browser on Ream, so your confidential files never leave your device. (Password encryption and unlocking use a real crypto engine on our hardened server, where the file is processed in isolation and deleted immediately.) Everything is free, nothing is stored, and we never add a watermark of our own. If you’re weighing up any online tool for sensitive work, see whether online PDF tools are safe.
Frequently asked questions
Is a watermark the same as protection? No. A watermark is a visible label anyone can still read past; a password actually stops the file being opened. For real control, protect it.
How strong is PDF password encryption? Modern PDFs use AES, which is strong — the weak link is the password itself, so use a long passphrase. See protect vs. unlock.
Does drawing a black box really remove text? Only if the tool flattens the page. Redact PDF does; a plain rectangle in many editors does not — the words copy straight out.
What hidden data does a PDF contain? Author name, the software used, creation and edit timestamps, and sometimes more. Remove Metadata clears it before you publish.
Can I recover a file if I forget its password? No — that’s what makes encryption secure. Store the password safely; there’s no back door.
Can I remove a password from a PDF? Yes, if you can already open it — Unlock PDF strips it. It won’t break into a file you don’t have the password for.
Do I need to install anything? No — every step runs in your browser or our sandbox, on any device, with nothing to install.
Is it free? Yes — free, no sign-up, and no watermark of ours.
Match the tool to the goal — lock, unlock, label, clean or redact — and, for the files that really matter, layer them: redact, strip metadata, then protect. Do that, and you’ll end up with a document that’s actually as secure as you think it is.
