icon-home icon-gotop

Protect PDF Files

Check PDF Security

Some PDF files may contain restrictions preventing actions such as printing, editing, copying, etc. To check if you have these permissions, please choose File > Properties > Security, or Protect > Secure Document > Security Properties

Protect PDFs with Passwords or Certificates

Protect PDFs with Passwords

You can add a password to a PDF to limit access and restrict certain features, such as printing, copying, and editing.

Protect PDFs with Certificates

Certificate protection allows a specific group of users whose identities can be verified and managed to have access to the PDF document.

Remove Password Protection or Certificate Protection

Set Security Policies

If you often apply the same security settings to multiple PDFs, you can save your settings as a policy that you can apply to other PDFs. Security policies include the security method, encryption password, permission settings, etc.

Create a Security Policy

Secure PDFs using Policies

You can apply any security policy to a PDF file. To secure a PDF with a security policy that you specified, do the following:

Manage Security Policies

After you create security policies, you can manage them by copying, editing, and deleting.

Upon completion, click Close to close the Manage Security Policies dialog box.

Protect PDFs with Microsoft Rights Management Service (RMS)

Prerequisites

If you are using the Microsoft Azure Rights Management (Azure RMS) environment, you can log in to the RMS server directly within Foxit PDF Editor.

If you are using the Microsoft Active Directory Rights Management Services (AD RMS) environment, in order to use Microsoft Rights Management Services in your client system, you need to follow Microsoft's instructions to deploy the Active Directory Rights Management Services (AD RMS) mobile device extension first. For detailed deployment steps, please refer to "Active Directory Rights Management Services Mobile Device Extension".

When deploying Active Directory Rights Management Service mobile device extension, you need to run the following Windows PowerShell commands in order to authorize Foxit PDF Editor for your devices.

Add-AdfsClient -Name "Foxit PhantomPDF for OS X" -ClientId "fba8dc00-b199-45ec-8541-a758d406d0bc" -RedirectUri @("com.foxitsoftware.com.phantompdf-for-osx://authorize")

RMS Encryption

Tip: Foxit PDF Editor allows you to encrypt PDF files with the official rights policy templates as well as custom templates. Official rights policy templates are based on the RMS server. Custom templates are customized by users. For instructions on how to customize a template, please refer to "Create Custom Templates".

Specify the Permissions to PDF Files

Create Custom Templates

Security Watermark Management

Foxit Configuration Tool (Used in a Windows RMS Server)

Foxit PDF Editor RMS protector provides a handy configuration tool for administrators to better modify the protection settings on a RMS server. Administrators can directly enable/disable each tool, edit the extended policies of official templates, dynamically revoke permissions, audit logs, and customize wrapper files.

To use the configuration tool to encrypt PDFs, please do the following:

Template Extended Policy

With the Foxit Configuration Tool, administrators can easily edit the extended policy of official templates. Click Template ExtendedPolicy tool and choose one template to edit. See also Extended Policy.

Tip: Click the Back button in the left corner to return to the Foxit Configuration Tool window.

Dynamic Revocation

Revocation is a mechanism that revokes a PDF document that has already been issued. A common use of revocation is to remove rights from an individual when he is no longer authorized or to restrict access to a document when it becomes out of date or invalid.

Note: To revoke a PDF document/user in an on-premise environment, please refer to Web Service Configuration to configure the web service and SQL first. Then choose the Revocation tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

To revoke a PDF document, click Document Revocation. Select the PDF document you want to revoke, click the Add button to add the document to the Revocation List. Or you can click Browse to select a document from a local drive to add to the Revocation List. To remove the revocation, please select the document in the Revocation List and click the Remove button.

To revoke a user, click User Revocation. Click Add button to add a user to the User Revocation List. To remove the revocation, please select the user in the list and click Remove button.

Extended Policy

Foxit Configuration Tool provides you with Extended Policy to add complete PDF protection and control to your PDF documents. The policy allows documents owners to control the number of access and the number of prints in an on-premise environment. Before you specify the two permissions, please refer to Web Service Configuration to configure the web service and SQL first, and then choose the Extended Policy tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

Auditing Logs

Foxit PDF Editor enables you to track the usage of RMS protected files to record the actions on the files during workflow, including who accessed the document, what document was accessed, when it was accessed, how it was accessed and the success of that access, and more.

To audit logs, please refer to Web Service Configuration to configure the web service and SQL first, and then choose the Audit Log tool in the Foxit Configuration Tool window and enable the tool by clicking the button .

Choose one log and click on the Export button to export to Foxit PDF Reader's registry or Foxit PDF Editor's to generate a .reg file for the administrator's configuration. The administrator can distribute the .reg file to client-end computers.

Edit Wrapper Content

If you open a PDF which is encrypted by Foxit with other PDF viewers, a wrapper (which is a PDF page) appears with a prompt that you need to download Foxit PDF Reader/Foxit PDF Editor to open the encrypted PDF. With Foxit Configuration Tool, you can customize the wrapper by selecting a desired PDF file.

To apply a custom wrapper, please refer to Web Service Configuration to configure the web service and SQL first. Then choose the Edit Wrapper Content tool in the Foxit Configuration Tool window, enable the tool by clicking the button , and select a desired PDF file.

RMS Decryption

You can decrypt the RMS protected PDF file if you are authorized.

Change RMS Account

To change the RMS account, click Protect > Settings > Change Account, and input your new account to sign in. To successfully switch the RMS account, you need to close the RMS-protected file before changing the account. 

Protect Sensitive Information with Redaction

Foxit PDF Editor allows users to permanently remove (redact) text and image from PDF documents to protect confidential information.

Mark for Redaction

Redact Text or Images

Redact Pages

Set Redaction Properties

Before applying the redaction, follow the steps below to set redaction properties.

Search and Redact Text

You can find and remove content either in a single PDF file or in multiple PDF files under a specified folder that contain searchable text with the Search & Redact command.

Note: This operation cannot be undone and the selected content will be removed permanently when you select Apply. It is recommended that you save a backup copy of this document before you apply the redaction.

Create and Manage Redaction Profiles

A redaction profile specifies the text to be redacted, the new text that you want to overlay the redacted text with, and the search criteria. When you need to search and redact content in documents that require the same protection, using a redaction profile can improve the productivity in your document workflow.

To create a redaction profile, do as follows:

To manage existing redaction profiles, do as follows: 

White Out Contents

Foxit PDF Editor provides the Whiteout feature to enable you to apply redaction with one-click, improving your productivity in the document workflow. You can use the feature to simply and securely erase any content to white background from your PDF file with one click like an eraser, leaving no trace behind of the previous content.

To remove content from your PDF with the Whiteout command, do as the following:

Note: Like redaction, the whiteout operation is permanent and cannot be reversed.

Remove Hidden Data

Foxit PDF Editor supports the removal of hidden information that is private or sensitive for users from their PDFs, generally including metadata, embedded content, attached files, and scripts.

Trust Settings

You can customize trust settings for Foxit PDF Editor, which is helpful to make your PDF workflow both secure and efficient. To specify the settings, click File in the Ribbon (or Foxit PDF Editor in the menu bar) > Preferences > Trust Manager. Based on your settings in the Trust Manager preferences, Foxit PDF Editor will display different prompt messages when you try to execute an action that is blocked by the security settings. You can also specify the trust settings for a particular action in the prompt messages.

Safe Reading Mode

Safe Reading Mode enables you to control unauthorized actions and data transmissions that efficiently avoid attacks from malicious content and viruses.

Enable or Disable Safe Reading Mode

The Safe Reading Mode is enabled by default. To change the setting, please follow the steps below.

Bypass Security Restrictions in Safe Reading Mode

If you are in Safe Reading Mode, a warning dialog box will appear when a PDF tries to complete a restricted action from an untrusted location or file. However, you may need to execute certain actions under the current restricted security settings. In this case, you can select trusted files and folders, and exempt them from security restrictions. This security feature ensures that Foxit PDF Editor operates under security level conditions that meet your working environment.

To specify the trusted files or folders, please follow the steps below:

Allow or Block the Links to Websites in PDF Files

To safeguard against any unauthorized or malicious access, Foxit PDF Editor will display a security warning when you click a web link in a PDF file, and will only connect to the website after you allow the operation. You can customize the URL access settings in the Trust Manager preferences.

Enable or Disable JavaScript Actions

JavaScript actions are enabled by default. To disable the JavaScript actions, choose File in the Ribbon (or Foxit PDF Editor in the menu bar) > Preferences > Trust Manager, and uncheck Enable JavaScript Actions.

Configure Security Settings for File Attachments

If you are in the Safe Reading Mode, a message will pop up to ask for your further action every time you try to open an attachment from PDF files. You can configure the security settings about how to open a certain type of file attachments by choosing File in the Ribbon (or Foxit PDF Editor in the menu bar) > Preferences > Trust Manager > File Attachment Security Settings. For more information, please refer to “Configure Security Settings”.

Automatic Foxit Approved Trust Lists and European Union Trusted Lists Updates

The certificates in Foxit Approved Trust Lists (FATL) and European Union Trusted Lists (EUTL) are the trusted root certificates that are stored in a Foxit server and have been verified by Foxit and other authorities. You can enable the application to automatically check and download new or updated root certificates in FATL or EUTL from the server to local trusted certificate list. Any certificate-based signature created with the certificate in FATL or EUTL is trusted when the signed document is opened in Foxit PDF Editor.

To enable the automatic updates from FATL or EUTL, do the following:

Note: A connection to the Internet is required for the update.