Security & privacyPublished 5 min read

How to remove a password from a PDF you are allowed to open

How to take the password off a PDF when you know it, what can and cannot be done when you do not, and why "unlocking" means different things for different files.

A password-protected PDF is a nuisance once it has done its job. The bank statement you downloaded asks for your date of birth every time, the report your colleague sent cannot be merged with the others, and the archived contract must be re-typed into a viewer that does not remember passwords. Removing the password creates a normal, unencrypted copy. This guide explains how to do that for the two kinds of protection, and is clear about the cases where it is not possible.

First: which kind of protection is it?

Open the file.

  • It asks for a password before showing anything. That is an open password (user password). The content is encrypted. You need the password to proceed; no tool can get around that for a reasonably strong password.
  • It opens, but printing, copying or editing is greyed out, or a viewer shows "Secured" in the title bar. Those are permission restrictions (owner password). The content is not actually hidden, and the restrictions can be removed without knowing the owner password by most tools.

Both are explained in more depth in our guide on password-protecting a PDF.

Before you remove anything

Only remove protection from documents you are entitled to use that way: your own files, files sent to you for your use, or files where the sender has agreed. Removing restrictions from copyrighted material you do not own, or circumventing protection on documents you were not given access to, may be illegal where you live and is against our Terms of Service. Our tool asks for the password precisely because the legitimate case is "I know the password and want to stop typing it".

Removing a known open password on webutilitypro.com

  1. Open Unlock PDF and upload the file.
  2. Enter the password when prompted.
  3. Click Unlock. The server decrypts the document with your password and saves a new copy with no encryption.
  4. Download the unlocked PDF. The uploaded file, the password and the result are all deleted from our server after 60 minutes; the password is not stored anywhere.

The content of the unlocked copy is identical to the original. Fonts, images, bookmarks and form fields are preserved, because decryption does not re-render the pages.

Removing permission restrictions

If the file opens without a password, upload it to the same tool and leave the password field empty. Restrictions on printing, copying and editing are removed and an unrestricted copy is produced. This works because those restrictions are flags that only honest software enforces; the data itself was never encrypted against you. The usual legitimate reasons: you need to copy a quote from a report you are allowed to use, print a document for your own files, or merge a restricted PDF into a larger one.

What cannot be done

  • Open password unknown. The content is encrypted with AES (or RC4 on old files). Guessing is the only option, and a password of a few random words is beyond practical guessing. If the file is a statement or invoice, the password is usually something you know (date of birth, account number, PAN or customer ID); the issuer's email explains the pattern. If it is a document from a person, ask them.
  • Very old RC4-40 files. These can in principle be broken by brute force, but we do not offer that, and in practice the file is almost always something an issuer can resend.
  • Certificate-encrypted PDFs. Some corporate documents are encrypted to a specific recipient's certificate rather than a password. They can only be opened on a machine with that private key.
  • DRM-wrapped files (for example textbooks from some publishers) are not standard encrypted PDFs and are not unlockable by PDF tools.

If a tool claims it can remove an unknown open password from any PDF in seconds, it is either describing permission restrictions or it is not telling the truth.

After unlocking

The unlocked copy is readable by anyone who gets hold of it. Store it where the protection is provided by something else: an encrypted disk, a password-protected archive, or a document system with access control. If you only needed to remove the password temporarily to merge or convert, you can protect the result again with Protect PDF once you are done. Note that any digital signature on the original is still attached to the original; the unlocked copy is a new file and is not signed.

Doing it offline

If you know the password, every PDF application can save an unencrypted copy: in Adobe Acrobat use Protect → Remove Security; in macOS Preview open the file, enter the password, then File → Export as PDF (leave "Encrypt" unticked); in a browser, open the PDF, enter the password, and print to "Save as PDF" (this re-renders the pages and drops form fields, so prefer the other methods for forms). On the command line, qpdf --decrypt --password=SECRET in.pdf out.pdf produces an exact unencrypted copy. These keep the file on your computer, which is the right choice for financial and medical documents.

Typical workflow for statements and invoices

Many banks and utilities send PDFs protected with a predictable password. If you archive them, unlock each one as it arrives with the known password, save the unlocked copy in an encrypted folder, and keep a note of the password pattern in your password manager in case you ever need the originals. The point of removing the password is convenience; the point of the encrypted folder is to keep the protection you just removed.

Tools used in this guide

See all guides