How to Protect a Fillable PDF with Passwords and Digital Signatures
Question details
The user needs a workflow to allow a recipient to fill out a PDF form and then securely lock it to prevent unauthorized alterations to the entered data or form design.
- Product
- Device & OS
- not provided
- Scenario
- Securing a fillable PDF form after data entry to prevent unauthorized modifications, opportunistic fraud, or contract tampering.
- Observed behavior
- Standard PDF readers cannot dynamically remove and restore document password security; furthermore, relying solely on permissions passwords does not fully prevent unauthorized editing by determined users.
Before securing your PDF, finalize all form fields and ensure that both you and the recipient have a compatible PDF reader that supports digital signatures.
Use Digital Signatures to Lock Form Fields
Digital signatures are the most reliable way to lock a PDF form after filling. They do not prevent all edits, but they provide undeniable proof if the document is tampered with.
A permissions password controls editing and security settings, but a digital signature verifies identity and reveals later changes. If you are trying to prevent fraud, digital signatures are highly recommended because any alteration to the document after it is signed will invalidate the signature.
Open your PDF form creator and insert two digital signature fields—one for you (the sender) and one for the client (the recipient).
Digitally sign the first field to verify your identity and the integrity of the original form, then send the file to your client.
Instruct the client to fill out the form using their PDF reader and sign the second field. Ensure the second field's properties are pre-configured to 'lock all fillable fields' upon signing.
Apply a Permissions Password for Edit Control
Use a permissions password to restrict editing and protect the form's design. This is useful for basic protection, though it requires the recipient to have advanced software to remove it.
Make Form Fields Read-Only
If security against deliberate fraud is not the primary concern and you simply want to prevent accidental changes, you can set form fields to read-only.
Secure and Manage Fillable PDFs Easily with WPS Office
WPS Office provides advanced PDF tools to create fillable forms, apply digital signatures, and encrypt documents with permissions passwords—all in one lightweight application.
- 1. Open your PDF: Launch WPS Office and open your fillable PDF form.
- 2. Navigate to the Protect Tab: Click on the 'Protect' tab located on the top ribbon to access security features.
- 3. Apply Security: Select 'Sign' to add your digital signature, or 'Encrypt' to set a permissions password.
- 4. Configure Locking Settings: If using a signature, configure the field settings to lock the form fields after signing.
- 5. Save the Document: Save your newly secured document to finalize the protection measures before distribution.
Frequently Asked Questions
Can a recipient unlock a password-protected PDF in a free reader?
Usually, standard free PDF readers do not have the capability to remove and restore document security. Advanced or paid software is typically required to modify security settings, even if the user knows the password.
Do passwords completely prevent a PDF from being edited?
No, relying solely on passwords is not a foolproof security measure against fraud. Some third-party software might bypass or ignore permissions passwords, making digital signatures a much better choice for tamper evidence.
Why should I use a digital signature instead of a password to secure forms?
A digital signature verifies the identity of the signer and locks the document's state at the moment of signing. If anyone alters the PDF after it is signed, the signature becomes invalid, clearly showing that the file was tampered with.
How can I protect secrets or pricing scripts inside a PDF form?
It is not possible to reliably hide secrets inside form scripts because PDF code can often be inspected or extracted. It is best practice to avoid putting sensitive internal pricing, passwords, or proprietary formulas directly into the form's logic.
