Skip to main content
GuiFurlan
GuiFurlan
Participating Frequently
March 9, 2022
Answered

Unbelievable! Adobe PDF & ZERO Security!

  • March 9, 2022
  • 2 replies
  • 3260 views

So here is the deal:

I create a PDF, password protect it with more than 50 characters (special, uppercase, lowercase, numbers...) Even the system says my password is excellent. Then I go to Google to do a security test. First result is "lostmypass". I upload it and in less than a second it unlocks. Aaah, come on!!! Anyone from Adobe to comment? And I still pay to have the full Adobe package? What is it for? What credibility do you have?

This topic has been closed for replies.
Correct answer try67

Yes, the editing password. This is basically worthless. Of course, if an app can read a PDF then it can edit it; the rules if PDF say to check the password but many app makers don't follow the rules. Some app makers go further and make hacking tools. They don't find the password, they just remove the protection. Adobe know this, and put out the get clear warning mentioned. 
The Open password is proper encryption, and a long password a decent protection. But once open (or once the password is shared) there is no real protection for an editing app. 
Even if there was solid protection against editing, it would be worthless. It would take seconds to take screen shots and make new, editable, identical PDF. Bottom line: nothing is safe. 


I agree with everything, except for one word: "identical".

When you re-create the file in this manner the result is far from identical. A lot of information is lost in the process (metadata, bookmarks, comments, fields, links, scripts, layers, attachments, signatures, etc.).

2 replies

MikelKlink
MikelKlink
Participating Frequently
March 9, 2022

You are aware that PDF encryption works with two passwords, one for the regular user, one for the owner?

You mention only one password...

Have you probably password protected your PDF using an excellent owner password but left the user password to the default empty one?

(If that's the case, one can obviously trivially unlock your PDF...)

    GuiFurlan
    GuiFurlanAuthor
    Participating Frequently
    May 4, 2023

    Thanks for the comment. In fact, I use the paid version of Adobe Acrobat and I protect PDF documents according to the screens I provide below. There is only one password:

     

    Once again tks for the interaction in the post.

    T
    Test Screen Name
    Legend
    May 4, 2023

    Yes, the editing password. This is basically worthless. Of course, if an app can read a PDF then it can edit it; the rules if PDF say to check the password but many app makers don't follow the rules. Some app makers go further and make hacking tools. They don't find the password, they just remove the protection. Adobe know this, and put out the get clear warning mentioned. 
    The Open password is proper encryption, and a long password a decent protection. But once open (or once the password is shared) there is no real protection for an editing app. 
    Even if there was solid protection against editing, it would be worthless. It would take seconds to take screen shots and make new, editable, identical PDF. Bottom line: nothing is safe. 

      Bernd Alheit
      Community Expert
      Bernd AlheitCommunity Expert
      Community Expert
      March 9, 2022

      How does you protect the PDF file? Acrobat Reader can't do this.

      When you protect the file with Adobe Acrobat you will get following message:

        GuiFurlan
        GuiFurlanAuthor
        Participating Frequently
        May 4, 2023

        Hello. First thanks for the collaboration 🙂

         

        I've seen this message before, but it's hard to believe it actually exists. I used the official Adobe tool to password protect. I usually use it online through the link https://acrobat.adobe.com/link/tools

         

        In other words, the PDF lock feature is of no use. If Adobe provides a feature for its own product, it should block it regardless of the software used to view it. After all, the file is still an Adobe file.

         

        Imagine your bank informing you: well, to access your bank account you can set a password. But if someone uses a website other than our official website to access your account, that person can access it easily. So what is the password for?

         

        It took me a while to see these interactions on my post, but given the size of Adobe and what it represents (the company and products), I'm still "shocked". Unless there's something very obvious that I'm missing.

         

        Thanks anyway for the interaction here in the post.

        Terms & ConditionsAccessibility statement
        Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices