Best way to secure sensitive PDFs shared with clients: password or certificate encryption?

Question

Hi everyone,We regularly share project documents with clients, like technical specs and proposals, and some of them contain sensitive information. Right now we protect them with a password in Acrobat, but we're wondering if that's the best option.A few questions:Is certificate-based encryption more secure than password protection for sharing with external clients?	Is there a way to stop printing and copying text while still letting clients view and comment?	Does AES-256 encryption in Acrobat work well for clients using other PDF readers?Would love to hear what works for others. Thanks!

Anand Sri Bhattacharya · Accepted Answer

Hello @entalogicsI hope you are doing well, and thanks for reaching out. Sorry for the trouble.Please note that password and certificate security can both encrypt a PDF, but they manage recipient access differently.Choose the method based on the client workflowPassword security is usually the practical choice when external clients do not already use digital IDs. In Acrobat, select All tools > Protect a PDF > Protect with password, then choose Viewing or Editing and apply a strong password. Adobe distinguishes a Document Open Password from a Permissions Password, which controls restricted actions.Certificate encryption is preferable when access must be tied to specific recipients rather than everyone who knows a shared password. Use All tools > Protect a PDF > Encrypt with Certificate. However, you must first obtain a valid encryption-capable public-key certificate from every recipient; include your own certificate as well so that you retain access. Certificate security can also assign different permissions to individual recipients.Therefore, certificate security provides more targeted, identity-bound access control, but Adobe does not describe it as universally “more secure” in every situation. It also adds certificate-exchange and digital-ID management requirements for clients.2. Disable printing and copying while allowing commentsOpen the PDF and select All tools > Protect a PDF > Encrypt with Password.Enable Restrict editing and printing of the document, and enter a Change Permissions Password.Set Printing Allowed to None.Set Changes Allowed to Commenting, filling forms, and signing.Leave Enable copying of text, images, and other content unchecked, then select OK and confirm the password.These are permissions restrictions. If the file itself must also require authorization before opening, configure a Document Open Password separately.AES-256 and reader compatibilityFor certificate-encrypted PDFs, Adobe documents that 256-bit AES requires Acrobat or Acrobat Reader 9 or later; 128-bit AES requires version 7 or later.Adobe’s documentation provides compatibility requirements for Acrobat and Acrobat Reader, but it does not guarantee that every third-party PDF reader will open the file correctly or enforce all permissions. For sensitive client workflows, use a current version of Acrobat/Reader or test the protected PDF in the client’s exact reader before distribution.Please refer to these articles for more information:https://adobe.ly/4iOS1VEhttps://adobe.ly/4hCCTZhhttps://adobe.ly/47rhHR8https://adobe.ly/4hvBQdDI hope this helps, and please reach out if you need any assistance.Regards,Anand Sri.

DFWTechGuy · Answer

For external clients, password protection is usually simpler because you only need to securely share the password. Certificate-based encryption is useful when you have a more controlled workflow and know each recipient’s certificate, since Acrobat can apply different permissions per recipient.

For printing and copying, Acrobat does let you restrict those while still allowing commenting, filling forms, and signing. You can set this under Protect a PDF > Encrypt with Password > Restrict editing and printing.

For AES-256, compatibility is the main thing to check. Adobe says recipients need Acrobat or Acrobat Reader 9 or later for 256-bit AES certificate encryption, so very old or third-party PDF readers could be an issue. If your clients use current Acrobat/Reader, it should generally be fine.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.