How to Lock a PDF From Editing and Copying (Contracts, NDAs, and Legal Docs)

You just finalized a contract or NDA. Before you send it, you need to make sure the recipient can view and sign it — but can't silently edit the terms, copy the text into another document, or strip out clauses they don't like.

Here's how to lock it down properly.

The Quick Version

Two tools, thirty seconds:

1. Password Protect your PDF with a permissions password that disables editing and copying
2. Add a watermark — "Confidential" or "Final Version" — so any printout or screenshot is visually marked

That combination handles 90% of contract protection needs. The password blocks digital manipulation. The watermark deters screenshots and unauthorized sharing.

Step 1: Set a Permissions Password

PDF encryption supports two types of passwords. For contracts, you want the permissions password (also called the owner password) — not the open password.

The difference matters:

• Open password: Blocks anyone from viewing the file at all. Not what you want for a contract the other party needs to read.
• Permissions password: Lets anyone open and view the PDF, but restricts editing, copying, and sometimes printing.

Using PDFShift's Password Protect tool:

1. Upload your contract PDF
2. Set a permissions password (the recipient won't need to know this)
3. The tool disables text copying, content editing, and document modification
4. Download the protected file

The recipient opens the PDF normally — no password prompt. But when they try to select text, copy content, or open the file in an editor, those actions are blocked.

An Important Caveat

Permissions passwords are a deterrent, not a vault. Some PDF readers and tools can bypass owner passwords. For casual protection — preventing a client from easily copying contract language or an employee from tweaking an NDA — it works well. For genuinely adversarial situations where someone is motivated to break the protection, you need additional measures (more on that below).

Think of it like a locked car door. It stops opportunistic access. It won't stop someone with tools and intent.

Step 2: Add a Visual Watermark

A permissions password blocks digital editing, but it can't stop someone from taking a screenshot or photographing the screen. That's where watermarks come in.

Using PDFShift's Watermark tool:

1. Upload the protected PDF
2. Choose your text — "Confidential", "Final Version", or "Do Not Distribute"
3. Set opacity to 20-30% (visible but doesn't obscure the contract text)
4. Download the watermarked file

The watermark is baked into the page content. It can't be removed by opening the file in another PDF tool — someone would need to recreate the entire document to eliminate it.

For contracts specifically, "Confidential" or the recipient's name works well. Personalized watermarks ("Prepared for Acme Corp") create accountability — if the document leaks, you know which copy was shared.

What About Digital Signatures?

Permissions and watermarks prevent tampering, but they don't prove the document hasn't been tampered with. That's what digital signatures do.

A digital signature creates a cryptographic seal. If anyone modifies even a single character after signing, the signature breaks and the PDF reader shows a warning. This is the gold standard for legal documents.

PDFShift doesn't currently offer digital signatures, but most contract workflows use dedicated e-signature platforms (DocuSign, HelloSign, Adobe Sign) for this step. The protection workflow looks like:

1. Finalize the contract
2. Lock editing and copying with Password Protect
3. Add a watermark
4. Send for digital signature through your signing platform

The protection prevents pre-signature tampering. The signature prevents post-signature tampering.

Real Scenarios and What to Do

Sending a Contract to a Client for Review

Goal: They can read it, but shouldn't be able to copy paragraphs into their own documents or edit terms before signing.

Setup: Permissions password (no open password) + "Draft" watermark at 15% opacity. Change the watermark to "Final Version" once terms are agreed.

Distributing an NDA to New Employees

Goal: Employees need to read and sign, HR needs to prevent unauthorized copies floating around.

Setup: Permissions password blocking copying + "Confidential — [Company Name]" watermark at 25% opacity. Consider using the employee's name in the watermark for each copy if you want to track distribution.

Sharing a Lease Agreement With Tenants

Goal: Tenants read and sign the lease, but can't modify terms or copy the language for use in disputes without the full context.

Setup: Permissions password blocking editing + "Official Copy" watermark. You keep the unprotected master version.

Archiving Executed Contracts

Goal: Contracts are signed and filed. Nobody should be modifying them after execution.

Setup: Open password (so only authorized people can access the archive) + permissions password (so even authorized viewers can't accidentally edit). No watermark needed — these aren't being distributed.

Layered Protection: The Full Checklist

For maximum protection on important legal documents, stack these:

1. Permissions password — blocks editing, copying, and content extraction
2. Watermark — deters screenshots and marks unauthorized copies
3. Open password — if the document should only be accessible to specific people (share the password through a separate channel — text the password, email the PDF)
4. Digital signature — proves the document hasn't been modified after signing
5. Secure delivery — encrypted email or a secure file-sharing platform with access controls

You don't always need all five. A contract going to a trusted client might only need steps 1 and 2. A sensitive M&A document might need all five.

What Doesn't Work

Converting to an image PDF. Some people flatten contracts to images so the text can't be selected. This kills accessibility, makes the file huge, and anyone with OCR (including PDFShift's OCR tool) can extract the text anyway. Skip this approach.

Printing and scanning. Same idea, same problems. Plus you lose document quality.

DRM or proprietary viewers. Requiring the recipient to use a special viewer to read your contract creates friction and looks unprofessional. Stick with standard PDF protection.

Quick Workflow: Start to Finish

Here's the complete process for a contract you're about to send:

1. Open PDFShift's Password Protect tool
2. Upload your finalized contract
3. Set a permissions password — write it down somewhere you won't lose it
4. Download the protected PDF
5. Open the Watermark tool
6. Upload the protected PDF
7. Add "Confidential" at 25% opacity
8. Download the final version
9. Send it

Total time: under a minute. Total cost: free.

When You Need More

If you're handling high volumes of legal documents — law firms processing dozens of contracts weekly, HR departments onboarding in batches — doing this one file at a time gets tedious. PDFShift Pro's Batch Process tool lets you protect and watermark multiple PDFs in a single pass.

For documents that need court-admissible digital signatures and full audit trails, Adobe Acrobat Pro remains the industry standard for legal workflows. It handles certificate-based signatures, redaction, and permission controls that go beyond what free tools offer.

The Bottom Line

Protecting a contract PDF takes two steps: password protect it to block editing and copying, then add a watermark to deter screenshots and mark unauthorized copies. Neither step requires Adobe, neither costs anything, and both run directly in your browser. Lock it, mark it, send it.