PDF permissions let you control exactly what recipients can do with a document. One of the most useful configurations restricts the file to form filling and signing only, allowing people to complete the document and add their signature while preventing them from editing the underlying content, copying text, or printing. This strikes the right balance for contracts, applications, tax forms, and any document that needs to be returned with data but not modified. A 2025 survey by Adobe found that 62 percent of business users who send PDF forms want recipients to fill and sign but not edit anything else (Adobe, "Digital Document Trends Report", 2025).
Key Takeaways
PDF PDF Security permission passwords can restrict a document so recipients can only fill form fields and add signatures while blocking all other actions like editing text, copying content, or printing. Setting these permissions takes under a minute in most PDF tools and adds meaningful protection against accidental or intentional content changes. Permissions are enforced by compliant PDF readers, but they are not encryption-strength security and can be bypassed by non-compliant software.
How PDF Permissions Work
The permission system is part of the document security model defined in the PDF specification. When you set restrictions on a PDF, you apply an owner password that encrypts the document's permission flags. PDF readers that comply with the specification check these flags before enabling editing, copying, or printing features. A reader that respects the permissions will gray out the Edit menu and disable the copy command while keeping form fields active and the signature panel available.
Permissions differ from an open password. An open password prevents the document from being opened at all without the password. A permission password allows anyone to open the file but restricts what they can do with it. You can set both types of protection on the same document. A common configuration for forms is no open password combined with permission restrictions that limit the recipient to filling fields and signing. This lets the recipient open the file without any extra steps while protecting the document structure.
Step-by-Step: Set Form Fill and Sign Permissions
When configuring permissions, pay attention to the difference between allowing form filling and allowing document assembly. Form filling lets the recipient type into existing form fields. Document assembly lets the recipient insert, delete, or rotate pages. These are separate permission flags in the PDF specification, but some tools label them ambiguously or combine them under a single checkbox. If your tool offers a generic 'Allow Changes' dropdown rather than individual permission toggles, test the output carefully to confirm that only form filling and signing are enabled and that page manipulation is blocked.
Open the Protect or Security panel in your PDF tool. Select the option to restrict editing and permissions. You will be prompted to set an owner password. Choose a strong password and store it securely. Without this password, even you will not be able to change the permissions later. In the permissions dialog, set the following options. For printing, choose "Not Allowed" or "None." For changes allowed, select "Filling in form fields and signing existing signature fields." For content copying, uncheck the box that enables text and image copying. Leave the option for text access for screen readers enabled to maintain accessibility compliance.
Apply the settings and save the document. Open the saved file in a standard PDF reader to verify the permissions. The reader should allow you to click into form fields, type text, select checkbox options, and apply a signature. The same reader should prevent you from editing body text, deleting pages, or copying content to the clipboard. If the form has a submit button, test it to confirm that submitted data is transmitted correctly from the restricted document. WukongPDF's Protect PDF tool includes a preset for form-fill-and-sign-only permissions, so you do not need to configure each option individually.
Permission Settings Comparison Table
| Permission Setting | Recommended Value | Effect on Form Users |
|---|---|---|
| Printing | Not Allowed | Cannot print, preserves digital-only workflow |
| Changes Allowed | Form filling and signing | Can complete fields and sign but not edit text |
| Content Copying | Not Allowed | Text cannot be copied, protects document text |
| Text Access for Screen Readers | Enabled | Maintains accessibility, required for compliance |
| Page Extraction | Not Allowed | Pages cannot be removed or extracted |
| Commenting | Not Allowed | Prevents annotations that could obscure form fields |
What the Recipient Sees When They Open the Restricted PDF
When a recipient opens a PDF restricted to form filling and signing, the experience is designed to be straightforward. The form fields are visibly highlighted or outlined, often in a light blue color, indicating they are interactive. The cursor changes to a text insertion point when hovering over a fillable field. Tab order moves the cursor from one field to the next in sequence. The signature field, if present, displays a prompt to click or tap to sign.
The editing tools that would normally appear in the PDF reader's toolbar are either hidden or grayed out. The recipient cannot select body text with the text selection tool, but they can select their own entries in form fields to correct typos. If the recipient attempts to edit the static content of the document by clicking on body text, nothing happens. This clear visual distinction between editable fields and protected content reduces confusion and support requests.
Important Limitations to Understand
Permissions also cannot prevent a determined recipient from taking a screenshot of each page and running optical character recognition on the captured images. This is not a flaw in PDF security specifically; it is a fundamental limitation of any document protection that allows the content to be displayed on screen. For documents where this level of extraction would be problematic, consider whether the information should be shared in PDF form at all, or whether a secure document portal with view-only access and no download option would be more appropriate.
The effectiveness of PDF permissions also depends on the PDF reader version. Older versions of some PDF readers, particularly those released before 2020, may not fully support the permission model defined in PDF 2.0. A document restricted with AES-256 encryption might open as fully editable in a reader that only understands the older RC4 encryption standard and therefore ignores the permission flags it cannot parse. Testing a restricted document in at least two different readers, one desktop and one mobile, is a practical way to catch compatibility gaps before distributing the form to a large audience.
These restrictions are enforced by the PDF reader software, not by the operating system or the file system. A PDF reader that fully implements the PDF specification will respect the permissions. However, not all PDF readers comply with the specification. Some third-party readers, particularly older versions or lightweight mobile apps, may ignore permission flags and allow editing of restricted documents. Permissions are a practical barrier, not a cryptographic guarantee. For documents where editing by the recipient would cause serious harm, consider additional protections such as digitally signing the document so that any changes are immediately detectable.
Permissions also do not prevent the recipient from printing the form to a new PDF using a virtual PDF printer, which creates an unrestricted copy. If printing is disabled but the recipient has administrative access to their computer, they can install software that captures the screen rendering of each page and generates a new unrestricted PDF from the captured images. These workarounds require effort and technical knowledge, so they are not a concern for routine business forms, but they mean that permissions alone should not be relied upon for highly sensitive or high-value documents.
Frequently Asked Questions
Can the recipient tell that the PDF has permission restrictions before they try to edit it? In most PDF readers, the document properties dialog shows the security settings, including the list of allowed and disallowed actions. A recipient who checks this before filling the form will see exactly what they can and cannot do. Additionally, many readers display a lock icon or a security banner at the top of the document window. This transparency is helpful because it sets clear expectations before the recipient attempts an action that will be blocked.
Can I set form-fill-only permissions without a password?
No, setting any editing restriction requires an owner password. The password is what encrypts the permission flags. Without an owner password, anyone could open the document and remove the restrictions. Choose a password that is different from any document open passwords you use and store it in a password manager or secure note.
What happens if I forget the owner password?
You will not be able to change or remove the permissions from the document. The file will remain permanently restricted. For this reason, store the owner password immediately after setting it. If you do lose the password, some PDF unlock tools can remove restrictions from documents, although this may not be appropriate for documents where you are not the rightful owner.
Can I allow printing after setting form-fill-only restrictions?
Yes, permissions are granular. You can allow printing while still restricting editing to form filling and signing. This configuration is useful for forms that recipients need to print and mail, or for situations where a paper backup is required. The print permission is independent of the editing permission, so enabling it does not weaken the editing restrictions.