How to Check if an EPUB Has DRM (3 Ways, One Trap)

An EPUB is a renamed zip. Open it and look in the META-INF folder: rights.xml means Adobe DRM, and an encryption.xml that encrypts anything other than fonts means DRM.

encryption.xml alone is not proof. If every entry uses the IDPF or Adobe font-obfuscation algorithm, the book is unlocked and will open anywhere.

Calibre tells you too: try to convert the book and it stops with a 'locked by DRM' error if it is protected.

Fastest route: drop the file into GemReader's free Book Checker. It reads those files in your browser and nothing is uploaded.

If the only thing encrypted inside the EPUB is fonts, it is not DRM — the book opens normally. If the content documents are encrypted, or rights.xml is present, it is DRM and no third-party reader can open it. Everything below is how to tell those two apart.

Most people ask whether an EPUB has DRM because a reader refused it. Readers refuse files for other reasons too: a broken container, a fixed-layout book on a reflowable-only app, an EPUB 3 feature an older app never implemented. The error is usually the same generic 'could not open this book' regardless of cause.

DRM has a specific fingerprint, and you can check for it in under a minute. Once you know, you also know whether the fix is a different reader or a different copy of the book.

Copy the file, rename the copy from .epub to .zip, and extract it. Every valid EPUB has a META-INF folder at the top level, and that folder is where DRM lives.

Look for META-INF/rights.xml. If it exists, the book carries Adobe ADEPT DRM — the scheme used by most retailers that sell through Adobe Digital Editions. Only Adobe-licensed software on the account that bought the book can open it. Stop here; the answer is yes.

Next look for META-INF/encryption.xml. If it is absent, nothing in the book is encrypted and the answer is no. If it is present, open it in a text editor. It lists each encrypted file and the algorithm used on it, in lines that look like EncryptionMethod Algorithm="...". The algorithm decides everything, which brings us to the trap.

Publishers who embed a commercial font are usually required by the font licence to obfuscate it, so it can't simply be lifted out of the zip. The EPUB spec provides two algorithms for exactly this: http://www.idpf.org/2008/embedding and http://ns.adobe.com/pdf/enc#RC. Both appear in encryption.xml, both say 'encrypted', and neither locks the book.

If every EncryptionMethod in the file uses one of those two algorithms, and every EncryptedData entry points at a font file, the book is DRM-free. Any reader opens it and de-obfuscates the fonts on the fly using the spec's own key derivation.

Almost every online 'is my EPUB DRM free' tool skips this distinction. It sees encryption.xml, reports the book as locked, and sends you off hunting for a DRM-free copy of a book that was never locked. If the algorithm is anything else — AES, a vendor URI you don't recognise — then the content documents themselves are encrypted, and that is DRM.

If you already have Calibre installed, add the book to your library and try to convert it to any format. Calibre inspects the container before converting and, if the book is protected, stops immediately with an error that begins 'This book is locked by DRM'. If the conversion runs, the book is not DRM-protected.

This is reliable for Adobe ADEPT and for content encryption in general, and Calibre correctly ignores font obfuscation. The cost is a desktop, a library import, and a conversion attempt to answer a yes/no question.

GemReader's Book Checker does the META-INF inspection for you. Drag the EPUB onto the page and it reads rights.xml and encryption.xml with JavaScript in your own tab; the file is never sent anywhere. Disconnect from the network after the page loads and it still works.

It reports three distinct outcomes — no DRM, obfuscated fonts only, or encrypted content — so the font trap is handled rather than glossed over. It also checks the things behind most 'won't open' complaints that aren't DRM at all: fixed layout, EPUB version, form fields, embedded scripts, file size.

The same page handles PDF and Kindle files, where the DRM question has a different shape.

Kindle files (.azw, .azw3, .mobi, .kfx) don't use encryption.xml. The MOBI header carries an encryption-type field: 0 means unprotected, 1 or 2 means Amazon DRM. Books delivered by Amazon to a registered device are almost always type 2. Only Amazon's apps on the purchasing account can open those.

PDFs have two different locks. A user password stops the file from opening at all, and no reader can get past it without the password. An owner password lets the file open normally but restricts printing or copying — most 'protected' study PDFs are this kind, and they read fine in any viewer. If your PDF opens without asking for a password, it is not DRM in the sense that matters.

Check the seller first. Many publishers and stores offer the same title DRM-free, sometimes on the same product page under a 'download' or 'other formats' link. Humble Bundle, Leanpub, Smashwords, Baen, Tor and most independent publishers ship DRM-free EPUB by default.

For older titles, Standard Ebooks and Project Gutenberg publish clean, well-formatted public-domain EPUBs with no encryption at all.

If the book is locked and the seller won't provide an open copy, it will only ever open in the seller's own app. Stripping DRM is a legal grey area in most jurisdictions and is not something GemReader helps with.

Once the checker says no DRM, the book opens in GemReader like any other file. It is a free Android reader built for studying: highlight as you read, turn highlights into flashcards, keep your library offline and off any account. Download for Android and import the EPUB straight from your phone.