Lock down, sign & redact your PDFs
Encrypt, watermark, digitally sign and permanently scrub sensitive content. Files are processed on indox infrastructure and auto-expire from R2 in 24 hours.
12 tools
Sign PDF
Protect PDF
Unlock PDF
Redact Text
Redact PDF
Watermark PDF
Sanitize PDF
Certificate Sign
Remove Signature
Unlock Forms
Timestamp PDF
Change Permissions
Sign PDF
freeProtect PDF
freeUnlock PDF
freeRedact Text
freeRedact PDF
proWatermark PDF
freeSanitize PDF
proCertificate Sign
proRemove Signature
freeUnlock Forms
freeTimestamp PDF
freeChange Permissions
freeWhat are the indox security tools?
The security hub groups the tools that protect, sign and clean a PDF: add or remove a password, change permissions, watermark, sign, certificate-sign, validate a signature, sanitize and redact.
Drop a PDF in the box above and indox starts with Add Password, or pick any tool from the grid. Free tools work without an account, and the Pro badge marks the tools that need a paid plan. Uploaded files are deleted from storage automatically.
What should I try after securing a file?
Securing is usually the last step on a document. Reorder or split the pages in Organize first, fix text or metadata in Edit, and use the Advanced tools to run OCR on a scan. The forms library has IRS and USCIS forms you can fill and sign in the browser.
Browse the forms libraryOrganize tools
Merge, split, rotate, rearrange and renumber pages.
Edit tools
Images, stamps, metadata, annotations and attachments.
Advanced tools
OCR, compress, compare, repair and the Multi-Tool editor.
Forms library
IRS and USCIS forms you can fill and sign in the browser.
Do it all with indox
No tool matches that search.
Security questions
How long are my files kept?
Uploaded and processed files are auto-deleted from Cloudflare R2 storage 24 hours after the job finishes.
Can you recover a password I set on a PDF?
No, password encryption is applied client-side to your file and indox never stores the password, so it can't be recovered.
Is redaction truly permanent?
Yes. Redact and Auto-Redact remove the underlying text and image data, not just a black overlay, so content cannot be recovered from the output file.
What encryption is used for passwords?
Add Password applies AES-256 encryption. Both an open password and an owner (permissions) password can be set independently.
Are my certificates stored?
No. PKCS#12 certificates are used in memory for signing and discarded. Input and output files auto-expire from R2 storage after 24 hours on the free plan.
What is the difference between Sign PDF and Certificate Sign?
Sign PDF places a drawn, typed or uploaded signature anywhere on a page. Certificate Sign applies a cryptographic digital signature from a PKCS#12 certificate, and Validate Signature checks the trust chain of a signed PDF.
What does Sanitize PDF remove?
It removes JavaScript, embedded files and hidden metadata from a PDF.