Merging, splitting and reordering PDFs without handing over your documents

A home loan file is the most complete identity kit you will ever put in one folder: PAN, Aadhaar, six months of bank statements with your account number and salary credits, Form 16, a photograph, and often a cancelled cheque. Uploading that to a free PDF merger you found on the second page of search results means handing the whole set to an organisation whose name you will not remember an hour later.

The same logic applies to a KYC pack you are assembling for a client, and to a tender bid, where the interesting document is the financial bid and the interested party is your competitor.

What an upload actually commits you to

When a converter runs on a server, your bytes travel over HTTPS to a machine you know nothing about. You do not know which country it sits in, who has shell access, whether the temporary directory is swept up by a nightly backup, or whether a crash dump from a malformed PDF keeps a copy of your page data in an error log.

"Files are deleted after one hour" is a sentence on a page, not a mechanism you can check. Read a few of those privacy policies and you will usually find permission to process files through "affiliates and service providers", which is a category, not a name.

The realistic risk is not dramatic. It is a misconfigured storage bucket, a log retention setting nobody reviewed, an intern's copy on a laptop, a subcontractor in the processing chain. None of that requires anyone to act in bad faith, and all of it is avoidable by not sending the file in the first place.

How browser-based PDF editing works

The tools here do not have an upload step. pdf-lib is a PDF library written in JavaScript, PDF.js renders pages for previews, and both run in your browser tab, with the performance-sensitive parts compiled to WebAssembly so they run at close to native speed.

The sequence when you merge two files:

1. You choose the files. The browser's File API hands the page a File handle, not the contents.
2. The page reads each file into an ArrayBuffer in the tab's memory.
3. pdf-lib parses the PDF object tree, copies the page objects from each source document into a new document, and serialises that document back to bytes.
4. The bytes go into a Blob, the page creates a blob: URL pointing at it, and your click on Download writes it to disk.

There is no fetch or XMLHttpRequest carrying the document anywhere, which is a claim you can verify in twenty seconds rather than take on trust. Open DevTools, switch to the Network tab, run the merge, and watch the request list stay empty. Or load the tool page, turn on airplane mode, and merge offline. Both work, and any tool that fails the airplane-mode test is processing your file somewhere else.

The trade-off is memory. Your device's RAM is the ceiling, so a 400-page merge that a laptop handles in four seconds may run out of memory on a three-year-old phone. Merge in batches when that happens.

Page range syntax

Ranges use the page numbers printed in the PDF viewer, counting from 1. Commas separate parts, hyphens define a span, and a hyphen with nothing after it means "to the end".

Ranges do not have to cover the whole document and do not have to be contiguous. They are read as instructions for what to produce, not as a partition.

What survives a merge, and what does not

This is where people get caught, usually on the day of a deadline.

Two of those rows have real consequences.

Sign last, always. If you merge a DSC-signed document into a bundle, the signature dies, because a signature covers a specific byte range of a specific file and merging rewrites the file. The correct order is: assemble the pages, add page numbers if the office requires them, then sign the finished PDF.

A filled form needs flattening before it is merged. Field values live inside the form-field objects, so when those are dropped, your typed answers vanish with them and you get a merged file full of blank boxes. Flatten first: open the filled form in your reader, print it to PDF (Chrome's "Save as PDF" destination is fine and keeps the text selectable), and merge that flat copy. Check the flat copy before you merge — this is a two-minute check that saves a resubmission.

Encrypted and password-protected PDFs

Bank statements usually arrive encrypted, with a password built from your date of birth and part of your PAN. Some documents carry only an owner password, which lets anyone open the file but blocks editing, and that still stops the tools: pdf-lib refuses to modify an encrypted document rather than guess.

The route around it is the same in both cases. Open the PDF in a reader using the password, then print it to a new PDF or use your reader's "save a copy" option if it offers one without encryption. Work on that copy. Chrome, Edge and most desktop readers can do this; on Android, the built-in print dialogue has a "Save as PDF" destination too.

Merging a set: step by step

Use Merge PDF when the portal accepts exactly one attachment.

1. Drop all the files into the box at once, or add them in batches.
2. Reorder with the arrows in the file list. Files merge top to bottom, and all pages of one file stay together as a block, which is why the front and back of an ID card never get separated.
3. Type an output name that means something to the person receiving it: kyc-ramesh-kumar.pdf, not merged (3).pdf.
4. Click Merge PDFs and download.

If a portal's checklist specifies an order (covering letter, then checklist, then annexures), match it exactly. Evaluation committees do reject files for this.

Splitting a long document: step by step

Use Split PDF when one document has to become several.

1. Load the file. The page count appears once it is read.
2. Choose Custom ranges for meaningful parts, such as 1-40 for the technical bid and 41- for the financial bid. Choose Every N pages when you just need equal chunks.
3. Click Split PDF. Each range downloads as its own file, named after the pages it contains, not as a ZIP.

For pulling out a handful of pages rather than cutting the document up, Extract PDF Pages is the better fit — it produces one new PDF from the pages you pick, in ascending page order.

Fixing the order: step by step

Use Organize PDF when the scanner shuffled the pages, or one page came out sideways, or the cover ended up at the back.

1. Load the PDF and wait for the thumbnails. They render one by one, locally, so a long file takes a moment on a phone.
2. Drag a thumbnail to move that page.
3. Use the circular arrow on a page to rotate just that page, and the cross to mark it for removal.
4. Click Save organised PDF. Reordering, rotation and removal are all applied in the same pass.

Dragging wants a mouse. On a phone, Rotate PDF and Remove PDF Pages both accept typed page numbers and are easier to use with a thumb.

Frequently asked questions

How do I know nothing was uploaded? Turn off your internet after the tool page loads and run the operation. It completes normally. You can also watch the DevTools Network tab during the merge and see no request carrying your file.

Can I merge a password-protected bank statement directly? No. Open it with the password in a reader, print or save an unencrypted copy, and merge that. Encrypted documents cannot be modified by the library at all.

My merged tender file lost its bookmarks. Can I get them back? Not from the merged file. Bookmarks are not carried over, so add them afterwards in a desktop editor if the submission needs them, or number the pages with Add Page Numbers and include a contents page instead.

Is there a page or file limit? No fixed limit. The practical ceiling is your device's memory: a few hundred pages is comfortable on most laptops and recent phones, and older devices do better in batches of fifty.