Paper Shredder Security Levels, Explained: What P-3, P-4 and P-7 Actually Mean

The P-number on a shredder is a measured particle size under DIN 66399, not a marketing grade — P-3 allows pieces up to about 320 mm², P-4 halves that to 160 mm², and P-7 holds particles to 5 mm² — and the gap between P-3 and P-4 is the one that decides whether a discarded tax return can be put back together.

A shredder's P-level is a measurement, not a mood. Under DIN 66399 — the German standard now aligned internationally as ISO 21964 — each level from P-1 to P-7 sets a maximum size for the particles a machine may leave behind. P-3 allows particles up to about 320 mm², large enough to carry readable words and numbers. P-4 cuts that ceiling in half, to 160 mm², and typical P-4 machines cut far smaller still. P-7, at the top, allows no particle larger than 5 mm² and is the level the U.S. National Security Agency requires for classified paper. The higher the P-number, the smaller the pieces, and the less of your document survives in usable form.

The standard behind the letters

Before DIN 66399, shredders were sold on cut names — strip-cut, cross-cut, micro-cut — that described the shape of the cut but promised nothing precise. Two machines both labeled "cross-cut" could leave pieces of very different sizes. DIN 66399, introduced in 2012, replaced that looseness with a measurement: for paper, output is graded by particle area, and a machine earns a level only if its particles stay at or under that level's ceiling. The same framework grades other media, each with its own letter prefix, but P is the series for paper.

The standard also groups the levels into three protection classes: Class 1 for internal data, where a leak would do limited harm; Class 2 for confidential data, where a leak could seriously harm a person or company or break the law; and Class 3 for highly confidential and secret data, where a leak could threaten an organization's survival. Fellowes, one of the largest shredder manufacturers, maps the levels onto those classes — P-1 to P-3 for Class 1, P-3 to P-5 for Class 2, P-5 to P-7 for Class 3 — and recommends P-4 or P-5 for most confidential shredding. The method follows: decide how much damage a leaked document would do, then pick the level its class calls for.

The full ladder, P-1 to P-7

Each step up the ladder shrinks the largest allowed particle. The early levels are coarse, the middle is where home and office security lives, and the top two exist for governments.

• P-1 — up to 2,000 mm². Strips up to 12 mm wide. General paper only, nothing sensitive.
• P-2 — up to 800 mm². Strips up to 6 mm wide. Still strip-cut, still readable.
• P-3 — up to 320 mm². The first cross-cut level. Smaller, but a patient person can still reassemble a short document.
• P-4 — up to 160 mm². The standard office level. A common 4 × 12 mm cut makes 48 mm² particles — well under the ceiling — and roughly 1,250 pieces per letter page.
• P-5 — up to 30 mm². A finer micro-cut: a 2 × 12 mm cut makes 24 mm² particles and about 2,600 pieces per page.
• P-6 — up to 10 mm². Secret-level destruction, mostly government and defense.
• P-7 — up to 5 mm². The highest level, for top-secret and classified material.

The arithmetic explains why the middle steps matter. A letter page covers about 60,300 mm²; divide that by particle size and you get the reconstruction problem facing anyone who fishes the bag from the trash. At P-3's ceiling, a page could come out as fewer than 200 large pieces — a jigsaw with the picture printed on it. At a typical P-4 cut, roughly 1,250 pieces carry fragments of words at best. At P-5, about 2,600 pieces hold a character or two each.

Why strip-cut fails, and why P-3 is only a starting point

Strip-cut machines — P-1 and P-2 — cut a page once, lengthwise, and stop. The ribbons keep everything that makes a document readable: lines of text run along the strip, account numbers keep their order, and a signature survives whole. Reassembly needs no laboratory — lay the strips side by side in order, guided by the printed lines and the paper's edges, and the page reads again. Shredded documents have been reconstructed by hand in investigations and by volunteers working from scans of far worse material. Strip-cut protects against a glance into a bin, not against anyone who wants the contents.

P-3 cross-cut fixes the geometry — a second cut chops the ribbons into short sections — but not yet the scale. At up to 320 mm² a particle can hold several whole words, and sorting a few hundred large, text-bearing pieces is an afternoon's puzzle, not a forensic project. P-3 therefore suits internal documents and low-sensitivity paper, while guidance for genuinely confidential records consistently starts one level up. In our own paper shredder rankings, every machine in the top 10 is P-4 or P-5 — not because P-3 machines are badly built, but because the documents people actually buy a shredder for start at P-4's level of sensitivity.

What P-7 really means: the NSA/CSS line

P-7 is where the consumer scale ends and a government specification takes over. According to the NSA/CSS Evaluated Products List for Paper Shredders, a listed device must reduce paper to particles measuring 1 millimeter by 5 millimeters or less — 5 mm², at a specific tested shape. Listing is not self-declared: NSA/CSS testing runs letter-size copy paper through the machine under load, classifies it by sustained throughput in reams per hour, and the list states that all listed products sanitize paper classified TS/SCI and below.

Two consequences follow. First, a true NSA-listed P-7 machine is a specialized, expensive, relatively slow device built for facilities destroying classified paper — not a faster office shredder. Second, the label deserves a careful read: a consumer product marketed with a high P-number claims a particle size, while an NSA/CSS listing is a tested qualification. Short of classified material, P-6 and P-7 buy no practical protection beyond P-5; the reconstruction they prevent is the kind only a state-level adversary would attempt.

What level you actually need

Start from the document, not the machine. The Federal Trade Commission's Disposal Rule (16 CFR Part 682) requires anyone holding consumer information for a business purpose to dispose of it with reasonable measures — its own example is shredding paper so the information "cannot practicably be read or reconstructed." The FTC's business guide, Protecting Personal Information, says the same plainly: shred, burn, or pulverize paper records, and make shredders available throughout the workplace. Its consumer advice lists what households should shred: credit reports, cleared checks, credit and insurance offers, prescription information, and expired identification.

Translated into P-levels:

• At home: P-4 is the sensible default and the accepted floor for tax records, bank statements, and medical paperwork. A P-3 machine handles junk mail, but the one box of paperwork a year that could fund an identity theft deserves the finer cut.
• In a small office: P-4 across the board, placed where paper piles up. The FTC's point about a shredder next to the copier matters: a secure shredder down the hall loses to the open recycling bin beside the desk. Anything that prints sensitive pages — see also our printer rankings — should feed the same bin.
• In a business handling client data: P-4 is the minimum and P-5 the prudent choice. Client files, payroll records, and anything derived from a consumer report fall under the Disposal Rule's test, and P-5's roughly 2,600 pieces per page give a wide margin under it. P-6 and P-7 enter only when a contract or government specification names them.

One trade-off deserves honesty: finer cuts are slower, and a machine that jams on a thick stack teaches its owner to throw paper away whole. The right level is the finest one you will actually use for every sensitive page — which is why P-4 and P-5 dominate serious line-ups. How we weigh trade-offs like that, rather than headline specifications alone, is set out on our Methodology page.

Sources

• Fellowes — Shredder Security Levels (DIN 66399 levels, protection classes and the P-4/P-5 recommendation for confidential material): https://www.fellowes.com/uk/en/catalog/business-machines/resources/pg/shredder-security-levels
• NSA/CSS — Evaluated Products List for Paper Shredders (the 1 mm × 5 mm particle requirement and TS/SCI rating): https://www.nsa.gov/Resources/Media-Destruction-Guidance/NSA-Evaluated-Products-Lists-EPLs/1000/
• NSA/CSS — Paper Shredder Evaluated Products List, July 2025 (PDF): nsa.gov EPL (PDF)
• Federal Trade Commission — Protecting Personal Information: A Guide for Business (shred, burn or pulverize paper records; the Disposal Rule, 16 CFR Part 682): https://www.ftc.gov/business-guidance/resources/protecting-personal-information-guide-business
• Federal Trade Commission — Protecting Your Personal Information: Which Documents to Keep and Which to Shred (consumer advice, June 2025): https://consumer.ftc.gov/consumer-alerts/2025/06/protecting-your-personal-information-which-documents-keep-which-shred