How do PDF passwords, permissions and redaction work?
PDF encryption (ISO 32000, AES-256 in current files) has two passwords: the user password opens the document, the owner password controls permissions such as printing, copying and editing. Permissions are advisory flags that compliant readers honour, not a cryptographic barrier. Redaction is different from covering: a black box drawn over text leaves the text in the file, whereas true redaction removes it from the content stream — and metadata, attachments and thumbnails can leak what the pages no longer show.
Security note: Before sharing a redacted or "cleaned" PDF, inspect its metadata and text layer: what a viewer cannot see may still be in the file. Permissions stop honest readers, not determined ones.
Read the guide: How to Edit a PDF Without Uploading It
How to use Unlock PDF
- Drop the protected PDF and enter its password when asked.
- For a file that opens without a password but is restricted, enter the owner password in the option.
- Click "Unlock PDF".
- Download the unencrypted copy.
Unlock PDF features
- Removes the open password and all restrictions with the known password
- Owner-restricted files need the owner password
- Content, forms and metadata kept
- Reports the cipher that was removed
- No cracking, no bypass
- Local processing
Unlock PDF example
Remove a password before archiving
Input:
invoice-locked.pdf + passwordOutput:
invoice-unlocked.pdf — no password, no restrictions, same contentFrequently asked questions about Unlock PDF
Can it unlock a PDF without the password?
No. The file is encrypted and cannot be read without the key; this tool decrypts it with the password you know and saves it without one. It does not crack, guess or bypass passwords.
My PDF opens without a password but I cannot print or copy. What do I need?
That file has owner-only restrictions. Enter the owner password in the tool and the restrictions are removed. Without it, the restrictions stay.
Is the content changed?
No — pages, images, forms and metadata are kept; only the encryption is removed and the file is re-saved.
Is my PDF uploaded to a server?
No. The file is opened and processed by your browser with WebAssembly and JavaScript; nothing is sent to Mutqan Soft or anyone else. Close the tab and the file is gone. Downloading the result needs a free account — no subscription, no payment.
Technical notes
The document is decrypted by pdf-lib with the supplied password, the orphaned /Encrypt dictionary is dropped, the trailer /Info reference is recovered and the file is re-saved unencrypted. If the password does not authenticate as user or owner password, the operation fails with "wrong password".
References
- ISO 32000-2:2020 — Document management — Portable document format — Part 2: PDF 2.0The current PDF standard: file structure, objects, pages, fonts, annotations, forms and encryption.
- PDF Reference — ISO 32000-1:2008 (PDF 1.7), Adobe copyThe freely readable PDF 1.7 specification: page trees, content streams, metadata, permissions and the standard security handler.
- OWASP Cheat Sheet Series: File UploadValidating uploaded files: extension and content-type checks, size limits, storage outside the web root, scanning.