BentoPDF Adds PDF Text Editing: A Self-Hosted Adobe Acrobat Alternative With Security Caveats

What changed: real text editing​

Until recently, free browser-based PDF tools mostly covered merging, splitting and annotating. A MakeUseOf piece from earlier this year made the point plainly. It named direct text editing as BentoPDF's biggest limitation. That limitation is now out of date.

BentoPDF's v2.8.8 release, which the project called its biggest yet, added the feature. The release notes say BentoPDF can edit the actual text inside a PDF. You click a paragraph and type, text reflows live, fonts and styling are preserved, and everything runs in the browser. The v2.8.8 notes carry an "29 Aug" release date. The page excerpt doesn't state the year, so I won't assign one.

The release notes list a sizeable set of controls:

• Bold, italic, underline, strikethrough, superscript and subscript, plus font family and size, text colour, outline colour and width, and character and line spacing.
• Left, centre, right and justified alignment, bulleted and numbered lists with indent levels, and left-to-right and right-to-left text.
• Document-wide find and replace, and spell-check with a personal dictionary and per-language switching.
• Adding, replacing or round-tripping images, and object tools such as align, distribute, rotate, flip and reorder.
• Alt text for tagged PDFs, plus undo and redo.

The same release also lists fixes for non-Latin text. The release notes say Korean, CJK and Indic text wasn't supported when added in the PDF Editor and now is.

Two tools, not one​

The How-To Geek review stresses that the text editor and the annotation editor are separate tools. The text-editing tool modifies existing content, while PDF Editor focuses on markup and annotations. BentoPDF's own documentation describes the PDF Editor as handling annotating, highlighting, redacting, commenting, adding shapes and images, and searching.

For practical purposes:

• Use Edit PDF Text to fix a typo or reword a sentence in place.
• Use PDF Editor to mark up a document, redact it or comment on it.
• Use the dedicated signing and form tools for paperwork.

The caveats the project itself states​

The developer is candid about the limits of the text editor. The notes call it arguably the hardest feature built so far, and say that because PDFs are produced in so many ways, users might hit bugs. There is also a browser-specific limit. The notes say access to local fonts only works in Chromium-based browsers such as Chrome and Edge, because other browsers lack the font access API.

Windows users should take two points from that:

• Edge users are fine. Firefox users may see weaker font matching.
• Test on a copy of any file that matters. Scanned PDFs, heavily designed layouts and unusual embedded fonts are where any PDF editor tends to struggle. The author's own warning about conversion applies too: complex layouts, fonts and tables may not survive intact, so check output before sharing it.

Self-hosting: the short version​

The project's documentation gives a quick start for the self-hosted build:

docker run -d -p 3000:8080 ghcr.io/alam00000/bentopdf-simple:latest

Then browse to [url]http://localhost:3000[/url]. Docker Compose and Podman equivalents are documented, along with a Podman Quadlet for systemd on Linux. Windows users will most likely run this through Docker Desktop or WSL, though the docs excerpt I reviewed doesn't walk through that.

Two details trip people up.

"Simple" doesn't mean reduced. The bentopdf-simple image is the one recommended for internal, team or organisation use. The docs say it is functionally identical to the Commercial build. It only drops the marketing pages: hero, FAQ, testimonials and footer.

Office conversion needs HTTPS off-box. Word, Excel, PowerPoint and ODT conversion relies on a browser feature called SharedArrayBuffer. That needs cross-origin isolation headers and a secure context. The official image already sends the required headers. But the docs warn that browsers still disable the feature on plain HTTP at LAN addresses such as [url]http://192.168.x.x[/url]. [url]http://localhost[/url] works for same-machine testing. If colleagues will reach the server by IP or hostname, put it behind HTTPS. The docs say there is no header-only fix. The symptom is conversions hanging at around 55% or failing to start. You can check with window.crossOriginIsolated in the browser console, which should return true.

"Local" has fine print​

BentoPDF's pitch is privacy. Its documentation says processing happens directly in your browser, so your files aren't uploaded to a server for processing. That's a real advantage over random online converters.

Two qualifications matter if you're an administrator:

• Some modules load from a CDN by default. The self-hosting docs say the PyMuPDF, Ghostscript and CoherentPDF WebAssembly modules load from jsDelivr at runtime. They are AGPL-licensed, so the project keeps them out of its own image. Your documents aren't what is being fetched, but a default install isn't fully self-contained. For isolated networks, the docs describe an air-gapped procedure with a prepare-airgap.sh script that bundles the modules for internal hosting. The v2.8.10 release notes say the developer is gradually replacing some of these engines with in-house ones, aiming for "air-gapped by default".
• Patch promptly. The v2.8.10 release, dated 19 October, carries a warning about two security vulnerabilities affecting all versions up to and including v2.8.9. It urges everyone to upgrade immediately. The latest release visible in the packet is v2.8.11, dated 31 October. It adds measurement tools, a revamped multi-tool for page management and a new compression engine. If you self-host, you own the update cycle. Pin a version deliberately and watch the release page, rather than leaving latest untouched for months. The Podman Quadlet example in the docs includes an auto-update setting, but unattended updates are a policy decision.

The security point also supports the article's own advice: don't expose a self-hosted instance beyond your network without access controls. You can also restrict features. The docs describe disabling specific tools, such as edit-pdf or sign-pdf, through a build-time setting or a mounted config.json.

Licensing: the $79 figure in context​

The review says you can use BentoPDF free personally or buy a $79 lifetime commercial licence. The project's docs refine that. Free use is under AGPL-3.0. The $79 lifetime licence is needed for closed-source or proprietary deployments that won't publish their own branding or business-logic source. A company running it internally for staff isn't automatically in that category, but if your organisation is wary of AGPL, get a licence interpretation from your own counsel. The v2.8.11 notes also say the commercial licence is for companies that don't want AGPL obligations. Terms can change, so check the project's licensing page before buying.

Is it really 90 to 95% of Acrobat?​

That figure is the reviewer's estimate. The review gives no methodology, and I found no independent feature-by-feature comparison. The project's own developer says an "Acrobat Parity Comparison Tool" was planned but didn't make the v2.8.8 release. Treat the percentage as one person's experience.

The documented toolset is broad:

• Conversion to PDF from Word, Excel, PowerPoint, images, Markdown, EPUB and MOBI, and from PDF to JPG, PNG, text, Excel and SVG.
• Signing, redaction, form filling and stamps.
• Merge, split, rotate, delete and reorder.
• Compress, repair, flatten and OCR.
• Encrypt, decrypt and remove restrictions.

The review itself concedes that you may miss advanced features, broader format support or a dedicated support team. Self-hosting also means you handle updates and troubleshooting. A one-maintainer project is another factor for business use. In the v2.8.11 notes the developer says there is a single core maintainer, that keeping the pace up is getting hard, and that they hope to hire a second. That's honest and encouraging, but it's a continuity risk.

Who should try it​

Good fit: home users, small teams and IT admins who mostly merge, split, sign, annotate and fix the odd typo, and who want to stop paying a recurring fee or sending documents to a third-party converter.

Proceed carefully: regulated workflows, complex print-production files, and anyone who needs vendor support, contractual guarantees or certified signing workflows. Run a pilot on non-critical documents first.

A sensible trial takes about ten minutes:

1. Start the container with the Docker command above.
2. Open it in Edge or Chrome at localhost.
3. Take a copy of a real document, edit a paragraph with Edit PDF Text, and compare the output in another PDF reader.
4. Convert a Word file in both directions and check the layout.
5. Decide whether the gaps matter before moving anything to a shared server with HTTPS.

BentoPDF has narrowed a long-standing gap with Acrobat in about a year since its first release on 20 October 2025. How long it stays reliable will depend on its single maintainer, and on how quickly you apply the security updates.