PDF was created in the early 1990s to solve a specific, concrete problem: a document that looked right on the machine it was made on would often break — shifted layout, missing fonts, displaced images — when opened somewhere else. PDF fixed this by embedding fonts, layout, and images directly into a fixed-format container rather than storing editable instructions that depend on the viewing environment.
Why it actually renders consistently
The mechanism matters more than the marketing claim: a PDF embeds the actual font data and exact positioning rather than referencing a font by name and trusting the viewer to have it. There's no re-interpretation step the way there is opening a .docx in a different word processor — the content is already fixed, so there's nothing left to render inconsistently.
Security: two genuinely different features, often conflated
Password protection and permissions control who can open a file and what they can do with it (print, copy, edit) — this is access control, applied at the point of sharing.
Digital signatures are a separate mechanism: a cryptographic hash of the document content is signed with a private key. If the document changes after signing, the hash no longer matches, and verifying software flags the signature as invalid. This is what actually provides tamper-evidence — not the PDF format itself, and not PDF/A.
PDF/A (the archival subset) is a different feature entirely: it requires all fonts, color profiles, and content to be self-contained, and it disallows things like encryption or external content links that could break in the future. Its purpose is guaranteeing the document remains renderable decades later — it has nothing to do with preventing tampering. A PDF/A file can still be edited by anyone with the right software; what it guarantees is that if you open it in 20 years, it'll still look the same, not that it's the same file someone signed.
For genuine tamper-evidence, you need a digital signature specifically — courts and regulators requiring "PDF for official filings" are generally relying on signature verification, not the base PDF format or PDF/A alone.
File size: depends on content and settings, not the format itself
PDF isn't inherently more space-efficient than other formats — a PDF containing high-resolution scanned images with no compression applied can be enormous, while the same content with appropriate JPEG compression on embedded images and font subsetting can be quite small. The size outcome depends on what compression settings were applied during creation, not some inherent PDF efficiency. If a PDF is unexpectedly large, checking image compression settings is the first thing to look at.
Where PDF genuinely earns its dominance
- Universal viewing — every major browser has a built-in PDF viewer; no dedicated software needed
- Fixed layout for anything meant to be read as designed — contracts, resumes, marketing materials, official filings
- OCR and searchability — a scanned PDF processed with OCR becomes text-searchable, turning a static image of a page into something you can Ctrl+F
- Accessibility tagging — a properly tagged PDF defines logical structure (headings, lists, tables) so screen readers can interpret it correctly, rather than reading a flat, unstructured wall of text
- Digital signature workflows — genuinely useful for contracts and approvals, replacing print-sign-scan with a cryptographically verifiable process
A note on newer PDF features
Some modern PDF viewers include mobile-specific reflow features (Adobe's "Liquid Mode" is one example) that intelligently re-flow content for small screens — worth noting this is a viewer-specific feature layered on top of the format, not a property of PDF itself; how well it works depends on which app you're using to view the file, not the PDF specification.
Conclusion
PDF's dominance comes from solving a genuinely hard problem — consistent rendering regardless of viewing environment — through font/layout embedding, not from vague claims about universal superiority. Its security and archival features are real but distinct: password/permissions for access control, digital signatures for tamper-evidence, and PDF/A for long-term format stability are three separate tools solving three separate problems, not one blanket guarantee.