4

I want to protect my PDF with a strong password.

But I heard that it can be cracked.

Is it true that strongly-password-protected PDF can be cracked?


Edit: This is my real scenario. I want to sell my ebooks on the web. Recently there are many sites that shares ebooks. I don't want it to happen so I need a password-protected scheme applied to my ebooks. I hope buyers cannot remove and modify the contents; the integrity must be protected.

2
  • 5
    Theoretically every password and every encryption can be cracked. You should find a way to protect it strong enough that it would take to much effort to crack it.
    – Michael K
    Jul 7, 2011 at 10:06
  • DRM is broken by design. What if a buyer uploads the password alongside the PDF? If it is a user-specific password, what hinders the user to reprint the PDF without encryption and upload that one?
    – Bobby
    Oct 23, 2012 at 14:59

2 Answers 2

3

Yes, that is true. If that is very important to you, I cannot think of a format that will protect you. There are dozens of tools out there that can break, or remove passwords from PDFs.

It is worth noting, that often passwords can be removed, so it does not matter if it can be broken in the literal sense. Thankfully, they will keep out all but the most determined.

14
  • Just out of curiosity, could you elaborate on why this is or how these tools work? Is it a security flaw in the way PDFs are encrypted or are they just brute-force?
    – slhck
    Jul 7, 2011 at 10:09
  • So what should I do if I want to get password protected PDF? Jul 7, 2011 at 10:09
  • @xport: You may put the pdf in an encrypted archive. Maybe that is more save...
    – Michael K
    Jul 7, 2011 at 10:12
  • @slhck I am not 100% sure how in this case, but it is very probably roughly the same model as for breaking a Windows password: They know where the data is stored, so they use a low-level editor to simply remove the data that protects it, rather than trying to brute-force it. Easier to just remove it.
    – KCotreau
    Jul 7, 2011 at 10:12
  • 4
    @xport The real question you want to ask is "What is the best way to protect an ebook. Go ask it as a new question, and let me post some advice there, instead of in here.
    – KCotreau
    Jul 7, 2011 at 10:19
8

Why try to protect it ? I totally understand you don't want to find it the next day after release on p2p/rapidshare/etc... but be aware that if someone is interested to put it here your book will end here anyway, whatever you do.

Protecting the pdf with a password only guarantees you to sell one copy. The minute you mail the password to your first customer he can upload it anywhere without even cracking it, just by submitting the password with the file.

If your book draws attention on pirates networks, be happy, that means you have a market for your book ; if you are angry about it, too bad, you can't do anything !

Have a look here for a new (and successful) way to distribute your ebooks, may not be what you want but you'll see more of those initiative in the future.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .