How do PDF passwords, permissions and redaction work?
PDF encryption (ISO 32000, AES-256 in current files) has two passwords: the user password opens the document, the owner password controls permissions such as printing, copying and editing. Permissions are advisory flags that compliant readers honour, not a cryptographic barrier. Redaction is different from covering: a black box drawn over text leaves the text in the file, whereas true redaction removes it from the content stream — and metadata, attachments and thumbnails can leak what the pages no longer show.
Security note: Before sharing a redacted or "cleaned" PDF, inspect its metadata and text layer: what a viewer cannot see may still be in the file. Permissions stop honest readers, not determined ones.
Read the guide: How to Edit a PDF Without Uploading It
How to use Remove PDF Metadata
- Drop a PDF.
- Decide whether to keep the title and remove XMP.
- Click "Remove metadata".
- Download the cleaned file.
Remove PDF Metadata features
- Clears Info dictionary fields (author, subject, keywords, creator, producer, dates)
- Removes the XMP packet and the document ID
- Removes per-page application data (PieceInfo)
- Option to keep the title
- Shows what was found and what was removed
- Local processing
Remove PDF Metadata example
Anonymise before sending to a client
Input:
proposal.pdf — Author: "Fatimah Al-…", Creator: "Word 365", XMP presentOutput:
proposal-clean.pdf — summary lists 7 removed fields plus XMP and the document IDFrequently asked questions about Remove PDF Metadata
What metadata does a PDF contain?
Typically the author, the software that created it, creation and modification dates, a subject, keywords, an XMP packet with the same fields and sometimes more (document history, editor identifiers), and a unique document ID.
Does it remove text inside the pages, such as a name in the footer?
No — only metadata. Visible content is left as it is; use the editor’s redaction for that.
Will the file still open normally?
Yes. Metadata is optional; readers simply show blank properties. No new Producer or modification date is written, whether or not you keep the title, so the cleaned file does not name the tool that cleaned it.
Is my PDF uploaded to a server?
No. The file is opened and processed by your browser with WebAssembly and JavaScript; nothing is sent to Mutqan Soft or anyone else. Close the tab and the file is gone. Downloading the result needs a free account — no subscription, no payment.
Can I use it on a password-protected PDF?
Yes, if you know the password: the file list asks for it once and every operation then works on the decrypted pages. The output is saved without a password unless you protect it again.
Technical notes
Document metadata lives mainly in three places: the trailer’s /Info dictionary, the catalog’s /Metadata XMP stream, and /PieceInfo dictionaries (plus page-level /Metadata streams) that applications attach to the catalog and pages. All three are removed, the /ID array is dropped, and the file is written without a Producer stamp or a new modification date, whether or not the title is kept. XMP attached to individual images, fonts or form XObjects and author names on comments are not touched.
References
- ISO 32000-2:2020 — Document management — Portable document format — Part 2: PDF 2.0The current PDF standard: file structure, objects, pages, fonts, annotations, forms and encryption.
- PDF Reference — ISO 32000-1:2008 (PDF 1.7), Adobe copyThe freely readable PDF 1.7 specification: page trees, content streams, metadata, permissions and the standard security handler.
- OWASP Cheat Sheet Series: File UploadValidating uploaded files: extension and content-type checks, size limits, storage outside the web root, scanning.