FyPDF — PDF & file conversion suite · Security

Seal it, sign it, redact what shouldn't leave.

Most online tools wave at security with a single 'add password' button and a black-marker bar that covers the text but doesn't remove it. The launch strong room focuses on explicit password protection, in-browser unlock, visible approval stamps, and pattern-based redaction, with certificate signing and manual redaction marked coming soon.

Open the strong room Read the 4 protocols

Custody chain stays explicit
Every operation names who can do what after it runs. Lock the file, and the password gates open / edit / sign / extract independently — not as one all-or-nothing flag.
Redactions are permanent
Redact PDF finds selected sensitive-data patterns and bakes black redaction bars into a rasterized output page, so matched text is not recoverable by copy or search.
Encrypted sessions for the heavy work
Protect, sign, and redact run on a one-time encrypted server session. Your file is held in volatile memory only for the duration of the operation; nothing persists after.
Visible stamps today
Sign PDF adds a visible typed approval stamp. Certificate-backed signatures are coming through FyEsign integrations.

FyPDF

Custody

ARMED

Seal

Protect PDF

ARMED

Open

Unlock PDF

ARMED

Sign

Sign PDF

ARMED

Redact

Redact PDF

strong room · vault 04

4 pins · armed

Strong Room · 4 pins armed

Password protectionEncrypted session

The Protocols Ledger

Four protocols, every one with custody written down.

Each row names the operation, the mode (in-browser vs encrypted session), the editorial promise, and the chain of custody it leaves behind — who can open it, who can change it, who can sign it, what cannot be recovered.

Protocols Register · Issue 06Security Track · 4 protocols armed

No.

Protocol

Mode

Promise

Custody chain

Open

01Pin

Protect PDF

Seal

Encrypted session

Lock a PDF with user and owner passwords, permission flags for print / copy / edit where supported, and a one-time encrypted session for the operation itself.

Chain of custody

User pwd → can open. Owner pwd → can change permissions, lift restrictions.

02Pin

Unlock PDF

Open

In-browser

Lift the password on a PDF you have rights to unlock — runs entirely in your browser, password and file never leave your device.

Chain of custody

Anyone with the owner password can unlock. Output PDF is unrestricted.

03Pin

Sign PDF

Sign

Encrypted session

Stamp a PDF with a visible typed approval block containing signer name, optional reason, location, and date.

Chain of custody

Signer name is visibly stamped. Certificate validation and multi-signer locking are coming through FyEsign.

04Pin

Redact PDF

Redact

Encrypted session

Automatically redact detected emails, phone numbers, SSNs, and credit-card numbers by baking black bars into rasterized output pages.

Chain of custody

Redacted content cannot be recovered. Released document is safe to share.

Seal · best for

Pre-distribution lockdown · Confidential drafts · Per-recipient permission scopes

qpdf-backed

Open · best for

Reclaiming archive masters · Re-editing legacy locked files · Pre-merge unblocking

Owner pwd required

Sign · best for

Contract execution · Approvals · Audit-grade signoff · Multi-party signing flows

Typed visible stamp

Redact · best for

Legal disclosures · FOIA / RTI releases · Pre-share scrubbing · Compliance handoffs

Pattern detection

The Fidelity Manifesto

What the strong room never lets slip.

Four promises registered onto every protocol. The cheap path is to paint a black bar over text and call it 'redacted', or stamp a single password on a file and call it 'secure' — these are the four guarantees you give up when you take that path.

StrongboxPromise · 01

Custody chain stays explicit

Every protocol names exactly who can do what after it runs. FyPDF's Protect splits the password into user (open) and owner (change permissions), with per-flag controls for print / copy / edit / fill / form-fill. No all-or-nothing toggle, no silent permission inheritance — the chain is written down on the document and on the receipt.

SpecUser + Owner passwords · 5 permission flags · Per-recipient scopes · Receipt records the chain.

StrongboxPromise · 02

Redactions are permanent

Cheap redactors paint a black bar over the page and leave the underlying text in the file. The launch redactor finds sensitive-data patterns, rasterizes affected pages, and bakes the black bars into the result.

SpecPattern detection · Rasterized output · No layer revert for matched text.

StrongboxPromise · 03

Signature stamps are explicit

Sign PDF creates a visible typed approval stamp. Certificate-backed PAdES signatures, timestamp authorities, and multi-signer locking are coming through FyEsign rather than the launch stamp runner.

SpecVisible typed stamp today · Certificate signing coming soon.

StrongboxPromise · 04

Encrypted sessions for the heavy work

Protect, sign, and redact run on a one-time encrypted server session — the file is held in volatile memory for the operation, then discarded. Nothing persists. Unlock runs entirely in your browser; the password and the file never leave your device.

SpecVolatile-memory sessions · No file persistence · TLS in transit · Browser-only Unlock.

The Tool Spreads

Read each protocol as its own datasheet.

What each protocol locks, opens, signs, or removes — and where it pairs back into the rest of the suite. Four spreads, in order; alternate sides so the rhythm stays scannable.

SpreadPDF → password PDF

Protect PDF

Lock a PDF with user and owner passwords plus explicit permission scopes where supported by the selected qpdf encryption mode.

Preserves

Document content and structure
Embedded fonts and images
Bookmarks and annotations
Existing signatures (where present)

Transforms

Two-tier password (user + owner)
Per-permission flags (print, copy, edit, fill, form-fill)
qpdf-backed encryption replaces any prior encryption
Session receipt records permission chain

Formats.pdf in.pdf out (encrypted)password

Open Protect PDF

Pairs withConvert Edit Office

qpdf-backedSealed

User pwd

·············

open

Owner pwd

·············

permissions

Flags

PRI

COP

EDI

FIL

FOR

Password · two-tier · permission flags

SpreadEncrypted PDF → Open PDF

Unlock PDF

Remove encryption and permission restrictions from a PDF you have rights to unlock. Provide the owner password; the operation happens entirely in your browser — no upload, no server in the loop. The output PDF is unrestricted: print, copy, edit, fill all freely available.

Preserves

Document content unchanged
Bookmarks, annotations, attachments
Embedded fonts and images at source quality

Transforms

Encryption removed
Permission flags reset to unrestricted
Owner / user password requirements stripped
Output PDF re-editable in any tool

Formats.pdf in (encrypted).pdf outin-browser

Open Unlock PDF

Pairs withConvert Organize Edit

cipher · removedOpen

→

In-browser · no uploadFile never leaves the tab

owner pwd · in-browser · no upload

SpreadPDF → stamped PDF

Sign PDF

Add a visible typed approval stamp on a chosen page anchor. Certificate signatures, timestamp authorities, and multi-signer locking are coming through FyEsign.

Preserves

Document content
Existing pages and annotations
Visible approval context

Transforms

Visible signature block added at chosen page region
Signer name, reason, location, and date
Certificate signature coming soon
Multi-signer flows coming soon

Formats.pdf in.pdf out (stamped)visible stamp

Open Sign PDF

Pairs withOrganize Office Advanced

page · signedVerified

Signed by2026-05-03 · 09:14

~ Anonymous Counsel

typed approval stamp

chain · 1 / 3

Visible stamp · FyEsign coming soon

SpreadPDF − sensitive → PDF

Redact PDF

Automatically redact matched sensitive-data patterns. The launch runner rasterizes affected pages and bakes black bars into the output so copy/search cannot recover matched text.

Preserves

Non-matched pages intact
Matched pages visually preserved as raster output
Document metadata except where flagged

Transforms

Detected strings → baked black bars
Affected pages → rasterized final form
Manual region redaction coming soon
Receipt workflow coming soon

Formats.pdf in.pdf out (redacted)audit receipt

Open Redact PDF

Pairs withOrganize Edit Advanced

Before§

Afterredacted

Audit receipt#4F-21-D8

· p. 02 · 3 regions · text

· p. 04 · 1 region · image

· object-model: stripped

pattern redaction · rasterized output

Before · After

What changes about who can do what.

Three custody-chain transitions through the strong room. Each row carries the chain of custody recorded BEFORE the protocol ran and AFTER — with the document state to match.

Chain · beforeANYONE · open · edit · print · copyChain · afterUSER · open + read OWNER · permissions

Beforereceived

Open draft contract

Final-form contract, ready for execution. No password, no permission flags — anyone who receives it can edit, copy, print, or extract.

.pdf

Protect PDFOpen contract → sealed for execution

Afterreleased

Password-sealed PDF

Locked with two-tier password: counterparty receives the user password (open + read), counsel keeps the owner password. Print disabled, copy disabled, fill enabled.

.pdf

password · sealed

TakeawayGoes out for execution with the chain of custody written down — not implied, not 'on trust'.

Chain · beforeOWNER PWD · required to open or editChain · afterANYONE · open · edit · print · copy

Beforereceived

Locked legacy archive

PDF from a 2019 vendor, password-protected, no edit permission — but the workspace needs to merge it into the current quarter's bundle.

.pdf

password · sealed

Unlock PDFLocked archive → unlocked workspace

Afterreleased

Unrestricted PDF

Owner password applied, permissions reset, ready to merge with the rest of the bundle. Original archive copy preserved unmodified.

.pdf

TakeawayReclaims a legacy file for current work without breaking the archive copy.

Chain · beforeANYONE · can extract sensitive contentChain · afterNO-ONE · matched text baked out

Beforereceived

Internal draft with sensitive sections

Counsel-prepared draft, two paragraphs covering active litigation, three appendix pages with personally identifiable information.

.pdf

Redact PDFSensitive draft → release-ready

Afterreleased

Permanently redacted release

Detected sensitive strings are baked behind black bars on rasterized pages. Copy-paste and search cannot recover matched text.

.pdf

TakeawayGoes out for FOIA / disclosure with no recoverable trace of what was removed.

Who works the strong room

Five regulars at the notary's desk.

The personas who reach for the strong room weekly — and the specific protocols they choose. Find the closest match to the file on your desk this morning.

Persona · 01The contracts admin

Sealed Friday, signed Monday, archived Tuesday

Contract package travels through legal, vendor, and signature workflows in three days. Each leg needs its own custody scope — counterparty gets read access, counsel keeps owner control, signature locks the executed copy.

Reaches for

Protect PDF · Two-tier · counterparty sees, counsel controls
Sign PDF · Visible approval stamp on the executed copy

Persona · 02The IT / security lead

Encryption posture across the document estate

Every PDF leaving the company needs explicit password and permission handling. Every received PDF that's locked needs to be cleanly unlockable when authorised.

Reaches for

Protect PDF · Password · per-permission flags
Unlock PDF · In-browser · no upload trail

Persona · 03The legal counsel

Redactions that hold up to recovery attempts

Disclosure response can't ship a document where copy-paste reveals what was 'redacted'. Object-model stripping is the line; black-bar painting alone is malpractice.

Reaches for

Redact PDF · Object-model strip · audit receipt
Sign PDF · Counter-sign the redacted release

Persona · 04The HR lead

Personnel files that mind their permissions

Letters of offer, performance reviews, exit packages — everything needs viewing access for the recipient and owner control for the team. Some go to email, some to the LMS, some to the personal drive — different scopes per channel.

Reaches for

Protect PDF · Per-channel permission scopes
Redact PDF · Strip salary table before peer share

Persona · 05The finance audit

Counter-signed quarterly close, sealed for archive

Quarterly closes hit the audit trail. Each report needs a counter-signature from the finance lead, sealed permissions for downstream readers, and a redacted distribution copy that drops the per-employee comp lines.

Reaches for

Sign PDF · Counter-sign · multi-signer sequential
Redact PDF · Strip per-employee lines · keep totals

Common Questions

Before you turn the wheel, a few honest answers.

Question Index

Q01 · 01 / 07

What encryption does Protect PDF use?

FyPDF uses the configured qpdf backend for password protection. Two passwords are supported: the user password gates opening the file, and the owner password gates changing permissions later. Available permission flags depend on the selected encryption mode.

Strong Room Reference · 01

7 questions in the strong-room FAQIssue 06 · Security

Turn the wheel

The vault is keyed. Tell it which pin to drop.

Drop the file, pick a protocol, take the result. Passwords to seal, a key to open, visible stamps to approve, pattern redaction to scrub — four pins, one chamber.

Open the strong room Tour every track in detail

Protocol dispatch · 4 pins

Issue 06

Protect PDFSeal · password

Unlock PDFOpen · in-browser

Sign PDFSign · visible stamp

Redact PDFRedact · permanent

All protocols · audit receipt issued

One Suite · Seven Tracks · Twenty-eight Tools and CountingStart with the surface →

Crawlable tool list

PDF security tools inside FyTools.

Protect PDFs, unlock files you own, sign documents, and redact sensitive content before a PDF leaves your team.

These launch links open the live FyPDF app state on FyTools. The focused, indexable operation essays live on fypdfs.com so Google does not split the same search intent across two domains.

Seal it, sign it, redact what shouldn't leave.

Custody chain stays explicit

Every operation names who can do what after it runs. Lock the file, and the password gates open / edit / sign / extract independently — not as one all-or-nothing flag.

Redactions are permanent

Redact PDF finds selected sensitive-data patterns and bakes black redaction bars into a rasterized output page, so matched text is not recoverable by copy or search.

Encrypted sessions for the heavy work

Protect, sign, and redact run on a one-time encrypted server session. Your file is held in volatile memory only for the duration of the operation; nothing persists after.

Visible stamps today

Sign PDF adds a visible typed approval stamp. Certificate-backed signatures are coming through FyEsign integrations.