Unlock a PDF and remove its password

Two very different kinds of locked PDF

People use one word — "locked" — for two situations that have almost nothing in common technically. The tool tells you which one you have before you do anything.

How the lossless path works

Most "unlock PDF" tools re-print the document, which quietly destroys the text layer. This one tries a structural rewrite first:

1. The file is parsed into its object graph. Encryption only obscures the strings and stream data, never the structure, so the catalog, page tree and cross-reference entries are readable from the start.
2. The /Encrypt dictionary is read to establish the revision, cipher and key length, and your password is checked against the stored /U or /O hash. A wrong password fails here, before anything is written.
3. Compressed object streams — which a modern PDF uses to pack most of its small objects — are decrypted, inflated and expanded so their contents can be reached.
4. Every remaining string and stream is decrypted with its per-object key (revisions 2–4) or the file key directly (revisions 5–6), and the /Encrypt entry is deleted from the trailer.
5. The result is re-serialised and then re-opened and rendered as a check. Only if that check fails does the tool fall back to rebuilding the pages as images, and it says so on the result card rather than letting you find out later.

When the lossless path runs, text stays selectable and searchable, links still work, bookmarks survive, and form fields remain fillable.

Encryption schemes this tool understands

What is not supported is any non-standard handler: Adobe Experience Manager rights management, FileOpen, Locklizard and similar enterprise DRM replace the security handler entirely and need their licence server. Those files are identified by name and refused rather than mangled.

We do not crack passwords, and here is why

Recovering an unknown password means guessing. For revision 6, each guess costs at least sixty-four rounds of SHA-2 plus AES over a 64× expanded buffer — deliberately, because the specification's authors wanted exactly that. A browser tab can attempt a few thousand candidates per second; a rented GPU cluster does far better but still measures a decent passphrase in centuries.

Any site promising to "recover" your password either restricts itself to a dictionary of common ones, or is selling you an upload. We would rather say plainly that the answer is no.

If the password is genuinely lost

• Go back to the sender. Banks, payroll providers and government agencies use a formula — a date of birth, a national insurance or PAN number, the last four digits of an account, sometimes a surname in capitals. It is usually documented in the covering email.
• Check your password manager and browser autofill. Document passwords are often saved alongside the portal they came from.
• Try the obvious variants. Case matters. So do trailing spaces copied out of an email, and a keyboard layout that produced a different character than you expected.
• If you can still open it somewhere — on a phone that remembered the password, say — print it to PDF from there and you have an unrestricted copy.

The ethics, stated plainly

This page cannot tell whether the document is your own payslip or someone else's contract, because it never sees the document. Removing protection from a file you were given, so that you can read it on a device that struggles with the password prompt or extract a quote from it, is ordinary and reasonable. Circumventing protection on material you were not meant to have is not, and in many jurisdictions is unlawful regardless of how easy the tool made it. The judgement stays with you.

After unlocking

A decrypted PDF is an ordinary PDF, so the rest of the toolbox applies: merge it with other documents, split out the pages you need, compress it for email, or extract the text. If you want to protect it again with a password you control, Password Protect PDF writes AES-256 in the same tab.