What This Tool Does
A PDF password remover decrypts an encrypted PDF and gives you back the same document without
the encryption. This page does that entirely in your browser using the open-source
@cantoo/pdf-lib library: the file is loaded into memory, decrypted with the
password you provide, and rebuilt page by page into a fresh document that carries no password
and no restrictions. There is no server, no upload, and no account — the same privacy guarantee
every tool on this site makes. It is the PDF answer to forgetting the password on your own
file, or to a scanner that helpfully locked every page of your own paperwork. Unlocking
several files for a single submission? Run each through this tool, then combine the unlocked
copies with the
PDF
Merger.
User Passwords vs. Owner Passwords
PDFs can carry two different passwords, and the distinction matters for what you type into the
field above. An open password (also called the user password)
encrypts the entire file: without it, a viewer cannot render a single page. A
permissions password (the owner password) is the opposite — the file
opens and reads normally on any device, but the encryption layer enforces restrictions such as
"printing not allowed" or "copying disabled." Both are stored in the same
/Encrypt dictionary, defined by the standard security handler of
ISO 32000 (the international PDF standard).
The clever — and slightly surprising — part is how permissions-only files open everywhere:
the standard security handler always derives its encryption key from a password, and for
restricted-but-readable PDFs that password is simply the empty string. Every viewer
"knows" the empty password, decrypts the content for reading, and then politely honors the
restriction flags that came along in the same dictionary. This tool decrypts with whatever
you type — the empty string included — and rebuilds the document without the
/Encrypt dictionary at all, so no restriction flags survive.
| Open (user) password | Permissions (owner) password | |
|---|---|---|
| What it locks | Viewing — the whole file is unreadable | Printing, copying, editing — reading is fine |
| What you type above | The exact open password | Nothing — leave the field empty |
| Typical origin | You set it when exporting or protecting the file | Banks, ticketing sites, DRM-style publishers |
| Result after this tool | One unencrypted PDF — no password prompt, no restrictions | |
How PDF Encryption Works
The standard security handler encrypts every string and stream in the file with a symmetric cipher, keyed by a 32-byte (older: up to 16-byte) encryption key that is derived from the password, a 32-byte random salt, and the file's ID through a key-derivation function. The revision of the handler determines both the derivation function and the cipher:
| Revision | Cipher | Key derivation | Era |
|---|---|---|---|
| R2 / R3 / R4 (RC4) | RC4, 40–128 bit | MD5 | PDF 1.1–1.5 (1996–2003) |
| R4 (AES-128) | AES-CBC, 128 bit | MD5 + SHA-1 | PDF 1.6 (2004) |
| R5 (AES-256) | AES-CBC, 256 bit | SHA-256 | Acrobat 9 (2008), deprecated |
| R6 (AES-256) | AES-CBC, 256 bit | SHA-256/384/512, iterated | PDF 2.0 (ISO 32000-2, 2017) — current |
Every revision above is supported by this tool, because decryption is ordinary symmetric cipher work — the same class of computation a browser performs for every HTTPS connection. Note what the table also implies: because R6 stretches each password guess through thousands of SHA-2 rounds, guessing an unknown password is deliberately slow. That is why password recovery is a different (and disreputable) product from password removal.
What This Tool Can and Cannot Do
It can: remove a known open password from any standard-security-handler PDF; strip permissions restrictions from any PDF you can already open; decrypt RC4, AES-128, and AES-256 (R2 through R6); and hand back a document that no viewer will ever prompt for again. It cannot: discover a password you never knew; unlock public-key (certificate) encryption, which requires the recipient's private key rather than a password; or preserve digital signatures — any structural modification invalidates them by design. If you are locked out of a file entirely, contact whoever produced it; that lock is doing its job.
How Decryption Works Here
When you click Remove password, the tool first parses the file's structure without
decrypting, to learn whether it is encrypted at all. If it is, the bytes are parsed a second
time through a decrypting parser keyed by your password — every string and stream is decrypted
as it is read, and a wrong password fails almost immediately. The decrypted pages are then
copied into a brand-new document along with the title, author, subject, and keywords, and
serialized. Rebuilding into a fresh document is what makes the result clean: no
/Encrypt dictionary, no leftover security handler, no stale cross-reference
streams from the encrypted original — just an ordinary PDF.
Step-by-Step
- Add the PDF: drag one
.pdffile onto the drop zone, or click it (or Browse) to open the file picker. Only PDFs are accepted. - Enter the password: type the open password the PDF asks for. If the file opens without a prompt but blocks printing or copying, leave the field empty.
- Remove: click Remove password. The status line reports the page count and the result size when it finishes.
- Download: click Download to save the unencrypted copy — named after your original
file with
-unlockedappended. - Start over: use the per-file remove button to clear the selection, or simply drop a new file. The download link resets whenever the file or password changes.
Tips
- Passwords are case-sensitive — "Secret1" and "secret1" are different passwords.
- Leave the field empty for permissions-only PDFs; a wrong guess is harmless (the tool just reports an incorrect password) but an unnecessary one wastes a step.
- The output keeps its title, author, subject, and keywords metadata, and all pages — including form fields — carry over intact.
- Digitally signed PDFs lose their signature validity when decrypted; re-sign the unlocked copy if you need a valid signature.
- Unlocking several files for one submission? Run each through this tool first, then combine them with the PDF Merger.
- Need to lock a file again afterwards? Re-encrypt the unlocked copy — new password, optional restrictions — with the PDF Password Protector.
- Keyboard accessible: the drop zone is focusable and responds to Enter/Space, and the remove button is labeled for screen readers.
Troubleshooting
“Incorrect password — check the password and try again.”
The password did not match. Check for typos, capitalization, and trailing spaces. If the password contains non-ASCII characters (accents, other alphabets), type it exactly as the original author did — the key derivation is byte-sensitive.
“This PDF needs its open password — enter the password above and try again.”
The file is encrypted and the empty password did not satisfy it — this is a true open password. Type the password the file's author set. If you do not know it, the file cannot be unlocked here (or, realistically, anywhere).
“This file is not a valid PDF or is corrupted.”
The bytes are not a parseable PDF — a truncated download, a renamed file, or a public-key-encrypted document. Try opening it in a desktop viewer first; if it will not open there either, re-download or re-export the original.
The result opens without a password but a viewer still shows restrictions
Some viewers cache permission state for recently opened files. Close and reopen the
unlocked copy, or drag it into a fresh viewer window. The decrypted file itself
contains no /Encrypt dictionary, so there is nothing left to enforce.