PDF password protection is more confusing than it looks, because a PDF can carry two separate passwords that do completely different jobs. Knowing which one you are dealing with explains most of the odd behaviour people run into.
PDFs Have Two Different Passwords
The user password, sometimes called the open password, is the one that stops the document being read at all. Without it the file cannot be decrypted and there is nothing to display.
The owner password, sometimes called the permissions or master password, does not stop you opening the file. It controls what you are allowed to do once it is open — printing, copying text, extracting pages, filling forms. This is why you sometimes open a PDF perfectly normally and then find printing greyed out.
Owner-password restrictions are enforced by the PDF reader honouring a flag in the file, not by cryptography. That makes them a policy signal rather than real security, which is worth remembering before relying on them to protect anything.
Removing a Password You Know
The usual reason to do this is that the password has served its purpose — a bank statement or payslip that arrived encrypted and now needs to go into your own records, where re-typing a password every time is just friction.
- 1. Open the Unlock PDF tool and add the file.
- 2. Enter the password you already have.
- 3. The file is decrypted locally and you download an unprotected copy.
Do this in the browser rather than on a server. An encrypted PDF is encrypted precisely because its contents are sensitive, and uploading it plus its password to a third party undoes the entire point of the protection. PDFixel decrypts on your device, so neither the file nor the password leaves it.
If You Have Forgotten It
Modern PDFs use AES-256, and a correctly implemented AES-256 password cannot be recovered by any practical means. There is no back door in the format and no clever trick. Brute force against a reasonable password would take longer than anyone has.
This is worth stating plainly because the search results for it are full of tools promising otherwise. Some of them work only on very old RC4-encrypted files, some only guess weak or common passwords, and some are simply asking you to upload a confidential document to an unknown party. Treat any of them as a reason for caution rather than a solution.
- Ask whoever sent the file to resend it unprotected or tell you the password. This is nearly always the fastest route.
- Bank and payslip PDFs typically use a documented password formula, for example a date of birth combined with part of an account number. Check the covering email.
- If the file is your own and the password was auto-generated, look in your password manager before assuming it is lost.
Restrictions Without a Password to Open
If you want recipients to read a document freely but not print or copy from it, set only an owner password with the permissions you want and leave the user password empty. The file opens for anyone and the restrictions apply.
For anything genuinely confidential, set a user password so the content is actually encrypted, and share that password over a different channel than the file itself. Emailing both together protects nothing.
Summary
Removing a PDF password you know takes seconds, and should be done locally rather than by uploading an encrypted file and its password to somebody else. A forgotten AES-256 password is not recoverable, so the realistic options are asking the sender or checking whether the file uses a documented password formula. Owner passwords, which restrict printing and copying rather than opening, depend on the reader honouring a flag and are not real security.