Controlling what recipients can do with your PDF is a core part of PDF Security. Setting permissions for form filling only means the user can type into form fields, select dropdown options, and check boxes, but cannot modify the underlying document text, images, or layout. This restriction is essential for any form where the questions, instructions, and branding must remain unchanged while still collecting accurate user input.
Permission-based restrictions are set through the PDF's security settings, not through the form field properties themselves. You assign a permissions password, also called an owner password or master password, that locks the document content. Recipients do not need this password to open or fill the form. They only need it if they want to change the permissions you set. Applications from government agencies, medical intake forms, and legal templates all use this pattern to protect document integrity while enabling data collection.
WukongPDF's Protect PDF tool lets you set fine-grained permissions including form-filling-only access directly from your browser. After protecting the file, the form fields remain fully interactive for recipients while the body content stays locked.
Understanding PDF Permission Types
Adobe's PDF specification defines multiple independent permissions that can be toggled on or off: printing, content copying, page extraction, commenting, form filling, signing, and document assembly. The form filling permission governs whether a user can interact with form fields. When form filling is allowed but content editing is not, the PDF reader enables the hand tool over form fields while disabling text selection and editing tools for the rest of the document.
In 2023, Adobe reported that 67% of fillable PDF forms distributed by businesses included permission restrictions of some kind, with form-filling-only being the most common configuration (Adobe, Document Cloud Usage Trends Report, 2023). This reflects the practical need to collect data without risking document tampering.
Step-by-Step: Setting Form-Filling-Only in Adobe Acrobat Pro
Open the PDF in Acrobat Pro and go to File, then Properties. Click the Security tab. From the Security Method dropdown, choose Password Security. In the Password Security Settings dialog, check the box labeled Restrict editing and printing of the document. Set the Printing Allowed dropdown to your preference, usually High Resolution. Set the Changes Allowed dropdown to Filling in form fields and signing existing signature fields. This is the critical setting that enables form filling while blocking text editing, page deletion, and content modification.
Type a permissions password in the Change Permissions Password field. This password is separate from any document open password. Store it somewhere secure; if you lose it, you cannot change the permission settings later without using a dedicated removal tool. Click OK, confirm the password, and save the PDF. Open the saved file in Acrobat Reader to verify that the form fields accept input while the Edit PDF tool is grayed out or absent from the toolbar.
Setting Permissions Using an Online PDF Tool
Most online PDF protection tools present a simpler interface for setting form-filling permissions. After uploading the PDF, look for a Protect, Permissions, or Restrict Editing section. Enter a permissions password, then select Allow form filling from the list of allowed actions. Leave the content editing, copying, and page extraction checkboxes unchecked. Apply the protection and download the secured PDF.
Online tools typically offer the same underlying permission flags as desktop software because the PDF specification is standardized. However, the encryption strength may differ. Acrobat Pro uses 256-bit AES encryption by default, which provides strong protection. Some online tools default to 128-bit AES, which is still adequate for most business use. Check the tool's documentation or FAQ page to confirm the encryption standard before uploading sensitive documents.
Verifying That Permissions Work Correctly
After applying restrictions, always test the PDF in a different application than the one you used to set the permissions. Open the file in Adobe Acrobat Reader, Preview on Mac, and a browser-based PDF viewer. Try to type in each form field. Try to select and copy body text. Try to delete a page. The form fields should accept input in all three readers. The text selection should be blocked or produce a permissions warning. Page deletion should be unavailable.
If form fields are not editable after applying permissions, the most likely cause is that the Changes Allowed setting was set to None instead of Filling in form fields. Reopen the security settings and verify the dropdown value. Another possibility is that the form fields themselves have their Read Only property set to true in the field properties, which prevents filling regardless of document-level permissions.
Limitations to Know About
| Permission Setting | What It Allows | When to Use |
|---|---|---|
| Read only, no filling | View document, cannot fill fields | Reference documents, final outputs |
| Form filling only | Fill fields, cannot edit content | Job applications, intake forms |
| Fill + annotate | Fill fields, add comments | Review workflows, approvals |
| Fill + edit content | Fill fields, edit text/images | Collaborative drafting |
Permission-based restrictions are enforced by the PDF reader application, not by the file itself. A PDF reader that ignores permission flags, or a user who removes the permissions password with a third-party tool, can bypass the restrictions you set. For highly sensitive documents, combine form-filling permissions with a document open password, digital signature, or DRM solution that provides stronger enforcement. For everyday business forms where the goal is to prevent accidental edits rather than deliberate tampering, standard permission settings provide a practical balance of protection and usability.
Setting PDF permissions for form filling only is a straightforward process that takes less than a minute once you know where the security settings live. The return on that minute is a form that collects clean, consistent data while keeping your original content intact across every submission.
On a Mac, the built-in Preview app can also apply basic form-filling protection. Open the PDF in Preview, go to File, then Export, check the Encrypt box, and set a password. Preview applies 128-bit AES encryption and restricts editing by default while leaving form fields interactive. Preview does not expose granular toggles for individual permissions. If you need separate control over printing and form filling, use a dedicated PDF security tool or Acrobat Pro instead.
Removing or Changing Permissions Later
If you need to update the permission settings on a protected PDF, you must have the permissions password you set originally. Open the file in Acrobat Pro, go to File, Properties, Security, and click Change Settings. Enter the permissions password when prompted. Adjust the Changes Allowed dropdown to the new setting, update the password if desired, and save the file. If you have lost the permissions password, you need a PDF unlock tool that can remove the restrictions. Most online PDF unlock services handle this by uploading the file, stripping the security settings, and returning an unrestricted copy.
The legal status of removing PDF permissions matters. If you set the permissions yourself and lost the password, using an unlock tool on your own document is unproblematic. If the document was protected by someone else and you do not have their authorization to remove restrictions, circumventing the permissions may violate the document owner's rights and, depending on your jurisdiction, applicable laws. Always confirm you have the right to modify the document's security settings before running any removal tool.
Setting Permissions in Batch for Multiple PDFs
When you need to apply the same form-filling-only permissions to dozens of PDFs, processing them one at a time is impractical. Adobe Acrobat Pro includes an Action Wizard that automates batch security operations. Open the Action Wizard from the Tools panel, create a new action, and add the Protect step with your desired permission settings, selecting form filling only as the changes allowed option. Save the action and run it on a folder of PDFs. Each file receives identical permission settings without manual repetition.
Form-filling-only permissions also serve as a gentle defense against casual document tampering. Unlike full DRM solutions that require license servers and authentication portals, simple PDF permission flags work in any standard reader without additional infrastructure. The tradeoff is that they can be removed by a determined user with access to PDF unlock tools. For internal forms shared among trusted colleagues and for external forms where the goal is preventing honest mistakes rather than malicious alteration, permission flags strike the right balance between protection and usability without adding friction to the form-filling experience.
For teams managing form libraries where the same permission policy applies to every form, batch processing ensures consistency. No single form accidentally ships with looser permissions than the rest. A three-minute test on a small sample before scaling to the full batch prevents discovering permission gaps across hundreds of distributed forms. Setting form-filling-only permissions is a one-time configuration step per document that protects against accidental content modification for the entire lifespan of the form. For organizations distributing hundreds of fillable PDFs to external users each month, establishing a standard permission template that every form creator follows eliminates the variation that leads to some forms shipping with editing enabled by mistake. A documented internal process combined with batch application of permissions via Acrobat Pro's Action Wizard turns PDF security from an afterthought into a consistent, repeatable step. Over time, this consistency builds trust with form recipients who come to expect that your forms protect their input while preserving the original structure exactly as designed, reducing support requests from confused users who accidentally modified locked content.