toolkitta. Small tools. Big help.

How to remove a password from a PDF you own (and from a read-only PDF)

Unlock PDFUpdated 22 September 2026

Password-protected PDFs are a nuisance exactly when they should not be: the bank statement you must upload somewhere that refuses encrypted files, the payslip that asks for your date of birth every time it is opened, the contract that will not print. If you know the password, removing it is a legitimate, one-minute job — and the one job where uploading the file to a random website is a bad idea, because you are handing over both the document and its key. This guide explains the two kinds of PDF protection, how Unlock PDF removes either in your browser, and what to check afterwards.

Two kinds of protection, one button

A PDF can carry an open password (the specification calls it the user password), restrictions, or both. With an open password the entire file is encrypted; a viewer asks for the password before it shows anything, and without it the content is unreadable. Restrictions are different: the file opens normally, but permission flags tell viewers to disable printing, copying text, editing or adding comments. They are protected by a second, owner password that the author sets and you usually never see.

The detail that matters is how restriction-only files are built. They are encrypted too, but with an empty open password — that is why they open without asking. Any program that can decrypt a PDF can therefore open them fully, and the permission flags are a request the program chooses to honour. Unlock PDF treats both cases the same way: add the file, supply the password if the file needs one, and download a copy with no encryption at all.

Removing an open password

  1. Open Unlock PDF and add the file, or up to 20 files. A row that needs a password says Password required; its page count and preview appear only after unlocking, because nothing can be read before then.
  2. Type the password in the field on the right. The same password is tried on every locked file in the queue, and the owner password works too if that is the one you have.
  3. Click Unlock. A wrong password marks only that file, with the others unaffected; correct it and unlock again. Download the result or send it straight to Compress PDF, Merge PDF, Split & Organize or Protect PDF.

The password is used once, in your browser, to derive the decryption key. It is not stored, not written into the page address and not sent to Toolkitta or anyone else; the file never leaves your device either. Close the tab and both are gone.

Lifting restrictions from a read-only PDF

A file that opens fine but refuses to print, or greys out the copy command, is a restricted PDF. Add it to Unlock PDF and the row reads Opens without a password, followed by what the file blocks. No password is needed: click Unlock and the copy prints, copies and edits normally. Merge PDF, Compress PDF and the other tools on this site refuse encrypted input, so this is also the first step before working on such a file with them.

Whether you should do this is a separate question. Restrictions express the author's intent — a proof not to be printed, a form not to be altered. Lift them on your own documents, on documents you have been given permission to use freely, or when the restriction is simply in the way of legitimate use such as accessibility software. Do not use the tool to get around terms you agreed to.

What the unlocked copy keeps

Unlock PDF decrypts the document in memory and saves it again as it is. Pages are not copied into a new file, forms are not flattened and nothing is re-rendered, so bookmarks, internal links, comments, editable form fields, the title and author, page sizes and the original scan or text quality are all unchanged. The result is an ordinary PDF that opens in every viewer, with no encryption dictionary left in it.

  • Every revision of the standard security handler is supported: RC4 40-bit and 128-bit, AES-128 and AES-256, including the ISO 32000-2 variant that Acrobat has used since 2008.
  • Digitally signed documents are refused, because re-saving them would invalidate the signature; keep the signed original and ask the signer for an unsigned copy if you need one.
  • XFA forms and certificate-encrypted PDFs (opened with a digital ID rather than a password) are not supported.
  • The copy is not sanitized. Hidden layers, comments, metadata and attachments the original contained are still there, now readable by anyone.

When you do not have the password

Unlock PDF cannot help, and it does not pretend otherwise. There is no guessing, dictionary or brute-force step, and websites that promise to “crack” a PDF either run exactly such an attack on their servers — slowly, and on your document — or fail quietly. If the file is yours, look for the unprotected original: the application that produced it, the email it arrived in, a cloud backup. If someone sent it to you, ask them for the password or for an unprotected copy. A short numeric password such as a date of birth is often documented in the covering message.

Once you have the password and the unlocked copy, consider what to do with it. If the document was protected for a reason and you only needed to process it, protect the result again with Protect PDF and a password of your own choosing before it goes anywhere.