Protect PDF
Applies password protection and permission restrictions to a PDF, and makes the protected PDF available for download.
Restrictions Password: If output_settings.restrictions is omitted, output_settings.password is also used as the password for modifying or removing the protection.
Endpoint
OAuth Scope
curl --request POST \
--url https://www.zohoapis.com/pdfeditor/api/v1/pdf/protect \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'content-type: multipart/form-data' \
-F 'file=@file_path' \
-F 'output_settings={
"name": "quarterly-review-protected.pdf",
"password": "OpenSesame123",
"encryption_algorithm": "AES128",
"restrictions": {
"password": "OwnerPass456",
"permissions": [
"document.print",
"document.copy"
]
}
}' \
-F 'input_options={
"password": "OpenSesame123"
}'Request Body
multipart/form-dataThe source PDF to protect, uploaded directly or imported from a publicly accessible URL. The file must be no larger than 50 MB, contain no more than 400 pages, and have no page larger than 2,400 square inches. Its filename must not exceed 255 characters. Supported formats: pdf.
Configures the protected PDF's filename, passwords, encryption, and permission restrictions.
{
"name": "quarterly-review-protected.pdf",
"password": "OpenSesame123",
"encryption_algorithm": "AES128",
"restrictions": {
"password": "OwnerPass456",
"permissions": [
"document.print",
"document.copy"
]
}
}Show Sub-Attributes
The filename for the protected PDF. A .pdf extension is appended when the name does not already end with one.
The password required to open the protected PDF. If omitted, the protected PDF can be opened without a password.
The encryption algorithm used to protect the PDF. AES256 requires the source PDF to be version 1.7 or later; an older source PDF causes the request to fail.
Applies permission restrictions to the protected PDF. Unlike password, which controls opening the PDF, restrictions limits what can be done with it once it is open. If omitted, only editing is restricted.
{
"password": "OwnerPass456",
"permissions": [
"document.print",
"document.copy"
]
}Show Sub-Attributes
The password required to modify or remove the restrictions applied to the protected PDF.
The actions to disable on the protected PDF, up to 10 values. Actions not listed remain allowed, except document.edit, which is always disabled.
Supported values:document.copy — Restricts copying content from the PDF.document.copy.accessibility — Restricts content extraction for accessibility tools.document.edit — Restricts editing the PDF.document.fill — Restricts filling form fields, and also disables annotation editing regardless of document.annotate.document.print — Restricts printing the PDF.document.print.low_quality — Has no effect on the protected PDF.document.annotate — Restricts adding or modifying annotations.document.assemble_document — Restricts inserting, deleting, or rotating pages.
[
"document.print",
"document.copy"
]Configures how the source PDF is unlocked before protection is applied.
{
"password": "OpenSesame123"
}Show Sub-Attributes
The password to unlock the source PDF, if it is password-protected.
// Note: payload contains multiple type attributes
// type: file
file = quarterly-review.pdf
// type: object
output_settings = {
"name": "quarterly-review-protected.pdf",
"password": "OpenSesame123",
"encryption_algorithm": "AES128",
"restrictions": {
"password": "OwnerPass456",
"permissions": [
"document.print",
"document.copy"
]
}
}
// type: object
input_options = {
"password": "OpenSesame123"
} {
"status": "inprogress",
"status_check_url": "https://www.zohoapis.com/pdfeditor/api/v1/pdf/protect/job/3f65c7592a741d98e46bf310cbe678f574a1d51fce306a8d9b6430217e538acd"
}
Rate Limits
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.