“Locking” a PDF and “unlocking” one sound like a simple pair, but PDFs actually have two different kinds of password, and they protect against completely different things. Knowing which is which tells you when a PDF is genuinely secure, when it only looks secure, and what it really takes to open or edit one you’re allowed to. This guide explains both, shows how to add and remove protection, and is honest about the line between unlocking a file you own and trying to break into one you don’t.
The two kinds of PDF password
Almost every “the PDF is locked” confusion comes from not knowing these apart:
- The open password (also called the user or document password) encrypts the entire file. Without it, the PDF won’t even open — you get a password prompt and nothing else. This is real security: modern PDFs use AES encryption, so a strong open password genuinely protects the contents.
- The permissions password (also called the owner password) doesn’t stop anyone opening the file. It sits on top of a document that opens normally and tries to restrict what you can do with it — printing, copying text, editing, filling forms. It’s a policy flag more than a lock, and most PDF software can remove it easily.
So a PDF that “opens fine but won’t let me copy the text” has a permissions password. A PDF that “asks for a password before it shows anything” has an open password. They can also be combined — a file can require a password to open and carry restrictions once it’s open.
How to password-protect a PDF
Ream’s Protect PDF adds an open password so the file is encrypted and can’t be read without it:
- Add your PDF to Protect PDF.
- Choose a strong password. Length beats complexity — a passphrase of several unrelated words is both stronger and easier to remember than a short scramble of symbols.
- Download the encrypted copy. From now on, anyone opening it — including you — needs that password.
Two habits make encryption actually useful. First, never send the password in the same email as the file; share it through a different channel (a text message, a call, a password manager’s share link). Second, store it somewhere you won’t lose it — there is no “forgot password” link for an encrypted PDF, and that’s the whole point.
Permissions aren’t a vault. If your goal is to stop casual copying or printing, a permissions password helps. But don’t rely on it for anything truly sensitive — because it doesn’t encrypt the content, the text is still there and can be recovered. For real confidentiality, use an open password (encryption), or remove the sensitive content entirely with Redact PDF.
How to unlock or remove a PDF password
Unlock PDF produces a clean copy with the password and restrictions removed — for a file you’re allowed to open:
- Add the PDF to Unlock PDF.
- Enter the current password if the file asks for one to open. If it only carries permission restrictions (it opens without a prompt), you usually don’t need to type anything.
- Download the unlocked copy — now you can print, copy and edit it freely.
This is the important, honest part: unlocking is not password cracking. It removes protection from a document you can already open — because you know the password, or because the file only had removable permission flags. It will not guess or break a strong open password you don’t have, and you should only unlock PDFs you own or are authorised to modify.
“I forgot the password” — can it be removed?
If a PDF only has permission restrictions, yes — those come off without the password, because they were never backed by encryption. If a PDF has an open password and you’ve genuinely lost it, then no honest tool can help: the file is encrypted, and without the key the content is unreadable by design. That’s frustrating when it’s your own document, but it’s also exactly why encryption is worth using. The practical takeaway is prevention: when you protect a file, save the password to a manager immediately.
| Open (user) password | Permissions (owner) password | |
|---|---|---|
| What it does | Requires a password to open the file | Restricts print / copy / edit; file still opens |
| Backed by encryption? | Yes — whole file (AES) | No — a policy flag |
| Real confidentiality? | Strong | Weak — content still present |
| Removable without the password? | No | Usually yes |
| Use it for | Confidential documents you send | Discouraging casual copying/printing |
Choosing the right protection
Match the lock to the risk. For a bank statement, a contract with personal data, or anything you’d be uncomfortable seeing forwarded, use an open password with Protect PDF and share the password separately. For a price list or a draft where you just want to nudge people not to copy-paste or reprint, a permissions password is fine — just don’t mistake it for security. And when the sensitive part is a specific piece of a page — an account number, a name, a signature — the strongest move isn’t a password at all but removing it, which is what Redact PDF does by flattening the affected page so the data underneath is gone. See our guide on redacting a PDF the right way.
Are Protect and Unlock private and free?
Both are free, with no sign-up. They work a little differently from Ream’s on-device tools, and we’re upfront about it: encrypting or decrypting a PDF is done on our server, so the file and the password travel over an encrypted HTTPS connection to a hardened, network-isolated sandbox, are processed there, and are deleted immediately afterwards — never stored, never logged, never shared. The “Server” badge on those tools marks that distinction, so you always know whether a job runs on your device or ours. If you want to weigh up any file tool before uploading, our guide on whether online PDF tools are safe lays out exactly what to check.
Frequently asked questions
What’s the difference between a user and an owner password? The user (open) password encrypts the file and is required to open it; the owner (permissions) password only restricts actions like printing and copying, and the file opens without it.
Can you remove a PDF password without knowing it? Only for permission restrictions, which aren’t encrypted. If the file needs a password just to open, it’s encrypted — no honest tool can remove that without the password.
Is it legal to unlock a PDF? Unlocking a document you own, or have permission to modify, is fine. Using tools to bypass protection on a file you have no right to access is not — only unlock your own PDFs.
How strong is PDF encryption? Modern PDFs use AES, which is strong. The weak link is the password: a short, guessable one undermines even good encryption, so use a long passphrase.
How do I password-protect a PDF for free? Add it to Protect PDF, set a password, and download the encrypted copy — free, no account.
Does protecting a PDF change its content? No. Encryption wraps the existing file; the pages, text and images are unchanged — they’re just locked behind the password.
Password protection vs. redaction — which do I need? Use a password to control who can open a whole document; use redaction to permanently remove specific sensitive content from a document you’ll still share.
The short version: an open password is a real lock (encryption, strong), a permissions password is a polite request (removable, weak). Protect the files that need it with a strong passphrase shared separately, don’t lean on permission flags for genuine secrets, and remember that unlocking is for the documents you’re already entitled to open — not a way past protection you don’t have.
