PDF6 min

How to Inspect a PDF: Version, Encryption, and Permissions Explained

Every PDF has a header, a trailer, and permission flags. Here's how to read them locally and know exactly what you're dealing with.

Inspect PDF parses everything locally. The file — including confidential contracts — never leaves your browser.

To inspect a PDF's version, encryption, and permission flags, use Zro7 Inspect PDF. It parses the header, trailer, encryption dictionary, and metadata stream, then shows you a plain-English summary: PDF version, page count, whether it's encrypted, what actions are allowed (print, copy, edit), producer, creation date, and embedded fonts.

The parts of a PDF Inspect PDF surfaces

  • Header%PDF-1.7 or %PDF-2.0; anything else is unusual.
  • Encryption dictionary — algorithm (RC4-40, RC4-128, AES-128, AES-256), R value, and P permission bitmask.
  • Info + XMP metadata — Producer, Creator, Title, Author, dates.
  • Page tree — count, sizes, and rotation flags.
  • Attachments and JavaScript — presence flagged for review.

Reading the permissions bitmask

A password-protected PDF has an owner password and a user password. Even if the user password is empty (opens without a prompt), the owner can restrict printing, copying, editing, and form-filling via the P bitmask. Inspect PDF decodes those bits so you can see, for example, "Printing: not allowed, Content copying: not allowed" — the exact reason Acrobat greys out those menus.

When to run it

  • Before merging PDFs from untrusted sources (check for JavaScript / attachments).
  • Before publishing (confirm metadata doesn't leak your username or software path).
  • Diagnosing "why can't I print this?" or "why won't the text copy?" — it's the P flags.

Steps

  1. Open Inspect PDF.
  2. Drop the file.
  3. Read the report — everything is displayed inline; nothing is uploaded.

Frequently asked questions

Can Inspect PDF crack a password?

No. It only reads the encryption dictionary metadata. To remove a known password use <a href="/unlock-pdf">Unlock PDF</a>.

Why does my PDF say "Producer: Microsoft: Print To PDF" even though I used Word?

Word delegates to a system print driver on export; the Producer field records the driver, not the app.

Is a PDF with JavaScript dangerous?

It can be. JavaScript in PDFs powers legitimate form logic but has been used for exploits. Inspect PDF flags its presence so you can decide.

Does Inspect PDF work on encrypted files?

Yes — metadata about the encryption is readable without the password; only the content streams are locked.

Does anything upload?

No. Parsing happens in your browser via pdf-lib and native crypto primitives.

Related posts

← Back to blog