How to remove a password from a PDF

Nearly every answer to this begins in the same place: open the document in Acrobat Pro, find Protect, choose Remove Security, save. Google’s AI summary of the question, read on August 8, 2026, gives those steps and closes with a caveat — “You must know the original password to complete this process.”

The caveat is true of one kind of protected PDF and flatly wrong about the other, and the other is probably why you are reading this. Two locks exist. One of them comes off without any password at all, by anyone holding the file, and not one page on the first screen of results mentions that it exists.

So work out which one you have before doing anything else. You already have the evidence, and reading it takes a double-click.

The test is what happened when you opened the file

A box demanded a password before a single page appeared. That is the open password, known in the specification as the user password. The page content is genuinely encrypted; until the right string arrives there is nothing to draw.

The document opened normally, and then Print was grayed out, or the text would not select, or Save As refused. Nothing was missing and nothing was asked of you. This is the permissions password — the owner password — and it is a different animal entirely.

Those two are unrelated jobs that share a search box. The same split is behind a frustration people meet from the opposite direction: a file that opens perfectly well can still refuse to give up its words, which is one of the reasons copying text out of a PDF fails.

A restricted file is one number, and readers that agree to respect it

When a PDF refuses to print or to be copied from, what actually carries that refusal is a single signed integer, filed under the key /P in the document’s encryption dictionary. Every bit of it stands for one permission, and the sense runs backwards from the natural guess: a bit that is set means the operation is allowed, and a cleared bit is the denial. /P -1, with every bit set, therefore describes a file that forbids nothing.

Decoding one is quick, and worth seeing once. The owner-locked test file we keep for this work — built to be restricted and nothing else — carries /P -2080, which comes apart into exactly four refusals: printing, editing the content, copying text and graphics, and printing at full resolution. Commenting, form filling, page assembly and extraction for screen readers are all still permitted. Short, specific, and nothing like the single switch that the word protected suggests.

Who enforces those bits? Software that has agreed to. The specification asks conforming readers to obey them, and the mainstream ones do, which is why Preview and Acrobat dim the same menu entry on the same file. Nothing in the document stops a program that does not.

That is not the same as saying the file is unencrypted. Ours is AES-128, and the bytes on disk really are ciphertext. The part that matters is where the key comes from: when no open password was set, the key is derived from an empty one, so any program that reads PDFs can compute it without being told anything. The seal is real. The combination is printed on the outside of the envelope.

Which is why lifting this kind of restriction asks nothing of you. Hand the file to the password remover and it reports which of the two locks it found before offering to act — for a permissions-locked document it goes straight to the button, with no password field on the screen at all, because putting one there would teach exactly the confusion this page exists to undo. The restrictions it lists are the ones it decoded from your file’s own /P, named one by one rather than counted.

The file that will not open, when you do know the password

This case is covered everywhere, including by the summary above, so the useful thing to add is not which submenu holds the command. It is what each route costs.

Acrobat Pro’s Remove Security is the tidiest and it is a paid product. On a Mac, Preview will export a decrypted copy once the document is open. Failing both, people reach for the print dialog and write a new PDF from the rendered pages — and that route quietly loses things, because printing only ever carries the page. The outline you navigate a long document by, link annotations, and the machinery behind fillable fields are not page content, so none of them arrive in the new file.

Signatures do not survive any of these, ours included. A signature vouches for one exact run of bytes, and decrypting a document necessarily produces a different run. There is no implementation clever enough to avoid that; it is what signing means.

If the password is genuinely gone

The honest answer is short. Nothing here recovers a forgotten open password, and nothing elsewhere does either. AES-128 and AES-256 are what modern files use, and neither has a shortcut — which is the whole reason anybody trusts them with a payslip.

Two things are worth knowing anyway. First, a service that advertises unlocking and then succeeds without ever asking you for anything was looking at a permissions password, not an open one; the single word covering two jobs is what makes the category confusing. Second, the string usually still exists somewhere: organizations that seal documents by policy publish the scheme they use, so the covering email or the sender’s help page tends to answer it faster than any software will.

What the upload actually costs

The AI summary names two services by name, and both are competent — this is a point about arithmetic, not about companies. Remote decryption cannot happen unless both halves arrive together: the sealed document and the string that opens it, in the same request. What becomes of that pair afterward is a promise rather than a mechanism, and a promise is something you can go and read.

We did read them. Is iLovePDF safe and is Smallpdf safe work through what each company commits to and, more usefully, where the commitment stops. Verifying local processing covers the other half: a check that takes about a minute and settles, for any page including this site’s own, whether a file leaves your machine at all.

Before you close the tab

Keep the original until the copy has earned its place. Open it, print a page, and confirm that whatever was blocked is now allowed. And if what you were really after was the words rather than the document, pulling the text out is the next step rather than the first one — there is nothing readable to extract from a file that is still locked.