Set enterprise encryption and key management rules for confidential client files: require certificate-based encryption…
Open Adobe Acrobat on your administrator workstation.
Select Tools in the right pane.
Choose Protect a PDF from the available tools.
Click the Encrypt option or access protection settings through the Tools menu.
Set up a new password encryption configuration for your security policy.
Choose Password Security as the encryption method.
Define password requirements (such as minimum length, complexity, and permissions restrictions) according to your organization's standards.
Best practiceFor maximum security, require long, complex passwords and restrict editing and printing permissions.
Set whether to require a password to open the document and/or to change security settings.
Choose to encrypt all document contents for best protection.
RecommendationEncrypting all contents is recommended to ensure metadata and attachments are also protected.
Save the policy with a clear, descriptive name.
Distribute the policy to users or enforce it through your organization's PDF creation and handling procedures.
Best practiceInstruct users to always apply this policy when creating or securing PDFs to maintain compliance.
You can centrally define password and encryption requirements in Acrobat so users consistently apply your organization's security standards.
This runs in the Acrobat app - there is no separate API for this task.
When you set encryption policies, you can choose AES-128 or AES-256. AES-256 offers a higher level of security, making it harder to break. For most sensitive documents, AES-256 is recommended. If you need to share with older PDF readers, AES-128 might be more compatible, but always choose the strongest encryption possible for your needs.
| Password Type | Purpose | What it protects |
|---|---|---|
| Document Open Password | To view the PDF | Prevents unauthorized viewing of the document content. |
| Permissions Password | To change restrictions on the PDF | Controls actions like printing, copying text, or editing the document. |
Yes, when you set a Permissions Password, you can choose specific actions that are still allowed. The Adobe PDF Services API, for example, supports granular permissions including 'fill-and-sign'. This means you can set up your encryption so that users can fill out forms or add their signature without being able to change other parts of the document.
It is crucial to keep an unprotected backup because if you forget the password for your encrypted PDF, there is no way to recover it. The password is not stored anywhere that can be accessed. A backup ensures you can always get to your original content, even if the encrypted version becomes inaccessible.