Bhinish Dhiman· updated 5 October 2026
How to remove a password from a PDF you can already open
Add the PDF to the Unlock PDF tool, type the password you already use to open it, confirm it, then press the main button and download a copy that opens without asking. The tool needs the password because it decrypts rather than cracks: AES-256 content can only be read with the key the password releases, so a password you do not know cannot be removed by this or any honest tool.
Bank statements, payslips and some invoices arrive encrypted, with the password sent separately. After the tenth time you type it, a copy that opens like any other file starts to look sensible. Making one takes a minute, provided you have the password.
What removing a password involves
Removing a PDF password means decrypting the document with the password and writing its pages into a fresh, unencrypted file. It is not password recovery. It starts from the password you hold, and without that there is nothing to start from.
The password that matters is the user password, the one a reader asks for before it shows anything. A file can also carry an owner password, which only restricts actions such as printing once the file is open; readers may ignore that restriction anyway.
Removing the password step by step
- Open Unlock PDF and choose Add a PDF.
- A box in the preview area reads “This PDF is password protected.” Type the password into the Document password field and confirm with the button beside it. A wrong one gets “That password did not open the document.”; the right one brings up the page thumbnails.
- Press the main button in the side panel, which carries the tool’s name, and download the copy. It has
-unlockedadded to its name. - Open the copy. It should open with no prompt.
If no password box appears when you add the file, it already opens without one, and the tool tells you there is no password to remove.
Why the tool asks for the password
In the AES-256 scheme that ISO 32000-2 specifies, the document’s content is encrypted with a random 256-bit key, and the file keeps that key only in wrapped form, sealed under the password. The password is the one way to the key, and the key is the one way to the content. So this tool does exactly what your reader does when you type the password: it releases the key and decrypts. AES-256 is not brute-forceable in any useful timeframe, which is why there is no option for a password you do not have.
Services that advertise removing unknown passwords usually remove only owner-password permission flags, the print and copy restrictions on a file that already opens freely. That is a different and much weaker thing, and it involves sending them your document.
What the copy keeps
The pages are copied into a new document rather than having the encryption cleared in place. A comment in src/lib/pdf/ops.ts gives the reason: clearing it in place leaves artefacts some readers honour. Copying pages carries what belongs to each page and leaves behind what belongs to the document as a whole.
| Part of the PDF | In the copy |
|---|---|
| Page content, text and images | Yes, decrypted |
| Links inside a page | Yes |
| Bookmark outline | No |
| Interactive form fields | No |
| Title and author fields | No |
| Encryption and password | No |
For a statement or a payslip, that loses nothing that matters. For a long report with bookmarks, or a form you still need to fill in, keep the protected original alongside the copy. The tool never changes the original on disk.
When you can skip this step
Every other PDF tool on the site asks for the password itself when you add a protected file, and works on the decrypted pages. To crop, number or watermark a protected statement you can go straight to that tool; its result comes back without a password either way. The exception is merging several files at once, where a protected file in the batch is left out by name, with a note asking you to remove its password here first.
That care has a reason. Merging through software that skips decryption copies the pages while they are still scrambled, and in our measurement of merging encrypted PDFs all three protected pages came out blank, with 49 of 373 characters surviving and no error shown.
Methods compared
| Method | Needs the password | Where it runs | What you get |
|---|---|---|---|
| This tool | Yes | Your browser | A new unencrypted file with the same pages |
| macOS Preview | Yes, to open the file | Your Mac | An exported copy without a password |
qpdf --decrypt |
Yes, given with --password= |
Your computer | A decrypted copy |
| A tool claiming to remove unknown passwords | Advertised as not needed | Their server, with your document | Usually only the owner permission flags removed |
Other ways to remove a known password
On a Mac, open the protected file in Preview with its password, then use File → Export and save the copy without a password. On the command line, qpdf does the same job, with PW replaced by the password:
qpdf --password=PW --decrypt locked.pdf open.pdf
Checking the password never left the tab
Decryption happens in the browser. Add the file, then disconnect from the network before typing the password: the tool behaves exactly the same and the copy still downloads. If you prefer to watch, the Network tab of the developer tools shows the tool’s PDF code arriving when the file is added, and nothing leaving with the password or the document.
Take the password off
Unlock PDF turns a file you can open into one that opens without asking. The copy now has no protection, which was the point, and it is worth a moment’s thought before it lands in a shared folder. To put a password back on later, use Protect PDF, and how to password-protect a PDF without uploading it covers the cipher and the order to do things in.