Tag: Privacy

Every office worker hits the same wall once or twice a month: the contract is in two PDFs, the signature page is in a third, the appendix arrived as a separate email attachment, and the recipient wants one file. PDF merging is the mundane plumbing of business workflows — boring, frequent, and easier with the right tool than people realise. The catch is that the most popular cloud-based mergers upload your file to their servers, which is the wrong default for contracts, signed documents, medical records, or anything containing PII.

Our PDF merger tool runs entirely in your browser using pdf-lib — the same JavaScript PDF library that powers many enterprise document pipelines. Drop your PDFs, reorder them with arrow buttons, click merge. The output downloads to your device. Nothing transmits. This guide explains how PDF merging actually works under the hood, what gets preserved vs lost during the merge, and the workflow tricks that make merging fast for repeat tasks.

What does PDF merging actually do to the file?

A PDF is a tree of objects — pages, fonts, images, metadata, structural elements — referenced by a cross-reference table. Merging two PDFs concatenates the page lists from each source while copying every referenced object (fonts, images, etc.) into the output’s object table. The result is a single PDF whose pages appear in the order you specified, with no quality loss because no pixel data is recompressed.

The signature gotcha matters for legal workflows. If you’re merging a digitally-signed contract with an appendix, the merged file no longer carries the signature’s cryptographic validation — opening it in Acrobat shows the signature as “invalid” because the document hash has changed. Workflow: merge first, then sign the combined file, or keep signed documents separate and bundle them in a ZIP.

The five workflows people actually use a PDF merger for

• Contract package assembly. NDA + master agreement + statement of work + signature page = one deliverable. Reorder so the cover page is first, signature page last. The most common business use case.
• Receipts and expense reports. Combine 12 individual receipt PDFs into a single end-of-quarter expenses document. Saves the 12-attachment email and gives accounting one file to file.
• Multi-source research bundle. Three articles, two slide decks exported as PDF, one transcript — one master read-pack for the team. Order matters here: put the executive summary first.
• Email + attachments archive. Many email clients let you “print to PDF” both the message and its attachments. Merging produces a single permanent record. Useful for legal discovery and personal archiving.
• Scanned document stacking. A scanner that produces one PDF per page (still common in older office machines) leaves you with 30 single-page PDFs after a long scan job. Merge produces the document you actually wanted.

For each use case, the order of the source PDFs matters. Spend a moment with the up/down arrows before clicking merge — fixing order after the fact requires splitting + remerging, which is more work than getting it right the first time.

How to use the browser PDF merger

1. Open the PDF merger tool
2. Drop your PDFs onto the dropzone, or click to pick files. Multiple selection works on every modern OS
3. Each file appears in a list with its filename and page count
4. Use the up / down arrow buttons to reorder. The order in the list is the order in the merged output
5. Trash icon removes any file you don’t want included
6. The total page count for the merged file shows above the list — sanity-check before merging
7. Click Merge. The merged PDF downloads as merged-{timestamp}.pdf

Everything happens locally — when you select a file, the browser reads it, parses the page count, and discards it from memory after merge. No copy is sent to our servers. The 100MB+ practical ceiling is your browser’s RAM, not a server-side cap. Most laptops handle hundreds of source PDFs at a time without issue.

Cloud merger vs browser merger — the privacy trade-off

The PDF merger market is split between cloud-based services (iLovePDF, Smallpdf, Adobe Acrobat online) that upload your file to their servers and process it there, and browser-based tools (ours, Drawboard, PDFsam in its desktop form) that process locally. The trade-off:

For an offsite training PDF you’re combining with the public schedule, cloud is fine. For a draft NDA being merged with a tax return for a property purchase, never upload — privacy isn’t a policy promise on a help page; it’s the architecture of where the bytes go. Browser-based merging gives you architectural privacy.

Merging PDFs in code

For automated pipelines — say, monthly receipt-bundle generation or batch document assembly — a script beats clicking. Each environment has a mature library.

Python (pikepdf — fastest, lossless):

import pikepdf
from pathlib import Path

merged = pikepdf.Pdf.new()
for path in sorted(Path("inputs").glob("*.pdf")):
    src = pikepdf.Pdf.open(path)
    merged.pages.extend(src.pages)
merged.save("merged.pdf")

Node.js (pdf-lib — the same library our browser tool uses):

import { PDFDocument } from "pdf-lib";
import { readFile, writeFile } from "node:fs/promises";

const merged = await PDFDocument.create();
for (const file of ["a.pdf", "b.pdf", "c.pdf"]) {
  const bytes = await readFile(file);
  const src = await PDFDocument.load(bytes);
  const pages = await merged.copyPages(src, src.getPageIndices());
  pages.forEach((p) => merged.addPage(p));
}
await writeFile("merged.pdf", await merged.save());

qpdf (CLI — fastest for very large jobs):

# Merge in alphabetical order
qpdf --empty --pages *.pdf -- merged.pdf

# Merge specific files in specific order
qpdf --empty --pages a.pdf b.pdf c.pdf -- merged.pdf

# Preserve bookmarks (qpdf does this by default; some libraries don't)
qpdf --empty --pages a.pdf 1-5 b.pdf 1-z -- merged.pdf

Ghostscript (CLI — slowest but recompresses + may shrink output):

gs -dBATCH -dNOPAUSE -q -sDEVICE=pdfwrite \
   -sOutputFile=merged.pdf a.pdf b.pdf c.pdf

Choose by goal. pikepdf and pdf-lib are lossless and fast — same approach as our browser tool. qpdf is the most powerful for complex page-range merges and preserves bookmarks. Ghostscript re-encodes everything (slower but can produce smaller files because it consolidates duplicated objects across sources). For most workflows, pikepdf or pdf-lib is the right answer.

Merging password-protected PDFs

Browser-based mergers can’t read encrypted PDFs without the password — pdf-lib loads encrypted documents only if you pass the password explicitly, and our tool doesn’t expose that field by design. Three options when one of your sources is password-protected:

• Decrypt first, merge second. Open the encrypted PDF in Adobe Acrobat (or qpdf with --decrypt), save an unencrypted copy with a different filename, then merge. Delete the unencrypted copy after the merge if the password protected sensitive content. Don’t share the unencrypted intermediate file.
• Use qpdf at the command line. qpdf --password=secret --decrypt encrypted.pdf decrypted.pdf, then merge with the steps above. Direct enough that the password never leaves your terminal session.
• Skip the encrypted source. If the encryption is meaningful (PII, financial data), think hard before merging — a single combined unencrypted file is now your weakest-link risk. Consider keeping the documents separate and bundling them in a password-protected ZIP instead.

Common mistakes that produce bad merges

• Wrong page order. The list order in the tool is the merge order. Always sanity-check the order before clicking merge — fixing it post-merge requires splitting and remerging.
• Mixing landscape and portrait pages without thinking. The merged PDF will display them in their original orientations, which can read as inconsistent. Either rotate problem pages first (some PDF tools have a rotate option, or use qpdf --rotate) or accept the mixed orientation if it’s fine for your reader.
• Merging across versions of the same document. If you have v1 and v3 of a contract and accidentally merge both, the result is two confusingly-similar copies. Always rename or archive old versions before assembling a deliverable.
• Forgetting that signed PDFs lose signatures on merge. Sign the merged file, not the components, when you need a single legally-binding document.
• Merging huge files all at once on a low-memory device. 50 source PDFs at 20 MB each requires 1 GB of free browser RAM minimum. If your device is tight, merge in batches (10 PDFs first, then 10 more, etc.) rather than all at once.

When NOT to merge PDFs

• Legal exhibits. Court filings often require each exhibit to remain a separate file with its original filename. Merging changes the file’s identity for evidence purposes. Check the local rules before combining.
• Already-digitally-signed contracts. Merging invalidates the signature. If the signature is the whole point of the document, keep it separate.
• Different access-control documents. A confidential financial statement merged with a public marketing PDF inherits the most-permissive distribution permissions automatically. Keep different sensitivity levels separate.
• Documents whose order changes by audience. If you sometimes need the appendix first and sometimes last, keep the parts separate and merge fresh per audience.
• Files that exceed 100MB total. Browser memory becomes the bottleneck. Use qpdf or pikepdf locally instead.

Frequently asked questions

Does merging PDFs reduce their quality?

No. PDF merging copies pages and embedded resources without re-encoding any content. The merged file is byte-for-byte equivalent to the source pages — text stays searchable and selectable, images retain their original quality, fonts render the same. The only thing that changes is the file’s metadata and structural elements (cross-reference table, object IDs).

Is there a limit on how many PDFs I can merge?

The browser tool’s limit is your device’s RAM, not a fixed file count. Merging 50 small office PDFs is trivial; merging 50 image-heavy 20MB PDFs needs about 1 GB of free browser memory. For very large jobs (hundreds of PDFs, gigabytes of total size), use a command-line tool like qpdf or pikepdf locally, which streams the merge rather than loading everything into memory.

Will the merged PDF be searchable?

Yes — text content, hyperlinks, and form fields all survive merging. If a source PDF was searchable before, those pages are searchable in the merged output. If a source was a scanned image-only PDF without OCR, those pages remain image-only in the merge. To make scanned pages searchable, run OCR (Adobe Acrobat, tesseract, ABBYY FineReader) before or after merging.

Are bookmarks preserved when I merge?

In our browser tool, no — pdf-lib (the underlying library) doesn’t preserve bookmarks across merges. If your workflow needs combined bookmarks (think long technical reports with TOCs), use Adobe Acrobat, PDFsam Basic, or qpdf at the command line — all three preserve and renumber bookmarks during merge.

Can I merge a PDF with a Word document or image?

Not directly. PDF mergers only accept PDF input. Convert other formats first: print Word documents to PDF (built into Word and Google Docs), or use an image-to-PDF tool to wrap photos and scans into PDF format. Then merge as usual.

Is my PDF uploaded when I use the merger?

No. The browser reads your PDF locally via the File API, parses it with pdf-lib, performs the merge in JavaScript, and offers the result as a download — all without making any network requests. Verify by opening Chrome DevTools → Network tab and watching for upload requests when you click merge: there are none.

Related tools and guides

• PDF Merger Tool — the tool this guide is about
• PDF Splitter — the inverse: extract pages from a PDF into separate files
• PDF Compressor — shrink the merged file for email attachment limits
• Free PDF Compressor guide — the structural-vs-image-recompression honesty
• Scanned PDF Converter — make a clean PDF look scanned
• All miscellaneous tools — PDF utilities, QR codes, password generators, more