On this page
The open password controls viewing
A PDF open password is supplied before a compatible viewer decrypts and displays the document. It should be unique, stored safely, and shared according to the sensitivity of the file.
The current Nexynto engine encrypts protected output with AES-256. The algorithm is selected by the server rather than presented as an unsupported user choice.
The owner password controls permission changes
An owner or permissions password is used when permission flags are applied or changed. It can be separate from the open password so a recipient can view the document without receiving the owner credential.
Using the same value is simpler, while a separate value creates a clearer administrative boundary. Either choice still depends on viewer behavior.
What the current engine can express
Nexynto exposes only flags that map directly to the current backend implementation.
| Control | Current support | Important limit |
|---|---|---|
| Printing | Allow or block | No separate low-resolution option |
| Copying | Allow or block extraction | Viewer enforcement varies |
| Modification | Allow or block | Not a server-side authorization policy |
| Annotations | Allow or block | Behavior can vary by editor |
| Form filling | Not exposed | No verified dedicated flag in this workflow |
When PDF permissions are not enough
Permission flags cannot revoke a file that has already been distributed and do not provide identity-aware access logs. For regulated or highly sensitive workflows, use a controlled repository, authenticated sharing, retention policy, and incident-response process.
PDF protection can be one layer in that system, not the complete system.
Put the workflow into practice
Choose passwords, review supported permission flags, and verify the server-protected result in your target PDF viewer.
Try Protect PDFFrequently asked questions
Clear answers before you protect
Do I need two passwords?
No. You can use one value for both roles, or a separate owner password when the workflow calls for it.
Can every viewer enforce permissions?
No. PDF viewers may interpret and enforce flags differently.
Can I block low-resolution printing only?
Not in the current Nexynto engine; printing is exposed as allow or block.
Is an owner password the same as access control?
No. It does not provide user identities, revocation, or server-side authorization.
