Home PDF Protector Tool How It Works All Tools Directory Security Blog & Guides About Our Technology Frequently Asked Questions Support & Contact
Document Rights Management Permission Bitmasks 11 Min Read • Updated August 2026

How to Lock a PDF from Editing, Copying, and Printing

A complete engineering guide to locking PDF documents with read-only protections, restricting clipboard copying, disabling virtual print drivers, and preventing content extraction.

Table of Contents

1. The Need for Read-Only PDF Locks

Authors, researchers, legal counsels, and product teams frequently need to distribute documents publicly or to external vendors without allowing recipients to alter the contractual clauses, copy proprietary code snippets, or extract financial datasets.

Unlike plain text or standard office formats (DOCX, XLSX), the PDF standard includes native Document Rights Management (DRM) protocols. By applying an Owner Password with customized permission flags, document owners can enforce a strict read-only environment where readers can review the visual content, but cannot copy text to their clipboard, print physical copies, or edit form values.

2. Understanding ISO 32000 /P Bitmask Architecture

Inside the PDF specification (ISO 32000-1 and ISO 32000-2), document permissions are controlled by a 32-bit signed integer stored under the /P key in the /Encrypt dictionary.

Each bit in this 32-bit field corresponds to a specific operational permission granted or denied by the author:

Bit Position Binary Flag Operational Permission Controlled Security Significance
Bit 3 0x0004 Print Document Controls low-resolution printing (150 DPI) or complete print denial.
Bit 4 0x0008 Modify Document Contents Disables text editing, inserting/deleting pages, and vector alterations.
Bit 5 0x0010 Copy / Extract Text & Graphics Disables text selection and clipboard copying (Ctrl+C / Cmd+C).
Bit 6 0x0020 Add or Modify Annotations Restricts sticky notes, highlights, and interactive form filling.
Bit 9 0x0100 Fill Interactive Form Fields Allows users to type in form fields even when general editing is locked.
Bit 10 0x0200 Extract Content for Accessibility Enables screen readers for visually impaired users without granting clipboard copying.
Bit 11 0x0400 Document Assembly Allows or blocks rotating, inserting, or deleting entire page objects.
Bit 12 0x0800 High-Quality / High-Resolution Print Allows full-fidelity vector printing only if bit 3 is also enabled.

3. How to Lock a PDF Using PDF Protector (Free & Local)

You can lock PDF permissions instantly without uploading your files to third-party servers using the zero-knowledge PDF Protector Application:

  1. Open the PDF Protector Tool in your browser.
  2. Drop your source PDF file into the upload zone.
  3. Enter a Document Password (required by standard PDF encryption to establish the master cryptographic container).
  4. Click to expand the Advanced Permission Restrictions section.
  5. Enter an administrative Owner Password (keep this secure so only you can unlock the restrictions later).
  6. Uncheck the boxes for:
    • Allow Document Printing: Disables print dialogues in PDF viewers.
    • Allow Text and Graphics Copying: Blocks text selection and clipboard export.
    • Allow Modifying Document: Locks page content against editing software.
    • Allow Annotations: Disables comment popups and form alterations.
  7. Click Protect & Encrypt PDF Now and download the locked output file.
Client-Side Advantage

The permission bitmask and cryptographic hashes are written directly into the document structure in your browser's private RAM sandbox, keeping your master Owner Password and raw document completely private.

4. How to Restrict Permissions in Adobe Acrobat Pro

For users working in Adobe Acrobat Pro on desktop:

  1. Open your PDF document in Adobe Acrobat Pro.
  2. Click on File > Properties (or press Ctrl+D / Cmd+D) and select the Security tab.
  3. In the Security Method dropdown, choose Password Security.
  4. In the dialog, check the box for Restrict editing and printing of the document.
  5. Type your administrative Change Permissions Password.
  6. Set Printing Allowed to None, and Changes Allowed to None.
  7. Uncheck Enable copying of text, images, and other content. (Keep "Enable text access for screen reader devices for the visually impaired" checked for ADA compliance).
  8. Click OK, confirm the password, and save the document.

5. How PDF Viewers Enforce Permission Flags

It is essential to understand the technical boundary of PDF permissions:

When a standard PDF viewer (such as Adobe Acrobat, Apple Safari, Google Chrome, Microsoft Edge, or Mozilla Firefox) opens a document with restricted permissions, its internal rendering engine checks the /P bitmask. If bit 5 is disabled, the UI highlights text selection as inactive and suppresses the copy shortcut.

Security Architecture Note

Permission flags rely on cooperative compliance by the PDF reading software. All mainstream corporate browsers and PDF readers honor these flags strictly. However, non-compliant or open-source command-line parsers (such as pdftotext or custom Python scripts) can theoretically ignore the /P flags if the User Password to decrypt the stream is known or blank. For absolute containment against determined adversaries, combine permission locks with strong Open Passwords.

6. Mitigating OCR & Screenshot Scrapers

Even when clipboard copying is mathematically disabled, recipients can theoretically take an operating system screenshot and run Optical Character Recognition (OCR) to extract text. To protect high-value intellectual property, employ defense-in-depth:

  • Dynamic Visual Watermarking: Place a translucent diagonal watermark containing the recipient's name, email address, and timestamp across every page to deter unauthorized screenshot distribution.
  • Granular Distribution Auditing: Share protected PDFs via secured client portals with IP logging and session timeout controls.
  • Low-Resolution Raster Flattening: Convert vector text into flattened images before encryption to prevent automated vector font extraction.

7. Protection Techniques Compared

Security Strategy Blocks Viewing? Blocks Text Copying? Blocks Printing? Blocks OCR / Screenshots?
User (Open) Password Yes (Encrypted) Yes Yes Yes
Owner (Permission) Lock No (Allows Reading) Yes (Clipboard Locked) Yes (Print Locked) No (Visible on Screen)
Visual Watermarking No No No Deters Leakage

8. Frequently Asked Questions

Yes. Under the ISO 32000 specification, you can establish an Owner Password to enforce permission restrictions while allowing anyone with the file to open and view it without typing an Open password.

No. Standard permission implementations (including PDF Protector) explicitly keep the Accessibility Bitmask (Bit 10) enabled, allowing assistive screen reader software to parse text for visually impaired readers while keeping clipboard copy commands restricted.

Open the PDF in any compliant editor (such as Adobe Acrobat or PDF Protector), enter your Owner Password when prompted, and save an unrestricted copy of the file.

Lock Your PDF Permissions in Seconds

Set granular permission locks to disable text copying, printing, and page modifications locally in your browser.

Configure PDF Permissions Now ->