PDF Permissions Inspector

See why a PDF cannot be printed or copied: its encryption method and permission flags are listed, and each blocked permission is explained. This tool does not remove restrictions, and your PDF is not uploaded.

On-device・No uploadMobile friendlyWorks offline

Your files and input are processed only inside your browser on this device and are never uploaded to our servers.

Reads the encryption method, whether a password is needed to open, and the print, copy and edit permissions. It does not take, remove or guess passwords. Your PDF is not uploaded.

Drop files here (multiple allowed)

or

PDFs are read only inside your browser. Nothing is sent.Accepts: PDFUp to 100 MB per filePaste (Ctrl+V) also works

    How to use

    1. contract.pdf
      spec.pdf

      Add PDFs (up to 30)

    2. contract.pdfAES 256
      spec.pdfCopy not allowed

      Read the encryption and permissions

    3. list.csv
      list.md

      Save as CSV or Markdown

    Read the encryption and permissions of several PDFs and make a one-row-per-file table
    1. Drop a PDF or click “Choose files”. You can check several files at once (up to 30).

    2. The encryption method (RC4, AES 128- or 256-bit) and whether a password is needed to open each file are shown.

    3. Printing, high-quality printing, changes, copying, annotations, form filling, accessibility extraction and page assembly are each listed as allowed or blocked, with the reason.

    4. For an audit, save the results as CSV or Markdown. Each file becomes one row.

    What it does

    Reads permission bits per revision

    Each bit of /P is judged only within what the revision (R) defines: R2 covers print, change, copy and annotate; R3 and later also cover form fill, accessibility, assembly and high-quality print.

    States why printing or copying is blocked

    Shows combinations such as “low-resolution printing only” or “copy blocked but accessibility extraction allowed” in plain language.

    Shows the encryption method

    From /Filter /Standard with V, R and Length, identifies RC4 40/128-bit, AES 128-bit or AES 256-bit. Certificate encryption is shown as encrypted only; its method is not read.

    Lists items to be aware of

    Looks through the file for JavaScript, embedded files, Launch actions, external links (URI) and OpenAction.

    Batch check and export

    Checks several PDFs together and saves the results as a CSV (UTF-8 with BOM) or a Markdown table.

    Use cases

    • Find out why a PDF from a supplier cannot be printed before asking them
    • Check, before publishing, whether copying or editing is blocked in a PDF you distribute
    • Keep a CSV record of the encryption method and permissions of many internal PDFs
    • See whether a file opens without a password before sharing it

    Supported formats

    Input

    PDF (.pdf), up to 100 MB per file, up to 30 files at once

    Output

    CSV (UTF-8 with BOM) or Markdown table, one row per file

    Capability matrix

    FeatureSupportNotes
    Shows whether a file is encrypted and its method (RC4 40/128-bit, AES 128/256-bit)Supported—
    Lists each permission bit in /P and explains the reasons for restrictionsSupportedJudged only by the bits defined for the revision (R)
    Checks whether the file opens with an empty passwordSupportedOnly the empty password is tried
    Presence of JavaScript, embedded files, external links and similarPartialIn encrypted PDFs, the encrypted parts cannot be read
    Number of digital signaturesPartialCounts only; validity is not checked
    Entering, removing or guessing a passwordNot supportedIf you know the password, use “PDF Unlock (Known Password)”
    Removing or changing permissions (print, copy, edit limits)Not supportedNot provided. The author sets these; use them within copyright and terms of use
    Verifying digital signaturesNot supportedOnly the presence and count are shown
    Reading the method and permissions of certificate (public-key) encrypted PDFsNot supportedShown as encrypted only (method “Unsupported”)

    Limits & notes

    • Up to 100 MB per file and 30 files at once. Large files take longer to read.
    • In encrypted PDFs the contents of encrypted objects cannot be read, so “not found” for JavaScript and the like does not prove absence.
    • Permissions are settings written in the PDF that viewers are expected to follow. They do not stop a determined user.
    • Files are read following the PDF specification. Damaged files or files written outside the specification may not be readable.
    • It works on phones too. For checking many PDFs at once, a PC is recommended (up to 30 at a time).

    Privacy & safety

    Reading the PDF, judging its permissions and exporting results all happen inside your browser. Neither the PDF nor its file name is sent or stored on a server, and they are not included in usage measurement.

    FAQ

    Why can’t I print the PDF?
    When the print permission in /P is blocked, a conforming viewer stops printing. “Low-resolution printing only” means only the high-quality print permission is blocked. This tool lists which permissions are blocked.
    Can this remove the restrictions?
    No. This tool does not change or remove permissions. To remove the protection of a PDF whose password you know, use “PDF Unlock (Known Password)”.
    Why can I read aloud a PDF where copying is blocked?
    Separately from the copy permission, PDFs from revision 3 on have a permission for extracting text for assistive technology. When it is allowed, text can be extracted for screen readers.
    Can this tell whether a digital signature is valid?
    No. It only counts signatures and shows whether any exist. Validity must be checked with software that can handle the certificate used for the signature.
    Is my file sent anywhere?
    No. Everything is read inside your browser, and the results are shown or saved there.
    What about a PDF that is not encrypted?
    It has no permission settings, so printing, copying and editing are not restricted. Presence of JavaScript and external links can still be checked.

    Last updated: