Acrobat Protected Mode Becomes Mandatory in 2026
Adobe is retiring the option to switch off the Adobe Acrobat sandbox — macOS in October 2026, Windows in December 2026. Our Windows plug-ins are already compatible.
Adobe has announced that the option to switch off its security sandbox is going away. In an announcement on the Adobe community forums, Adobe confirmed that Sandbox on macOS and Protected Mode on Windows will become mandatory, with no way to turn them off.
For most people opening a PDF, nothing will change. For anyone running third-party plug-ins inside Adobe Acrobat — including ours — it is a deadline worth knowing about.
What is changing, and when
Adobe is retiring the temporary option that let users and administrators disable the sandbox. The dates are staggered by platform:
- macOS — October 2026. Sandbox becomes mandatory.
- Windows — December 2026. Protected Mode becomes mandatory.
After those dates, Acrobat, Acrobat Reader and every third-party plug-in must operate inside the sandbox. Adobe has been explicit that this is one-way: once the option is removed on your platform, there is no supported way to disable the sandbox again.
What Protected Mode actually does
Protected Mode runs Acrobat's document-rendering work in a separate process with deliberately reduced privileges. That process cannot freely read and write arbitrary files, reach into the registry, or call out to the wider system. If a malformed PDF manages to exploit a rendering bug, the attacker lands in a process that can do very little, rather than one running with the user's full rights.
It is a well-established defence, and Adobe's position is straightforward: the strongest available protection should be on for everyone, not only for those who leave the default alone.
Why this matters for plug-ins
A plug-in is loaded into that same restricted process, so it inherits the same restrictions. Operations a plug-in might once have performed directly — writing an exported file to disk, reading a configuration file, touching the registry, launching a helper application — are exactly the operations the sandbox is designed to prevent.
This is the root of a problem some customers will recognise. A plug-in written before sandboxing that tries to write a file directly will not always produce a clear permissions error; it may simply appear not to work. Historically the workaround was to switch Protected Mode off. From December 2026 on Windows, that workaround stops existing.
How a plug-in works inside the sandbox
Adobe's answer is the sandbox broker extensibility mechanism in the Acrobat SDK. The privileged work moves out of the sandboxed process and into a separate broker process that still runs with full rights. The plug-in asks; the broker decides and acts.
In practice a sandbox-ready plug-in is built in two halves that talk to each other:
- The plug-in itself, loaded into the restricted process, which can no longer perform privileged operations directly.
- A plug-in broker, which extends the broker APIs at runtime through the
SandboxHFThost function table that Adobe publishes for exactly this purpose. - A handshake between the two at start-up, after which the plug-in delegates privileged work through CrossCalls rather than attempting it itself.
Adobe ships simple-ipc-lib and the SandboxPISDK to support this work. It is not a recompile: it means splitting a plug-in into client and server components, deciding which operations genuinely need elevated rights, and implementing each of those as a call the broker can validate and carry out. That is the work Adobe is asking developers to complete before the deadlines.
Where Mapsoft stands
Our Windows plug-ins have been updated and are compatible with Acrobat running under Protected Mode. You do not need to wait for the December 2026 deadline, and you should not need to disable Protected Mode to use them.
If you are running an older build, the upgrade path is the usual one: download the current installer for your product and install it over the existing version. Customers with a valid licence can take the update at no additional cost.
If you were told to switch Protected Mode off. Some of our older installation notes advised unchecking Protected Mode when a plug-in could not reach external files or the registry. That advice applied to earlier builds. Update to the current version instead — and treat any remaining instruction to disable Protected Mode as out of date, because after December 2026 the option will not be there.
What to do before the deadlines
- Update your Mapsoft plug-ins to the current Windows builds from the products page.
- Stop relying on the opt-out. If a deployment script, group policy or build image disables Protected Mode, plan its removal now rather than in December 2026.
- Check your other plug-ins. Anything third-party in your Acrobat installation faces the same deadline; ask each vendor where they stand.
- Test with Protected Mode on, so you find any workflow that depended on it being off while there is still time to change it.
If you are unsure whether a particular Mapsoft product or version is ready, our support page has compatibility information and the team is happy to advise directly. If you maintain your own Acrobat plug-in and want help with the broker work, that is precisely the kind of project our Adobe development team takes on.
Related links
Related Articles
All Mapsoft Plugins Now Available for 64-bit Adobe Acrobat
Our complete product range supports both 32-bit and 64-bit Adobe Acrobat, with installers that detect which one you are running.
What Is an Acrobat Plug-in?
How Acrobat plug-ins work, what they can do that scripting cannot, and how they are built against the Acrobat SDK.
Acrobat SDK Plug-in Tutorial
A walkthrough of building an Acrobat plug-in with the SDK — the project setup, the build, and getting it loaded by Acrobat.
Questions About Protected Mode?
If you are unsure whether your plug-ins are ready for the 2026 deadlines, get in touch with our team.