How to Keep PDFs Secure Online (2026 Privacy Guide)

TL;DR

Use tools with explicit short retention policies, prefer client-side tools for sensitive files, real-redact instead of blacking out, use AES-256 open passwords for true confidentiality, and strip metadata before publishing. For board-level confidentiality, use desktop apps only.

The real risk most people ignore

Free online PDF tools see every byte of every file you upload. For most documents that's fine — but for contracts, payslips, IDs, medical records, or anything with PII, it's a real risk. The good news: a few simple habits eliminate almost all of it.

Choose tools that delete files immediately

The single most important thing is the retention policy. Reputable converters (including ours) delete files within minutes of conversion and never store the contents. Look for an explicit retention statement on the tool's privacy page. If it's not there, assume the worst.

Prefer client-side tools for sensitive files

Some tools — including our Merge PDF and Split PDF — run entirely in your browser using JavaScript. Your file never leaves your device. For confidential merges or splits, this is the safest possible choice.

Redact, don't just black out

Drawing a black rectangle over text in a viewer doesn't remove the text — it just covers it visually. Anyone can copy-paste under the rectangle and see the original. Real redaction (Adobe Acrobat Pro, PDF24's redact tool) physically deletes the underlying text from the file. Always real-redact before sending sensitive PDFs.

Use password protection sparingly

PDF passwords come in two flavours: 'open' passwords (required to view) and 'permissions' passwords (block printing, copying, editing). Open passwords with AES-256 are genuinely strong. Permissions passwords are mostly cosmetic — many tools strip them in seconds. Use AES-256 open passwords for true confidentiality, and share the password through a different channel than the file.

Strip metadata before sharing

PDFs carry hidden metadata: author name, software version, edit history, sometimes GPS coordinates from the originating photo. Most tools (including Acrobat's 'Sanitize Document' and PDF24's metadata cleaner) can strip all of it in one click. Do this before publishing PDFs publicly.

Watch out for embedded files and JavaScript

PDFs can carry embedded files (a sneaky way to leak a draft contract) and JavaScript (a common malware vector). PDF/A bans both — converting to PDF/A is a fast way to flatten a PDF and strip risky content in one step.

When in doubt, go local

For truly confidential documents — board materials, M&A drafts, medical records — skip online tools entirely. PDF24 desktop, Adobe Acrobat Pro, and the built-in macOS Preview all do most PDF tasks locally with zero network exposure.

Frequently asked questions

Are online PDF converters safe?

The reputable ones are — they use HTTPS, isolate jobs, and delete files within minutes. The risk is the long tail of sketchy free sites with no retention policy. Stick to named tools with a public privacy page.

How do I redact a PDF properly?

Use Acrobat Pro's redact tool or PDF24's redact feature. They physically delete the underlying text instead of just covering it visually. Drawing a black rectangle in a viewer is not real redaction.

Can someone crack a PDF password?

AES-256 open passwords are practically uncrackable with current hardware if the password is long and random. Permissions-only passwords are routinely stripped by free tools — don't rely on them.

Does converting a PDF strip metadata?

Some converters do, some don't. The safest path is to explicitly run a 'sanitize' or 'remove hidden information' step before sharing, regardless of conversion.

What's the safest free way to merge PDFs privately?

Use a client-side tool like our Merge PDF, which runs entirely in your browser — files never leave your device.