How to Encrypt/Add Password & Permissions to PDF Files

Securing PDF files with passwords and specific permissions is vital for protecting sensitive documents from unauthorized access and manipulation. The [POST] Encrypt/Add Password & Permissions API from IronSecure Doc provides an efficient way to encrypt PDF files with user and owner passwords while configuring permissions for printing, form filling, annotations, and more. This API ensures that the PDF is fully protected and access is controlled, making it ideal for legal, financial, or personal documents.

Pull and Start IronSecureDoc

If you don't have IronSecureDoc running yet, please follow the links below to get it set up:

Host LocallyDeploy to Cloud

The [POST] Encrypt/Add Password & Permissions API

The [POST] Encrypt/Add Password & Permissions API allows you to add security layers to PDF documents by encrypting them with passwords and setting specific permissions for various operations. Whether it's granting read access, allowing form filling, or disabling printing, this API gives you control over how your PDF files are accessed and modified.

Swagger

Swagger offers a user-friendly interface to test this API interactively. You can use it to send test requests and receive responses without writing code, making it a great tool for developers.

Steps to Redact Text with Swagger

  1. Access the Swagger UI:

If your API server is running locally, you can access Swagger by navigating to http://localhost:8080/swagger/index.html in your web browser.

Swagger docs

  1. Locate the API:

Find the [POST] /v1/document-services/pdfs/encrypt API, which corresponds to Encrypt/Add Password & Permissions.

Redact text

  1. Input Parameters:

Provide the required parameters for the API. You can upload a sample PDF file and specify the desired permissions.

  1. Upload PDF File:

In the request body, upload a PDF file as pdf_file and define the necessary permissions, such as allowing or restricting printing, form filling, and content extraction.

  1. Execute the Request:

Once all parameters are set, click "Execute" to send the request. The response will return the encrypted PDF with the specified security settings.

  1. Check the Output PDF:

Type in 'password' to view the PDF content.


Understanding Input Parameters

The API requires specific parameters to encrypt the PDF and assign permissions. Below is a breakdown of both required and optional parameters:

Required Parameters

NameData TypeDescription
pdf_fileapplication/pdfThe PDF file you want to encrypt.
allow_extracting_contentbooleanIndicate whether content extraction is allowed.
allow_form_fillingbooleanIndicate whether form filling is allowed.
allow_annotationsbooleanIndicate whether annotations are allowed.
allow_printingbooleanIndicate whether printing is allowed.
allow_modificationsbooleanIndicate whether modifications are allowed.
new_owner_passwordstringThe new owner password for the PDF, which grants full access and the ability to change permissions.

Optional Parameters

NameData TypeDescription
user_passwordstringThe current user password, required if the PDF has a user password to grant read access.
owner_passwordstringThe current owner password, required if the PDF has an owner password to grant full access.
new_user_passwordstringThe new user password for read access.
save_as_pdfabooleanSave the PDF as PDF/A-3 compliant.
save_as_pdfuabooleanSave the PDF as PDF/UA compliant.
authorstringSet the PDF metadata Author property.
titlestringSet the PDF metadata Title property.
subjectstringSet the PDF metadata Subject property.

API Integration: Python Example

Once you're familiar with the input parameters, you can call the API using Python or any other preferred language. Below is an example of how to integrate this API using Python.

import requests

# Endpoint URL
url = 'http://localhost:8080/v1/document-services/pdfs/encrypt'

# Headers with metadata information
headers = {
    'accept': '*/*',
    'author': 'IronSoftware',
    'title': 'ENCRYPTION DEMO 2024',
    'subject': 'DEMO EXAMPLE'
}

# Files to be sent in the request
files = {
    'pdf_file': ('sample.pdf', open('sample.pdf', 'rb'), 'application/pdf')
}

# Parameters for encryption and permissions
data = {
    'allow_extracting_content': 'true',
    'allow_form_filling': 'true',
    'allow_annotations': 'false',
    'allow_printing': 'false',
    'allow_modifications': 'true',
    'new_owner_password': 'password',
    'new_user_password': 'password',
    'save_as_pdfa': 'false',
    'save_as_pdfua': 'false'
}

# Send POST request with parameters
response = requests.post(url, headers=headers, files=files, data=data)

# Save the encrypted PDF to file system
with open('sample_encrypted.pdf', 'wb') as f:
    f.write(response.content)

print('PDF encrypted successfully.')
import requests

# Endpoint URL
url = 'http://localhost:8080/v1/document-services/pdfs/encrypt'

# Headers with metadata information
headers = {
    'accept': '*/*',
    'author': 'IronSoftware',
    'title': 'ENCRYPTION DEMO 2024',
    'subject': 'DEMO EXAMPLE'
}

# Files to be sent in the request
files = {
    'pdf_file': ('sample.pdf', open('sample.pdf', 'rb'), 'application/pdf')
}

# Parameters for encryption and permissions
data = {
    'allow_extracting_content': 'true',
    'allow_form_filling': 'true',
    'allow_annotations': 'false',
    'allow_printing': 'false',
    'allow_modifications': 'true',
    'new_owner_password': 'password',
    'new_user_password': 'password',
    'save_as_pdfa': 'false',
    'save_as_pdfua': 'false'
}

# Send POST request with parameters
response = requests.post(url, headers=headers, files=files, data=data)

# Save the encrypted PDF to file system
with open('sample_encrypted.pdf', 'wb') as f:
    f.write(response.content)

print('PDF encrypted successfully.')
PYTHON

Steps Explained:

  • Load the PDF: The PDF file to be encrypted is loaded from the local file system.
  • Set Encryption Parameters: Define permissions like allowing printing, form filling, and content extraction, as well as setting new passwords.
  • Call the API: The [POST] Encrypt/Add Password & Permissions API is called, passing the necessary parameters.
  • Save the Result: The encrypted PDF is saved as a new file.

The PDF file is encrypted as shown below. Type in 'password' to view the PDF content.

Frequently Asked Questions

What is the purpose of the Encrypt/Add Password & Permissions API?

The Encrypt/Add Password & Permissions API allows you to secure PDF files by encrypting them with passwords and setting specific permissions to control access and modifications, making it ideal for protecting sensitive documents.

How can I start using IronSecureDoc?

You can start using IronSecureDoc by pulling and starting the IronSecureDoc Docker Image. Follow the setup instructions for hosting locally or deploying to the cloud on platforms like Azure or AWS.

What permissions can be configured using the API?

The API allows you to configure permissions for printing, form filling, annotations, content extraction, and modifications on the PDF files.

How do I test the API using Swagger?

You can use Swagger to test the API interactively by accessing the Swagger UI, locating the appropriate API endpoint, inputting the necessary parameters, and executing the request to see the response.

What are the required parameters for encrypting a PDF?

Required parameters include the PDF file you want to encrypt, and boolean indicators for allowing content extraction, form filling, annotations, printing, and modifications. You also need to set a new owner password.

Can I save the encrypted PDF as PDF/A or PDF/UA compliant?

Yes, the API provides optional parameters to save the encrypted PDF as PDF/A-3 or PDF/UA compliant.

What is the role of user and owner passwords in PDF encryption?

The user password grants read access to the PDF, while the owner password provides full access and the ability to change permissions. You can set new passwords for enhanced security.

How do I integrate the API using Python?

To integrate the API using Python, you can use the requests library to send a POST request to the specified API endpoint, including headers, files, and data parameters. The response will contain the encrypted PDF.

What tools are necessary for hosting IronSecureDoc locally?

IronSecureDoc can be hosted locally on Windows, Mac, or Linux. You need to follow the specific tutorials for your operating system to set it up correctly.

Is it possible to modify the metadata of the PDF during encryption?

Yes, you can modify the PDF metadata by setting properties like author, title, and subject using the API's optional parameters.

Chaknith Bin
Software Engineer
Chaknith works on IronXL and IronBarcode. He has deep expertise in C# and .NET, helping improve the software and support customers. His insights from user interactions contribute to better products, documentation, and overall experience.