What metadata does a PDF carry?

Short answer

PDFs can include document properties, XMP blocks, timestamps, form data, annotations, and embedded attachments.

Last reviewed: 2026-02-20
metadata pdf xmp

PDFs can include document properties, XMP blocks, timestamps, form data, annotations, and embedded attachments.

Why this matters

Some metadata can reveal authoring tools, editing timelines, or workflow details you never intended to share.

Safe default steps

  1. Assume metadata exists unless proven otherwise.
  2. Run a local scrub before sharing.
  3. Review the scrub report and output behavior.
  4. Keep originals separate from sanitized copies.

Common mistakes

  • Looking only at visible pages and ignoring hidden structures.
  • Trusting exported PDFs from office apps without verification.
  • Forgetting attachments inside the PDF container.

Limits

Metadata scrubbing does not remove names and identifiers written in visible text or images.

Related

Next safe step: scrub a PDF locally and review threat model limits.