How to Unlock a Password-Protected PDF
When and how you can legitimately remove password protection from a PDF — and what strong encryption makes impossible.
Quick summary
Quick answer: If you have the owner (permissions) password, Adobe Acrobat, free online tools, and qpdf can all remove PDF encryption in a few seconds. If you don't know the owner password, the options are limited — modern AES-256 encrypted PDFs are practically unbreakable without it. Only unlock documents you legitimately own or are authorised to modify.
You can also unlock a PDF online for free using Mapsoft's PDF Hub — no installation required.
Two types of PDF password
PDF encryption uses two distinct passwords. Understanding which one you have — or lack — determines what you can do.
- User (open) password. Required to open the document at all. Without it, you can't even read the file.
- Owner (permissions) password. Controls what a user can do with the document: print, copy text, fill forms, modify, and so on. The document opens without it, but restrictions are enforced.
A PDF can have either, both, or neither. "Unlocking" normally means removing the owner password (so restrictions go away). Removing the user password requires decrypting the file and is only possible if you have the user password or the owner password.
For full context on how PDF encryption works under the hood, see our PDF security guide.
Legitimate reasons to unlock a PDF
Before anything else: only unlock documents you own or are authorised to modify. "Unlocking" a third party's PDF to bypass their restrictions may violate their licensing terms, copyright, or the Computer Misuse Act in the UK (and analogous laws elsewhere). The rest of this article assumes you're working with your own documents or documents you have permission to modify.
- You forgot the password but have the file and the owner password. Acrobat and most tools can remove the user password if the owner password is known.
- You're consolidating an archive. Documents originally password-protected by a former employee need to be re-exported in a consistent, unprotected form for long-term storage.
- You need to process the document programmatically. Scripting, OCR, extraction, and analysis tools often can't handle encrypted PDFs; unlocking allows the pipeline to run.
- A known-password document needs permission changes. Rather than editing the owner password, it's often cleaner to remove protection, modify, and re-apply new protection.
Methods (when you have the password)
Method 1 — Adobe Acrobat
Open the PDF in Acrobat Pro. If it has a user password, enter it when prompted. Then:
- Go to File → Properties → Security tab.
- Change "Security Method" from "Password Security" to "No Security".
- Enter the owner password if prompted.
- File → Save As a new unencrypted copy.
Method 2 — Free online
Mapsoft's Unlock PDF tool accepts the PDF and the password (user or owner) and returns an unprotected copy. Works entirely in the browser. Suitable for non-sensitive unlocks where you don't want to install Acrobat.
As with any online tool, check the service's privacy policy before uploading confidential material. For highly sensitive documents, prefer an offline tool.
Method 3 — Command line (qpdf)
qpdf handles password removal cleanly and is fully scriptable:
qpdf --password=PASSWORD --decrypt input.pdf output.pdfremoves both user and owner passwords (given the appropriate password).qpdf --password=OWNERPW --decrypt --preserve-encryption input.pdfremoves only the permission restrictions while keeping the open password in place.
When you don't have the password
PDF encryption has evolved over the years. Older PDFs (40-bit RC4, PDF 1.3) could sometimes be cracked; modern PDFs (AES-256, PDF 2.0) are in practice not breakable by brute force.
- 40-bit and 128-bit RC4 (pre-PDF 1.6). A determined attacker with modern hardware can brute-force these in hours to days. It's technically possible but probably not legal in your jurisdiction.
- AES-128 (PDF 1.6 / Acrobat 7+). Brute-force is computationally infeasible with a well-chosen password. Short or common passwords can be recovered via dictionary attacks.
- AES-256 (PDF 2.0 / Acrobat 9+). Not breakable by any realistic means with a strong password. Don't waste time.
If you've genuinely lost the password to your own document and the encryption is strong, the honest answer is that recovery is unlikely. Check your password manager, keychain, or backup passwords. For documents others have sent you with restrictions you can't bypass, ask them for an unrestricted copy.
Preventing this situation
- Use a password manager. Store the user and owner password alongside the file reference. Every modern password manager (1Password, Bitwarden, LastPass, Apple Keychain) supports document passwords.
- Document the owner password policy. If your organisation protects documents with a shared owner password, record where that password lives so future readers can access the files.
- Consider digital signatures instead. For documents where you want to prove authorship or prevent tampering, a digital signature gives stronger guarantees than a password without the "lost password" failure mode.
Frequently Asked Questions
How do I remove a password from a PDF?
Open it in Adobe Acrobat, go to File → Properties → Security, change the Security Method to "No Security", and Save As a new file. Online tools like Mapsoft's Unlock PDF do the same in the browser. Command line: qpdf --password=PW --decrypt.
Can I unlock a PDF without the password?
Only for very old PDFs with weak encryption (40-bit RC4). Modern PDFs using AES-128 or AES-256 are not breakable without the password. If you've lost your own password, check password managers and backups; if it's someone else's document, ask them for an unrestricted copy.
Is it legal to unlock a PDF?
It depends on who owns the document and what the restrictions are meant to prevent. Unlocking your own document or a document you're authorised to modify is typically fine. Bypassing restrictions on a third party's copyrighted document may violate their terms or local law — consult a lawyer if unsure.
What's the difference between user password and owner password?
The user password is required to open the document at all. The owner password controls what you can do once open — print, copy, modify, fill forms. A PDF can have either, both, or neither.
Mapsoft SecuritySetter
For managing PDF security across batches — applying, removing, or changing passwords and permissions on many files at once — SecuritySetter works as an Acrobat plugin with full scripting support. Free trial available.
Related Articles
PDF Security: Passwords, Permissions & Encryption
Full technical coverage of how PDF encryption works and the different protection methods.
How to Encrypt and Password-Protect PDF Files
The inverse operation: adding protection rather than removing it. Covers user and owner password setup.
Digital Signatures in PDF Documents
Often a better alternative to password protection for proving authorship and preventing tampering.