What are the limits of the check?

The marker scan does not decrypt files, decode permission flags, determine password requirements, identify cryptographic algorithms reliably, validate digital signatures or certificates, or assess whether a document is secure or safe.

PDF Security Checker FAQ – Common Questions Answered

Q: What does the security checker report?

It uses PDF.js locally on PDFs up to 20MB to report effective permissions, signature fields, document-level JavaScript, and embedded files. It does not validate or verify signatures.

Q: Does the file leave my browser?

No. PDF.js parses the uploaded file locally in your browser.

Back to PDF Security Checker

Quick Answer

The tool uses PDF.js locally on PDFs up to 20MB to report effective permissions, signature fields, document-level JavaScript, and embedded files. It does not validate or verify signatures and does not certify that a document is secure or safe.

Frequently Asked Questions

What does the security checker report?

PDF.js reports effective permissions, signature fields, document-level JavaScript, and embedded files. The tool does not validate or verify signatures.

Does it verify the document's security?

No. Marker presence or absence does not prove cryptographic validity or document safety. Use a dedicated PDF reader or security product for authoritative inspection.

Does the file leave my browser?

No. The raw-byte scan runs locally in your browser.

Troubleshooting

A marker is absent even though another reader reports a restriction

This tool performs a raw-byte structural-marker scan, not a full PDF parse or decryption. Compressed, encrypted, incremental, or otherwise indirect structures may not be found. Treat an absent marker as inconclusive.

File cannot be selected

The input accepts PDF files up to 20MB. A valid PDF MIME type is required; larger files and other file types are rejected before scanning.