← All posts

Removing a password from a PDF you can already open

Your bank sends the statement encrypted. Your payroll system does the same with the payslip. Every time you open one, some reader asks for the password, and you go and find it again — in an email from 2023, or on a sticky note, or in your head on the third attempt.

You know the password. That is the whole point. You are not trying to get into somebody else's file; you are trying to stop typing your own password at a document you open once a month for the next five years.

That takes one pass, and the copy that comes out never asks again. What follows is the run itself: which documents are worth doing, what actually comes off, and the two or three things about the new copy that will bite you later if nobody says them now.

What removing it actually means

The password is not a lock on a door that a tool can unscrew. It is the key. Every stream in the document is stored as ciphertext, and what you type is what derives the key that decrypts it, so there is no password sitting in the file waiting to be deleted. Removing it means decrypting the whole document once and writing the result out as a new file with no encryption on it — which is why you get a second copy back rather than the same file with something taken off it. Why a PDF asks for its password every time sets out the mechanism, and why no reader can spare you the typing.

The same fact settles the question people arrive with: nothing recovers a password you do not have. If you cannot open the document today, nothing here changes that.

The document this is for

This is worth doing on the file you keep and open repeatedly. A statement you file by year. A payslip you dig out for a mortgage application. A report from a portal that protects everything on the way out, whether or not it needs to. Anything that lives in your own folders and gets opened by you.

It is not worth doing on a document you received once, read once, and will not open again. And it is the wrong move on a file you are about to forward to somebody else — see below.

Taking it off

  1. Check you can actually open it. Open the file in whatever reader you normally use and type the password. If it opens, you are one step from finished. If it does not, stop here; nothing on this page or any other will get you in.
  2. Run it through Unlock PDF and type that same password into the password box. It has to be the password your reader asks for when the document opens — not a login for the portal you downloaded it from, and not the password on some other file.
  3. Read the notes on the result. They list what was actually removed: the password itself, plus any restrictions that were set — printing, copying text, editing, commenting. That tells you what was on the file rather than leaving you to guess.
  4. Open the download and confirm it does not ask. Then file it where you keep the thing, and delete nothing else yet.

If the file opens straight away without asking for anything, but will not let you print or copy from it, that is a different case with the same fix: leave the password box empty and run it anyway. That document carries permission flags and no opening password. It was never closed to you — only flagged — and the flags come off with the rest of the security. Whether lifting flags somebody else set is your call to make is a separate question, and a fair one.

Keep the protected original

Do not delete the file you started with. You now have two documents that look identical in a folder listing and behave completely differently, and you will want both:

Name them so you can tell which is which — statement-2026-03-unlocked.pdf earns its length. Our tool appends -unlocked to the file name for exactly this reason.

What this will not do

It is not password recovery, and that is deliberate. Our unlock tool needs the password to decrypt the file, and tells you plainly when the one you gave it does not work rather than pretending otherwise. If somebody sent you a locked document and did not send the password, the answer is to ask them for it; there is no way round that.

It does not remove certificate-based protection. Some corporate documents are encrypted to a recipient's certificate rather than to a password. That is a different mechanism with a different key, and the tool refuses rather than half-doing the job.

A digital signature will not survive. The unlocked copy is a new file, written out fresh, so a signature that verified on the original will not verify on the copy. If the signature is the point of the document, keep and use the original.

A watermark or a stamp stays where it is. Those are page content, not security. Nothing about removing encryption touches anything printed onto the page.

If the text still will not copy afterwards, the problem was never the password. A scan has no text layer to copy — it is a picture of words. Our PDF inspector will tell you which kind of file you have, and why the text is not selectable covers what to do about it.

Doing it on your own machine instead

The password has to reach whatever does the decrypting. Ours does it on a server, which means the password and the file travel there. For a routine statement that is unremarkable. For a document sensitive enough that its password must not leave your laptop, do it locally — and it is genuinely easy:

We would rather you finish the job than use our tools. The browser route wins when you have one file and no wish to install anything.

Putting a password back on later

Circumstances change. If you need a protected copy again — a different recipient, a different password — Password protect PDF encrypts the file with AES and sets what a reader may do with it. Two things to know before you do:

It cannot re-protect a file that is already encrypted, so it is unlock first, then protect, in that order. And if you set only an opening password, that password is reused as the permissions password too, which means everyone you send the file to can also lift the restrictions you set. Set both passwords when the two audiences are not the same people.

Be clear-eyed about the restrictions in general. Only the opening password withholds the contents from anybody; printing and copying flags are honoured by well-behaved readers and ignored by anything written without regard for them, which is most of why lifting one is not the act people assume it is. And if what you actually want is for a filled-in form to stop being editable, encryption is the wrong instrument — Flatten PDF writes the typed answers into the page itself, where nobody can retype them in any reader, password or not. We wrote that one up separately: removing the form fields but keeping what was typed in.

Tools this post uses: