Combining several PDFs into one — a cover letter, resume, and references, or a batch of monthly reports — is one of the most common document tasks, and one of the easiest to get wrong in small ways (wrong page order, a password-protected file the tool can't read, a size limit you hit halfway through). This walkthrough covers the actual process plus the issues that come up in practice.
For how PDF merging works structurally under the hood (why it's fast and lossless, and why it can break form fields), see PDF Merging, Splitting, and Compression: How They Actually Work.
Step 1: Gather and order your files first
Before opening any tool, rename your files so the intended order is obvious: 01-CoverLetter.pdf, 02-Resume.pdf, 03-References.pdf. Most merge tools default to alphabetical/upload order, and fixing page order after upload is a solvable but avoidable extra step.
Step 2: Upload
Most online mergers accept files either by clicking to browse or by dragging files directly into the browser window. Some also support pulling files directly from Google Drive or Dropbox rather than requiring a local copy first.
Step 3: Check and fix the page order
After upload, you'll typically see a thumbnail for each file. This is the step worth actually checking rather than assuming — drag thumbnails to reorder if needed. Some tools let you expand a single file to reorder or remove specific pages within it, which is useful if you need page 3 of a document but not pages 1-2.
Step 4: Merge and download
Combining is usually near-instant regardless of file count, since merging just relinks each file's page structure rather than re-rendering content (this is also why it's lossless — see the linked technical post above for the details).
Issues that actually come up
File size limits. Free tools commonly cap uploads (e.g., 50-100MB total). If you hit this, compress your largest files first, or merge in two smaller batches and merge the results together afterward.
Password-protected PDFs. A merge tool can't read a file it can't decrypt. You'll need to remove the password first — this generally requires knowing the original password, since it's decryption, not brute-forcing. Check whether your merge tool of choice offers a password removal step (some have a separate "Unlock PDF" tool for this — check the tool's actual page rather than assuming it exists), or use OS-native software you already have.
Lost bookmarks or broken forms after merging. Not every merge tool rebuilds the document outline (the bookmark/table-of-contents structure) or remaps form field references correctly across merged files. If your source PDFs have fillable forms or an outline you rely on, check the merged output before treating it as final — this is the most common thing that goes wrong silently.
Before uploading anything sensitive
Two things matter regardless of which tool you use:
- HTTPS — confirm the URL starts with
https://before uploading anything - Actual processing location — check the specific tool's own stated behavior for whether files are processed in your browser (never uploaded) or on a server (uploaded, then presumably deleted per their retention policy). Don't assume based on general "privacy-first" branding on a site's homepage — check the claim for the specific tool you're using, since not every tool on a given site necessarily works the same way.
For genuinely sensitive documents (unredacted financial statements, ID numbers, confidential contracts), it's worth using offline software specifically so this question doesn't need to be asked at all.
Conclusion
Merging PDFs online is quick once you've prepped file order beforehand and know what to check afterward — page order, bookmarks, and form fields, specifically. For anything sensitive, verify (don't assume) how a specific tool actually processes your files before uploading.