How to Remove a Password From a PDF

You have a PDF that will not cooperate. Maybe it demands a password every time you open it. Maybe it opens fine but the print button is greyed out, you cannot copy a line of text out of it, or your editor refuses to save changes.

Those are two entirely different locks, and the difference decides everything. One comes off in about ten seconds without you knowing any password at all. The other cannot be removed by any honest tool on the internet unless you can supply the password — and this guide will be straight with you about that rather than selling you a miracle.

Below: how to tell which lock you have, how to remove each, what happens to your file afterwards, and what to actually do when the password is lost. Follow along with FileNaut's free Unlock PDF — it runs entirely inside your browser, so a confidential contract or bank statement never leaves your device.

This single fact explains almost every confusing thing about locked PDFs. The PDF format defines two separate passwords, and a file can carry either, both, or neither.

That last row is the difference between security and a "do not enter" sign.

With a user password, the page content is genuinely encrypted and your password derives the decryption key. No password, no key, no readable bytes. That is real cryptography and it does its job.

With only an owner password, the file is encrypted with a blank user password — so every PDF reader already has everything it needs to decrypt and display it. The restrictions are just flags inside the file saying "please do not allow printing." Well-behaved readers honour the request; nothing forces them to. Removing those flags is not cracking anything, it is declining a request.

Open the PDF in any reader — Chrome, Preview, Acrobat, whatever you have.

1. It asks for a password before showing anything → user password. You will need it. Jump to removing an open password.
2. It opens straight to the document, but printing, copying or editing is blocked → owner password only. You can remove this right now, knowing nothing.
3. It asks for a password, and printing is still blocked afterwards → the file has both. Decrypting with the password you have clears the restrictions too.

This is the common case — the report you can read but cannot print, the form you cannot copy a reference number out of, the manual your editor will not annotate.

1. Open FileNaut's Unlock PDF tool.
2. Drag your PDF onto the drop zone, or click to browse for it.
3. Leave the "I know the password" box unchecked. This is the whole trick — restriction-only locks do not need one.
4. Click Unlock Without Password.
5. Click Download Unlocked PDF. You get the same file with -unlocked added to the name.

The result is a normal, unrestricted PDF. Printing works, text selects and copies, editors will save changes to it. On a test file locked against printing, modifying and extraction, the encryption dictionary was gone from the output entirely — not bypassed, removed.

It also handles old files: a PDF secured with legacy 40-bit RC4 encryption, the kind produced by 2000s-era scanners that some modern tools now refuse outright, unlocked correctly in testing.

Once the restrictions are gone you can do what you were blocked from doing — edit the pages, merge, split, or convert to Word.

If the file demands a password before it will show you a single page, you need that password. With it, removing the lock permanently takes one extra click:

1. Open Unlock PDF and add your file.
2. Tick I know the password.
3. Type the password into the field (the eye icon reveals it if you want to check for typos).
4. Click Unlock with Password, then download.

The downloaded copy has no password at all. You will never be prompted again — and neither will anyone else you send it to, which is the point and also the risk. See the warning below.

A useful detail: if the PDF was created with two different passwords — one to open it, one for permissions — either one works. Tested on a file with separate user and owner passwords: supplying either removed the encryption completely. So the "admin" password from whoever produced the document is enough.

Behind the button is qpdf — the open-source engine libraries and publishers use for PDF surgery — compiled to WebAssembly so it runs inside your browser tab. It performs a --decrypt operation, which means:

• Nothing is re-rendered or re-compressed. Text stays selectable, vectors stay vector, images keep their quality. The page objects are copied across untouched.
• The encryption is removed, not bypassed. The output has no encryption dictionary at all.
• Nothing is uploaded. The file and the password stay in your browser's memory — which matters when the document is a payslip, a medical letter or a signed contract.
• Large files are fine. 5 MB, 20 MB and 40 MB files all processed correctly in testing, with time scaling roughly linearly. Bigger files simply take longer on slower devices.

Here is the honest answer that pages selling "PDF password recovery" will not give you: if a PDF has a user password and nobody knows it, the content is not recoverable.

The password is not stored in the file — it is an ingredient used to derive the key that decrypts the pages. There is nothing to extract or reset. The only approach that exists is guessing, and commercial "recovery" software is doing exactly that at speed. Against a short or predictable password that sometimes works. Against a decent AES-256 password it will not finish in your lifetime, whatever the marketing implies.

So before you spend money, spend five minutes on what actually works:

• Ask whoever sent it. Unglamorous, and it resolves most cases.
• Check the covering email. Institutions almost always state the password rule in the message the file arrived in.
• Try the standard formulas. Banks, insurers and payroll systems build passwords from your own data: date of birth as DDMMYYYY or DDMMYY, the last four digits of an account or card, a reference number, or surname in capitals joined to a birth year.
• Search your password manager and your browser's saved passwords for the sender's name.
• Go back to the source. If the PDF was exported from a Word file or generated by a system you still have access to, re-exporting it unprotected is far quicker than attacking the PDF.

If the file only has restrictions and no open password, none of this applies — you are not locked out at all.

Two errors can appear. They are precise, and each points at a specific fix.

One quiet behaviour worth knowing: run a PDF that was never locked through the tool and it succeeds anyway, handing back a rebuilt copy. Nothing is wrong — there was simply nothing to remove.

• Renaming the file, or changing the extension. The encryption is inside the file, not in its name.
• Zipping it. Compression does not touch the encryption dictionary.
• Uploading to Google Drive and exporting. Drive cannot open a file with a user password either.
• "Print to PDF" for an open-password file. You have to open it first, so you are back where you started.
• "Print to PDF" for a restricted file — this half works. Some readers will print a restriction-flagged document to a new, unrestricted PDF. But text may be rasterised into images, and you lose bookmarks, links, form fields and any digital signature. Removing the flags properly keeps all of it.

Removing restrictions from a document you own or are authorised to use is routine and legitimate. Printing your own bank statement, copying a quote out of a report your company paid for, or annotating a form you were sent to complete are not security violations — they are the ordinary uses those documents exist for.

What is not legitimate is using any tool to reach a document you have no right to access, or stripping protection to redistribute copyrighted material. This guide cannot help with the first anyway: without the password, an encrypted PDF stays encrypted.

If you handle documents under GDPR, HIPAA or similar, there is a practical point in your favour. Because Unlock PDF processes the file inside your browser, the document is never transmitted to a third party — exactly the exposure that makes uploading a client file to an unknown web service a problem.

1. Keep the locked original. Unlock a copy. If the password-protected version is the archival record, do not overwrite it.
2. Unlock before you batch anything. Restrictions make other tools fail in confusing ways. If a merge or conversion misbehaves, run the file through Unlock PDF first — it removes a whole class of mystery errors.
3. Re-protect before sending sensitive files onward with Protect PDF, and send the password by a different channel than the file.
4. Use a strong password when you re-protect. A four-word phrase beats P@ssw0rd1 by an enormous margin — see our strong password guide and the password generator.
5. Watch what you paste. Copying a password out of an email frequently brings a trailing space with it, which is the single most common cause of a "correct" password being rejected.