Using an online PDF editor safely
Before you put a contract, résumé or ID copy into an online tool, find out where your file goes.
Two kinds of tools
| Server-side | Browser-side | |
|---|---|---|
| Where the file goes | Uploaded and processed on the company's servers | Processed only on your computer |
| Speed | Upload and download time required | No upload, so even big files are quick |
| Privacy risk | Storage or leaks on the server side | No transfer at all |
| How to check | Read the privacy policy's retention terms | Confirm no upload in the Network tab |
PdfMonster is browser-side. The engine that reads and writes PDFs is downloaded to your browser as WebAssembly and runs there, so our servers never receive your file.
Check it yourself (one minute)
- Press F12 in your browser to open the developer tools.
- Select the Network tab and clear the list.
- In the editor, open a PDF, edit some text and download it.
- Look for POST requests or an upload the size of your PDF. While you open, edit and save, no new requests should appear.
As an extra layer, the site sets a browser security policy (Content-Security-Policy) that blocks connections to other servers, so even a mistake or a malicious script would struggle to send your file out.
Rules for sensitive documents
- Check the domain in the address bar. Look-alike sites exist. Bookmark the real one.
- On a shared computer, close the tab afterwards and delete the downloaded file.
- Redact by really removing the text. A box on top leaves the text copyable. See How to redact a PDF properly.
- Check the metadata too. A PDF can carry the author's name and the program that created it. If you're sending the file outside, look at its properties.
- Audit your browser extensions. Some can read page content. For sensitive work, a private window — where extensions are normally off — is safer.
The limits of this service
- Even without uploading your file, access logs (IP address, time and so on) may be kept by our hosting provider. See the Privacy Policy.
- Your edits disappear when you close the tab. Saving means downloading.
- If your device has malware, even a browser-side tool isn't safe.