When you are transmitting a highly sensitive PDF document (such as financial records or proprietary source code schematics) across a network from a macOS workstation, relying on standard OS-level login passwords is mathematically insufficient. If the file is intercepted in transit, the alphanumeric payload is completely exposed. To force the macOS Core Graphics engine to execute an absolute cryptographic lock—encrypting the internal file architecture so it cannot be parsed without a specific symmetric key—you must deploy the Password vector within Preview.
Executing the Cryptographic Lock
The native Preview application contains a deeply embedded security suite capable of writing an encrypted payload directly into the PDF container’s header metadata.
- Locate your highly sensitive PDF in Finder and double-click to open it natively in Preview.
- Look at the absolute top menu bar. Click on File.
- Select the Export… command from the drop-down matrix. (Do not select Export as PDF, just standard Export).
- The macOS kernel will spawn a standard save dialogue modal.
Deploying the Symmetric Key
- Look at the bottom of the export modal. You will see a specific checkbox labeled Encrypt. Mathematically activate this toggle.
- The UI will instantly expand, revealing two password input fields (Password and Verify).
- Inject your secure, high-entropy alphanumeric password blindly into both fields.
- Select a destination on your hard drive and click Save.
The exact millisecond you click save, the Core Graphics engine intercepts the file. It mathematically encrypts the entire alphanumeric payload using strong symmetric encryption (typically AES-128 or AES-256 depending on the OS version) and writes a completely new PDF file to your disk. When anyone attempts to open this new file on Mac, Windows, or Linux, the operating system will throw a hard cryptographic block, rendering a blank screen and demanding the exact password before a single byte of data is decrypted and rendered.