PDF Security Tools

How secure is password protection on a PDF?

Dockitt uses 128-bit AES encryption via Ghostscript, which is the standard encryption level for PDF security and is considered strong for most professional and personal use cases. A well-chosen password — at least 12 characters, mixing letters, numbers, and symbols — combined with 128-bit encryption makes the file extremely difficult to access without the correct password. However, no encryption is unconditional. If the password itself is weak or is shared insecurely, the protection can be compromised. Always share the password through a different channel than the document itself — for example, send the PDF by email and the password by SMS.

What is the difference between a user password and an owner password in a PDF?

A PDF can have two separate layers of protection. A user password (also called an open password) is required to open and view the document at all. An owner password (also called a permissions password) controls what actions are allowed after the document is opened — such as printing, copying text, or editing. It is possible for a PDF to have only an owner password, meaning anyone can open it but certain actions are restricted. Dockitt's Protect PDF tool sets a user password, and the Unlock PDF tool removes both types of protection when given the correct password.

Is a handwritten signature added through a browser legally binding?

A handwritten signature drawn in a browser and embedded in a PDF is a visual signature. In many countries and for many document types, a visual signature is considered valid — particularly for internal documents, agreements between parties who have consented to electronic signing, and informal contracts. However, for high-stakes legal documents such as property transactions, financial agreements, or any document that may be legally disputed, a certified electronic signature with an audit trail and identity verification provides much stronger legal standing. Services like DocuSign or Adobe Sign are designed specifically for legally binding e-signatures. Dockitt's Sign PDF tool is best suited for informal use cases where a visual representation of a signature is sufficient.

Can someone remove a watermark I've added to a PDF?

A text watermark embedded directly into a PDF's page content — as opposed to a simple annotation layer — is significantly harder to remove than it might appear. While professional PDF editors like Adobe Acrobat Pro can attempt to remove watermarks, the process is time-consuming, imperfect on complex page backgrounds, and leaves traces. For most use cases — marking documents as draft or confidential, deterring casual copying, or asserting ownership — an embedded text watermark is an effective deterrent. If your use case requires tamper-proof watermarking with legal guarantees, a document DRM solution would provide stronger protection.

What should I do if I forgot the password on a PDF I own?

Unfortunately, if you have forgotten the password on an encrypted PDF and no longer have the original unprotected file, recovery is extremely difficult. The 128-bit encryption used in modern PDFs is designed to be computationally infeasible to brute-force without the correct password. If you have the original source file — for example the Word document or design file the PDF was exported from — the simplest solution is to re-export it as a new PDF and set a new password. Going forward, storing passwords in a dedicated password manager (such as 1Password, Bitwarden, or Apple Keychain) prevents this situation entirely.

Can I add both a watermark and a password to the same PDF?

Yes, but you need to do it in two steps since each operation is a separate tool. First, add the watermark using the Watermark PDF tool and download the result. Then, upload the watermarked PDF to the Protect PDF tool and set a password. The final file will have both the embedded watermark and password protection.