You can often view a protected file by simply opening it. For example, you might double-click an attachment in an email message, a document in File Explorer, or a link to a file and be able to open the protected file.
If you are trying to open a protected file that has a .pfile name extension, like a .ppng, you will need to use the Microsoft Purview Information Protection viewer or the Azure Information Protection mobile viewer (AIP mobile viewer). These viewers can open protected text files, protected image files, protected PDF files, and all files that have a .pfile file name extension on Windows, Android, or iOS.
If you are trying to open a protected PDF, then you also have the option of using a supported PDF reader, such as Microsoft Edge, to open it. For more information, see View protected PDFs using Microsoft Edge on Windows or Mac.
View protected files in Windows using the Microsoft Purview Information Protection viewer
If you are trying to open a protected file in Windows and it does not open properly, then you will likely need to use the Microsoft Purview Information Protection viewer for the desktop.
The information protection viewer supports the following file types and environments.
|
Requirement |
Description |
|---|---|
|
Supported OS versions |
Minimum operating systems include:
|
|
Supported sign-in credentials |
Sign in to the information protection viewer with one of the following: Work or school credentials Try logging in with your work or school credentials. Microsoft account If your personal email address was used to protect the file, sign in with a Microsoft account. If you need to apply for a Microsoft account, you can use your personal Hotmail or Gmail account or any other email address to do so. |
|
Supported file types |
Supported file types include protected email messages, PDF files, images, text files, and .pfile file name extensions. For example, these .pfile files include the following extensions: .rpmsg, .pdf, .ppdf, .pjpg, .pjpeg, .ptiff, .ppng, .ptxt, .pxml |
-
Install the Microsoft Purview Information Protection viewer. The viewer installs automatically as part of the Microsoft Purview Information Protection client. Or you can install the Microsoft Purview Information Protection viewer on its own.
-
Open the protected file (for example, by double-clicking the file or attachment, or by clicking the link to the file). If you are prompted to select an app, select Open with > Information Protection Viewer.
-
If you see a page to Sign in or Sign up, click Sign in and enter your credentials. If the protected file was sent to you as an attachment, be sure to specify the same email address that was used to send you the file. If you do not have an account that is accepted, see Prompts for authentication.
-
A read-only version of the file opens in the information protection viewer or in the application associated with the file name extension.
-
If you have additional protected files to open, you can browse directly to them from the viewer by using the Open option. When Open is selected, File Explorer opens. Then the selected file replaces the original file in the viewer.
-
If you want to see the owner and permissions for the file, click View Permissions.
-
If you want to print the file, click Print.
-
If you want to edit the file, click Save As. This creates a copy of the file without protection.
Prompts for authentication
Before you can view the protected file, the Rights Management service that was used to protect the file must first confirm that you are authorized to view the file. The service performs this confirmation by checking your user name and password. In some cases, these credentials might be cached and you do not see a prompt that asks you to sign in. In other cases, you are prompted to supply your credentials.
If you organization does not have a cloud-based account for your to use (for Microsoft 365 or Microsoft Azure) and does not use an equivalent on-premises version (Azure Directory Rights Management Services), you have two options:
-
If you were sent a protected email, follow the instructions to sign in with your social identity provider (such as Google, if you are using a Gmail account) or apply for a one-time passcode.
-
You can apply for a free account that will accept your credentials so that you can open documents that are protected by Rights Management. To apply for this account, click the link to apply for RMS for individuals and user your company email address rather than a personal email address.
View protected files on iOS using the Azure Information Protection mobile viewer
If you are trying to open a protected file on your iOS mobile device, and it does not open properly, then you will likely need to use the Azure Information Protection mobile viewer for iOS. This mobile viewer enables you to view protected emails, PDFs, images, and text files that cannot be opened with your regular apps for these file types.
The AIP mobile viewer for iOS supports the following file types and environments:
|
Requirement |
Description |
|---|---|
|
Supported OS versions |
Minimum operating systems include:
The AIP mobile viewer is not supported on Intel CPUs. |
|
Supported mobile ABIs |
Supported Application Binary Interfaces (ABIs) include:
|
|
Supported sign-in credentials |
Sign in to the AIP mobile viewer app with one of the following: Work or school credentials Try signing in with your work or school credentials. If you have questions, contact your administrator to understand whether your organization has Active Directory Rights Management Services on-premises with the mobile device extension, or uses Azure Information Protection. Microsoft account If your personal email address was used to protect the file, sign in with a Microsoft account. If you need to apply for a Microsoft account, you can use your personal Hotmail or Gmail account or any other email address to do so. |
|
Supported file types |
Supported file types include protected email messages, PDF files, images, text files, and .pfile file name extensions. For example, these .pfile files include the following extensions: .rpmsg, .pdf, .ppdf, .pjpg, .pjpeg, .ptiff, .ppng, .ptxt, .pxml |
-
Download the Azure Information Protection mobile app from the App store.
-
After you've installed the app, go to the protected email or file.
-
When you are prompted to select an app for the protected file, select the AIP Viewer.
-
Select Share, and then select AIP Viewer.
-
Sign in, or select a certificate as prompted.
-
After you've been authenticated, your email or file will open in the AIP Viewer.
Support scope and recommended usage for AIP mobile viewers
The AIP mobile apps are viewers only, and do not enable you to create new emails, reply to emails, or create or edit protected files. The AIP mobile apps also cannot open attachments to protected PDFs or emails.
-
If you have mobile Office apps installed on your mobile device, we recommend that you use the Office apps to view protected files
-
The AIP mobile apps support only protected files. Unprotected files are not supported and cannot be consumed in the mobile viewer apps.
-
Intune's Open In/Share filtering features are not currently supported.
-
Conditional Access Policies require use of Microsoft Authenticator.
-
If an email has more than two layers of protected messages, then the AIP mobile viewer can only open the first attached email. The second layer of attachments and beyond will fail with an error.
Notes:
-
The AIP mobile viewer apps send system metadata and pseudonymized end-user data to Microsoft, such as device ID, manufacturer, OS, and OS version and build number.
-
Data is sent each time the AIP mobile viewer apps are launched and each time they are used to decrypt and consume protected documents on the device.
View protected files on your Android device
If you are trying to open a protected file on your Android mobile device, and it does not open properly, then you will likely need to use the Azure Information Protection mobile viewer for Android. The AIP mobile viewer for Android enables you to view protected emails, PDFs, images, and text files that cannot be opened with your regular apps for these file types.
The AIP mobile viewer for Android supports the following file types and environments:
|
Requirement |
Description |
|---|---|
|
Supported OS versions |
Minimum mobile operating systems include:
The AIP mobile viewer is not supported on Intel CPUs. |
|
Supported mobile ABIs |
Supported Application Binary Interfaces (ABIs) include:
|
|
Supported sign-in credentials |
Sign in to the AIP mobile viewer app with one of the following: Work or school credentials Try signing in with your work or school credentials. If you have questions, contact your administrator to understand whether your organization has Active Directory Rights Management Services on-premises with the mobile device extension, or uses Azure Information Protection. Microsoft account If your personal email address was used to protect the file, sign in with a Microsoft account. If you need to apply for a Microsoft account, you can use your personal Hotmail or Gmail account or any other email address to do so. |
|
Supported file types |
Supported file types include protected email messages, PDF files, images, text files, and .pfile file name extensions. For example, these .pfile files include the following extensions: .rpmsg, .pdf, .ppdf, .pjpg, .pjpeg, .ptiff, .ppng, .ptxt, .pxml |
-
Download the Azure Information Protection mobile app from the Google Play store.
-
After you've installed the app, go to the protected email or file.
-
When prompted to select an app, select the AIP Viewer.
-
Sign in or selected a certificate as prompted.
-
After you've been authenticated, your email or file will open up in the AIP mobile viewer.
Support scope and recommended usage for AIP mobile viewers
The AIP mobile apps are viewers only, and do not enable you to create new emails, reply to emails, or create or edit protected files. The AIP mobile apps also cannot open attachments to protected PDFs or emails.
-
If you have mobile Office apps installed on your mobile device, we recommend that you use the Office apps to view protected files
-
The AIP mobile apps support only protected files. Unprotected files are not supported and cannot be consumed in the mobile viewer apps.
-
Intune's Open In/Share filtering features are not currently supported.
-
Conditional Access Policies require use of Microsoft Authenticator.
-
If an email has more than two layers of protected messages, then the AIP mobile viewer can only open the first attached email. The second layer of attachments and beyond will fail with an error.
Notes:
-
The AIP mobile viewer apps send system metadata and pseudonymized end-user data to Microsoft, such as device ID, manufacturer, OS, and OS version and build number.
-
Data is sent each time the AIP mobile viewer apps are launched and each time they are used to decrypt and consume protected documents on the device.
