Private Tools

All toolsPDF Editor

PDF Editor

View, merge, split, reorder, compress, watermark and password-protect PDFs, redact them for real, sign them digitally, and turn images into PDFs. Your files never leave this device.

Hidden data

Some hidden data would stay in the file

Remove hidden data is on, but this could not be removed. Nothing has been saved yet.

About PDF Editor

PDF Editor organizes, converts, protects, compresses and stamps PDFs entirely in your browser. Files are read from your disk and saved back to it. Nothing is uploaded, and the page keeps working with your network turned off.

What it does

Read PDFs page by page with zoom, find, text selection, thumbnails and bookmarks. Merge several PDFs, reorder, rotate, duplicate and delete pages, insert blank pages, split by ranges or every few pages, and extract pages. Turn photos into a PDF and pages into PNG or JPEG images. Add AES-256 passwords or remove one you know, compress, and add watermarks, page numbers and header or footer text. Sign with a certificate file (.p12 or .pfx) and check the signatures already in a document.

MuPDF in WebAssembly

Every PDF operation runs in MuPDF, the open-source PDF engine, compiled to WebAssembly and loaded from this site into a background worker. Pages are rendered by the same engine, a few at a time as you scroll, so large documents stay responsive.

Privacy

With Remove hidden data on, the saved PDF goes through the Metadata Cleaner before any password is added, so authors, software names, earlier versions and scripts are not carried along. Photos lose their location and camera details before they become pages. Signing keys are decrypted in this browser and cannot be read back out of it.

Limitations

  • Existing text cannot be edited in place. Watermarks and page numbers are added on top of the page.
  • Signatures are checked offline: revocation and timestamps are not checked, and a certificate is trusted only if you import its root. A freshly signed document is saved unchanged; saving after any other edit rewrites the file, which invalidates its signatures, so sign last.
  • Form JavaScript is never run. Pages copied in from a second file, or duplicated, keep their content but not their links, comments or form fields.
  • Downsampling images is lossy: scaled-down images and recompressed photos cannot be restored. Lossless compression never changes what you see.
  • Large files are limited by the browser's memory. Up to 500 MB of files can be opened at once.
  • Watermarks and page numbers use the standard Helvetica font, which shows Western European characters only. Passwords cannot contain commas. Files whose author restricted printing, copying or changes open only with their owner password.