Loading...
Loading...
What actually happens to your file, and what these tools really do
PDF tools get asked to handle contracts, tax paperwork, ID scans and other files people would rather not mishandle. This guide explains, in plain terms, what happens when you use an online PDF tool and what the security-related tools on this site actually do under the hood — not just what their buttons are labeled.
Most real PDF operations — compressing with Ghostscript, running OCR, converting to Word or PowerPoint, encrypting with a password — depend on server-side libraries that don't run inside a browser tab. So the honest, useful question isn't “does this happen locally,” it's what happens to the file afterward, and how quickly. On DocShift, every upload is processed and then deleted from the server the moment the job finishes — there is no database of user files and nothing is kept, logged or shared. The full commitment is on the privacy policy.
Password protection on a PDF can mean two different things. A user password is required just to open the file. An owner or permissions password leaves the file readable but restricts actions like printing, copying text, or editing. Some encryption tools let you set these two independently; DocShift's Protect PDF applies AES-256 encryption using a single password for both roles, rather than a two-tier system — worth knowing if you specifically needed separate open and permissions passwords. Need to remove a password instead? Unlock PDF does that, provided you already have the correct password.
This distinction matters more than it sounds. Genuine redaction strips the underlying data out of the file entirely. Simply drawing a black rectangle over text — a common shortcut in basic PDF editors — only covers it visually; the original characters can still be sitting in the file's content stream, recoverable by selecting and copying the “hidden” text or by opening the file in a different viewer. Never rely on a visual overlay alone for anything you actually need removed. If your goal is restricting who can open or modify a file rather than deleting specific content from it, that's what encryption is for.
A visible signature — typed in a cursive font, drawn with a mouse or finger, or a scanned image — is a mark stamped onto the page. A certificate-based digital signature is a different thing entirely: it uses a PKI certificate to cryptographically bind a signer's identity to the exact bytes of the document, so any later change is detectable. Sign PDF on DocShift places a visible signature onto your document — it does not apply a certificate-based signature. For most everyday paperwork a visible signature is exactly what's expected; for anything with a strict legal signing requirement, check what that specific process requires first.
Ordinary PDFs can reference fonts or content that live outside the file, which is fine today but can break in a viewer decades from now. PDF/A is a restricted version of the format built specifically to still render correctly after a very long time — fonts are embedded, and features that depend on external resources or non-deterministic playback are disallowed. PDF to PDF/A converts a document toward that archival format; if an institution needs a specific PDF/A conformance level, confirm the requirement with them directly rather than assuming any converter covers it automatically.
It depends entirely on what that specific service does with your file afterward — not on where the processing happens. Look for a clear statement of when the file is deleted, and be cautious of any tool that doesn't say.
Redaction removes the underlying data from the file. Drawing a black box only hides it visually — the original text can still exist underneath and be recoverable by copying, searching, or opening the file in another program. The two are not interchangeable for anything genuinely sensitive.
A typed or drawn signature image, on its own, is a visual mark — it shows intent but carries none of the cryptographic identity-verification of a certificate-based digital signature (the kind backed by a PKI certificate that proves who signed and whether the document changed afterward). Whether a visual signature is sufficient depends on what you're signing and which jurisdiction's rules apply — check with whoever requires the signed document if you're unsure.
PDF/A is a version of the PDF format designed for long-term archiving — it embeds fonts and restricts features that could make a file unreadable years later. You need it if an archive, court, or institution specifically asks for a PDF/A file; for everyday sharing, a normal PDF is fine.
A user password is required to open the file at all. An owner (permissions) password leaves the file openable but restricts actions like printing or editing. Some tools let you set these separately; others apply a single password to both roles — check which model a specific encryption tool uses before relying on it.