Node.js PDF encryption for property bundles: sending passwords out of band

The article explains how a Node.js service should encrypt finished PDF bundles, store them privately, and deliver the document reference and its password through two separate channels. It warns that sending both through the same email thread undermines the security benefit, and that passwords must never appear in logs. The recommended design splits the work so a thin Express handler accepts jobs while a worker handles encryption, using explicit state transitions such as encrypted, stored_private, and password_notified. Operators are advised to alert on bundles stuck in a half-delivered state rather than on individual request failures. The piece also covers the state record fields needed, the dangers of false completion signals, and a Go example showing careful API client behavior.