How to protect a pdf from copying: A step-by-step guide

A pdf is easy to share, which is exactly why it is easy to copy. In most default viewers, a recipient can select your text, paste it elsewhere, print the file, or forward it to a group chat. If that document is a contract, a research draft, a training manual, or something you sell, that convenience works against you.

This guide gives you the exact steps to protect a pdf from copying, using free and paid tools, and shows you which method to pick for your situation. Before the steps, one quick distinction decides whether your protection actually holds, so it is worth thirty seconds.

TL;DR

To protect a PDF from copying, restrict copy and edit permissions for casual protection, or set an open password with AES-256 encryption to keep unauthorized readers out of the file entirely. Flattening pages into images removes selectable text, and watermarks deter reuse and help trace leaks rather than block them. None of these survive redistribution: once an authorized reader opens the file, they can still photograph, retype, or forward the content. For content you sell or license at scale, such as an ebook, courseware, or a licensed report, use DRM, which enforces access on a server with device limits, expiry dates, and per-reader watermarking that keep applying after the file is delivered.

Table of contents

1. Before You Start: The Two Layers of PDF Protection
2. How to Restrict Copying and Editing With a Permissions Password
3. How to Lock a PDF With an Open Password and Encryption
4. How to Remove the Text Layer by Flattening to Images
5. How to Add a Watermark to Deter and Trace
6. Choosing the Right Method for Your Situation
7. Where File-Level Steps Stop and DRM Begins
8. Layering Protection Without Frustrating Readers
9. The Limits of PDF Copy Protection
10. Protect Content That Is Your Product With KITABOO
11. Final Thoughts
12. FAQs

“Protect from copying” hides two different jobs, and mixing them up is why people think a pdf is secure when it is not.

The first layer is encryption, set with an open password (also called a user password). With an open password, the file contents are scrambled. Without the password, a viewer cannot decrypt the pages, so the reader sees a prompt and nothing else. This is the only part of standard pdf protection that is cryptographically real.

The second layer is permissions, set with a permissions password (also called an owner password). Permissions do not hide the content. They flip flags inside the file that say “no copying,” “no printing,” or “no editing,” and a compliant viewer such as Adobe Acrobat grays out those buttons. The content stays fully readable to the software.

The practical takeaway: a copy restriction is a lock on the door, and encryption is a wall around the room. The steps below tell you when to use each.

This is the direct fix for “stop people copying my text.” You allow readers to open the file, but disable copying and editing. Here are three ways to do it.

Using an online pdf tool

1. Open a reputable browser-based pdf tool. Check that it runs over an HTTPS connection and has a clear privacy policy, since you are uploading your document.
2. Upload your pdf by dragging it into the upload area or choosing it from your device.
3. Select the option to restrict or protect the file, then choose to disallow copying and editing.
4. Apply the setting and wait a few seconds for the tool to process the file.
5. Download the protected pdf, reopen it, and try to select text to confirm the restriction is active.

Using Adobe Acrobat

1. Open the pdf in Acrobat and go to the protect tools, then choose to set security or encrypt with a password.
2. Turn on “Restrict editing and printing of the document” and set a Permissions Password.
3. Under “Changes Allowed” and “Enable copying,” uncheck copying of text and images, and set the changes you want to block.
4. Set the encryption level to AES-256, shown as “Acrobat X and later.”
5. Click OK, save the file, and re-enter the password when prompted to confirm.

Using Microsoft Word

Word can restrict editing before you export, but note that Word’s “Restrict Editing” is not full encryption. For copy and edit control on the exported pdf, an online tool or Acrobat gives you finer permission settings. Use Word here mainly when the source is a Word file and light restriction is enough.

What this prevents: casual copy, paste, and edits in mainstream viewers. Where it breaks: the content is not encrypted, so a permissions restriction can be removed with common tools, and some non-compliant viewers ignore it entirely. Do not rely on this alone for confidential files or for an audience you do not control.

Use this when the goal is to keep unauthorized people out of the file entirely, not just to disable copy and paste.

Using an online pdf tool

1. Open the tool and upload your pdf.
2. Choose the option to set a password to open the file. Many tools label this simply as “Protect pdf.”
3. Enter a strong, unique password.
4. Apply, then download the encrypted file.
5. Reopen it to confirm you are prompted for the password before the content appears.

Using Adobe Acrobat

1. Open the pdf and choose the option to encrypt with a password.
2. Turn on “Require a password to open the document” and enter a Document Open Password.
3. Set compatibility to “Acrobat X and later” so the file uses AES-256.
4. Save the file, then reopen it to confirm the password prompt.

Using Microsoft Word

1. Open the document in Word and go to File, then Export.
2. Choose “Create pdf/XPS Document,” then click “Create pdf/XPS.”
3. In the save dialog, click “Options.”
4. Check “Encrypt the document with a password,” then click OK.
5. Enter and confirm a strong password, then click Publish to save the encrypted pdf.

Note: use “Encrypt the document with a password,” not “Restrict Editing.” The encrypt option applies real AES encryption, while restrict editing does not fully protect the content.

What this prevents: anyone opening or reading the file without the password. Where it breaks: it does nothing once an authorized reader opens the file, since they can still copy from it unless you also add a copy restriction. Everyone who needs the file also needs the password, so plan how you will share and manage it.

Converting pages to images removes the selectable text layer, so there is nothing to copy or paste.

1. Export each page of the pdf as an image, for example as PNG or JPEG, using Acrobat’s export feature or a browser tool’s pdf-to-image function.
2. Recombine the images into a new pdf with an image-to-pdf tool.
3. Open the result and try to select text to confirm there is none to select.

What this prevents: direct text selection and extraction. Where it breaks: the file is no longer searchable, screen readers cannot read it aloud, which creates an accessibility problem, and file sizes grow. It also does not stop a screenshot, and optical character recognition (OCR), software that reads text out of images, can often rebuild the text. Use it for short, fixed, visual documents, not as a default.

A watermark does not block copying. It lowers the incentive to copy and helps you trace leaks.

Adding a visible watermark

1. Open a pdf tool with a watermark feature, such as Acrobat’s add-watermark option or a browser tool.
2. Add watermark text, for example your name, company, or “Confidential,” or upload a transparent PNG logo.
3. Set the opacity, angle, and position so it is readable without hiding the content.
4. Apply it to all pages and save the file.

Adding an invisible watermark

An invisible watermark embeds identifying data into the file so a leaked copy can be traced. Some desktop tools support this, but per-reader identifying watermarks applied automatically at scale are a DRM feature rather than a one-off editor setting.

What this prevents: nothing on its own, but a visible mark discourages casual reuse and an invisible one enables tracing.Where it fits: as a companion layer when you distribute to many recipients and want accountability.

Match the method to what you are protecting against instead of applying everything. The table stays factual. The judgment is in the note below it.

If you are sending a proposal to a client, a permissions restriction plus a watermark is proportionate. If you are emailing a document with sensitive personal or financial data, encryption with an open password comes first, and the copy restriction is secondary. If your pdf is a product you distribute to hundreds or thousands of readers, no file-level method will hold, because any single authorized copy can be freed and reshared. That case needs a different tool.

Every procedure above lives inside the file. Once an authorized reader has the file and the password, the protection has done its job and stepped aside. For content that is your revenue, an ebook, a course, a certification manual, or a licensed report, that is exactly the moment you need control to continue.

That continuing control is DRM: Protection that lives on a server rather than in the file, so access rules keep applying after distribution. Instead of shipping a locked file, a DRM platform delivers content to authenticated readers and enforces the rules you set. Typical controls include binding access to specific devices, expiring access after a set period, disabling printing and downloading, applying a dynamic watermark that stamps each reader’s identity onto their copy, and revoking access when a license ends. Because access is checked against the server each time, a copied file does not carry its permissions with it the way a password-protected pdf does.

This is the category it belongs to, and it is where a publishing platform, not a pdf editor, is the right tool. KITABOO, for example, is a cloud-based digital publishing platform with built-in DRM that protects pdf, EPUB, and HTML5 content through encryption, device and access limits, expiry dates, per-reader watermarking, and usage analytics. For a K-12 publisher, a professional association distributing credentialing material, or a training company selling courseware, that server-enforced model addresses the failure point of file-level protection: it governs the copy after it leaves your hands, not just before.

The honest tradeoff is scope. DRM adds a platform and a setup step, so it is the wrong choice for a single internal memo and the right choice when the content itself is the product.

More steps are not automatically better. Each layer is also friction for the people you want reading the document. Aim for enough deterrence for your risk level, not maximum lockdown.

• Combine layers by purpose. Pair an open password for access with a copy restriction for handling, and add a watermark when you distribute widely. Stacking every option on a low-risk document mostly annoys your readers.
• Use a strong, unique password and store it safely. Encryption is only as good as its password. Use a long mix of character types, avoid reusing it, and keep it in a password manager.
• Send the file and the password through different channels. A protected pdf and its password in the same email defeat the purpose. Send one by email and the other by message or call.
• Encrypt metadata when the option exists. A document’s title and author can stay visible even on an encrypted file. Encrypting metadata prevents casual exposure of what the file is.
• Reset protection when you repurpose a file. A document reused for a new audience carries its old settings, so reapply protection each time you redistribute.

No pdf method is absolute, and a guide that claims otherwise is not being straight with you.

A permissions restriction can be removed, because the content underneath is not encrypted. Image flattening is undone by a screenshot or by OCR. Even strong encryption protects only until an authorized reader opens the file, after which nothing stops them from retyping, photographing, or forwarding the content. This is why file-level pdf protection is best understood as a deterrent. For everyday business documents, that deterrent is usually enough, because it makes misuse inconvenient enough that most people will not bother.

The deterrent stops being enough when the content is valuable enough that someone will bother, and distributed widely enough that a single freed copy causes real loss. That is the line between a password and a rights-management system, and naming it is part of choosing the right protection.

If your pdfs are internal documents, the steps in this guide will serve you well. If your pdfs are the thing you sell or license, an ebook, a digital textbook, a certification manual, or a members-only report, file-level passwords will not survive redistribution, and protection needs to move to the server.

KITABOO secures pdf, EPUB, and HTML5 content with built-in DRM: encryption, device and access controls, expiry dates, per-reader dynamic watermarking, and analytics that show how your content is being used. Publishers, associations, and training companies use it to distribute widely while keeping control of the copy after it leaves their hands.

See how KITABOO protects your content beyond the file.

Protecting a pdf from copying starts with one question: what are you protecting, and from whom. Follow the permissions steps to stop casual copy and paste for a cooperative audience. Follow the open-password steps to keep unauthorized people out of confidential files. Use image flattening and watermarks for the narrow jobs they do well. And when the content is your product, use DRM, the only model that keeps enforcing your rules after the file is delivered.

Match the method to the risk, layer only where it earns its place, and stay clear-eyed about the limits. That is how you protect a pdf from copying in a way that actually holds.