icon-home icon-gotop

Protect PDF Files

Protect PDFs with Passwords

You can add a password to a PDF to limit access and restrict certain features, such as printing, copying, and editing.

Protect PDFs with Certificates

Certificate protection allows a specific group of users whose identities can be verified and managed to have access to the PDF document.

Remove Password Protection or Certificate Protection

Protect PDFs with Microsoft Rights Management Service (RMS)


If you are using the Microsoft Azure Rights Management (Azure RMS) environment, you can log in to the RMS server directly within Foxit PDF Editor.

If you are using the Microsoft Active Directory Rights Management Services (AD RMS) environment, in order to use Microsoft Rights Management Services in your client system, you need to follow Microsoft's instructions to deploy the Active Directory Rights Management Services (AD RMS) mobile device extension first. For detailed deployment steps, please refer to "Active Directory Rights Management Services Mobile Device Extension".

When deploying Active Directory Rights Management Service mobile device extension, you need to run the following Windows PowerShell commands in order to authorize Foxit PDF Editor for your devices.

Add-AdfsClient -Name "Foxit PhantomPDF for OS X" -ClientId "fba8dc00-b199-45ec-8541-a758d406d0bc" -RedirectUri @("com.foxitsoftware.com.phantompdf-for-osx://authorize")

RMS Encryption

Tip: Foxit PDF Editor allows you to encrypt PDF files with the official rights policy templates as well as custom templates. Official rights policy templates are based on the RMS server. Custom templates are customized by users. For instructions on how to customize a template, please refer to "Create Custom Templates".

Specify the Permissions to PDF Files

Create Custom Templates

Security Watermark Management

Foxit Configuration Tool (Used in a Windows RMS Server)

Foxit PDF Editor RMS protector provides a handy configuration tool for administrators to better modify the protection settings on a RMS server. Administrators can directly enable/disable each tool, edit the extended policies of official templates, dynamically revoke permissions, audit logs, and customize wrapper files.

To use the configuration tool to encrypt PDFs, please do the following:

Template Extended Policy

With the Foxit Configuration Tool, administrators can easily edit the extended policy of official templates. Click Template ExtendedPolicy tool and choose one template to edit. See also Extended Policy.

Tip: Click the Back button in the left corner to return to the Foxit Configuration Tool window.

Dynamic Revocation

Revocation is a mechanism that revokes a PDF document that has already been issued. A common use of revocation is to remove rights from an individual when he is no longer authorized or to restrict access to a document when it becomes out of date or invalid.

Note: To revoke a PDF document/user in an on-premise environment, please refer to Web Service Configuration to configure the web service and SQL first. Then choose the Revocation tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

To revoke a PDF document, click Document Revocation. Select the PDF document you want to revoke, click the Add button to add the document to the Revocation List. Or you can click Browse to select a document from a local drive to add to the Revocation List. To remove the revocation, please select the document in the Revocation List and click the Remove button.

To revoke a user, click User Revocation. Click Add button to add a user to the User Revocation List. To remove the revocation, please select the user in the list and click Remove button.

Extended Policy

Foxit Configuration Tool provides you with Extended Policy to add complete PDF protection and control to your PDF documents. The policy allows documents owners to control the number of access and the number of prints in an on-premise environment. Before you specify the two permissions, please refer to Web Service Configuration to configure the web service and SQL first, and then choose the Extended Policy tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

Auditing Logs

Foxit PDF Editor enables you to track the usage of RMS protected files to record the actions on the files during workflow, including who accessed the document, what document was accessed, when it was accessed, how it was accessed and the success of that access, and more.

To audit logs, please refer to Web Service Configuration to configure the web service and SQL first, and then choose the Audit Log tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

Choose one log and click on the Export button to export to Foxit PDF Reader's registry or Foxit PDF Editor's to generate a .reg file for the administrator's configuration. The administrator can distribute the .reg file to client-end computers.

Edit Wrapper Content

If you open a PDF which is encrypted by Foxit with other PDF viewers, a wrapper (which is a PDF page) appears with a prompt that you need to download Foxit PDF Reader/Foxit PDF Editor to open the encrypted PDF. With Foxit Configuration Tool, you can customize the wrapper by selecting a desired PDF file.

To apply a custom wrapper, please refer to Web Service Configuration to configure the web service and SQL first. Then choose the Edit Wrapper Content tool in the Foxit Configuration Tool window, enable the tool by clicking the button , and select a desired PDF file.

RMS Decryption

You can decrypt the RMS protected PDF file if you are authorized.

Change RMS Account

To change the RMS account, click Protect > Settings > Change Account, and input your new account to sign in. To successfully switch the RMS account, you need to close the RMS-protected file before changing the account. 

Protect Sensitive Information with Redaction

Foxit PDF Editor allows users to permanently remove (redact) text and image from PDF documents to protect confidential information.

Mark for Redaction

Redact Text or Images

Redact Pages

Set Redaction Properties

Before applying the redaction, follow the steps below to set redaction properties.

Search and Redact Text

You can find and remove content either in a single PDF file or in multiple PDF files under a specified folder that contain searchable text with the Search & Redact command.

Note: This operation cannot be undone and the selected content will be removed permanently when you select Apply. It is recommended that you save a backup copy of this document before you apply the redaction.

Create and Manage Redaction Profiles

A redaction profile specifies the text to be redacted, the new text that you want to overlay the redacted text with, and the search criteria. When you need to search and redact content in documents that require the same protection, using a redaction profile can improve the productivity in your document workflow.

To create a redaction profile, do as follows:

To manage existing redaction profiles, do as follows: 

White Out Contents

Foxit PDF Editor provides the Whiteout feature to enable you to apply redaction with one-click, improving your productivity in the document workflow. You can use the feature to simply and securely erase any content to white background from your PDF file with one click like an eraser, leaving no trace behind of the previous content.

To remove content from your PDF with the Whiteout command, do as the following:

Note: Like redaction, the whiteout operation is permanent and cannot be reversed.

Remove Hidden Data

Foxit PDF Editor supports the removal of hidden information that is private or sensitive for users from their PDFs, generally including metadata, embedded content, attached files, and scripts.