How do I remove the password from a PDF I own?

A bank statement that asks for your date of birth every time you open it. A payslip encrypted by a payroll system. A contract a colleague protected two years ago. All perfectly legitimate to unlock, all tedious if you open them often.

Whether it can be done comes down to one question, and it is not the one people expect.

The question that decides everything

Can you already open the file?

If yes, removing the password is straightforward. Opening it means the software can decrypt the content, and once decrypted it can be written out again unencrypted. The encryption is not a wall around the file; it is a lock on a copy of the key, and having opened it, you have the key.

If no, the answer is that it cannot be done, and any tool claiming otherwise is either guessing passwords or lying. Modern PDF encryption is AES-256. Guessing is not a shortcut; it is arithmetic that does not finish.

So: known password, easy. Forgotten password, ask whoever made the file. That is not a limitation of the tool, it is what encryption is for.

Two different things called a password

This trips up more people than the above, because the same word covers two unrelated mechanisms.

The open password — sometimes called the user password — encrypts the content. Without it there is no readable document at all. This is real cryptographic protection.

The permissions password — the owner password — does not stop the file opening. It marks the document as not-to-be-printed, not-to-be-copied, not-to-be-edited, and viewers that honour those flags disable the corresponding buttons.

The second is enforced entirely by politeness. The content is not protected; the reader application is simply choosing to respect a flag. That is why a file you can read perfectly well can still refuse to let you copy a sentence out of it.

Removing it

Unlock PDF handles both cases. Give it the file, and the password if the file asks for one, and it writes a fresh copy with the encryption and the restrictions gone.

What you get back is a normal PDF. Same pages, same text, same images, same quality — the pages are copied across rather than re-rendered, so nothing is degraded. It simply opens without a prompt.

When you should keep the password

Worth pausing on before removing it.

The password is doing a job on anything containing financial details, identity documents, medical information, or somebody else's personal data. An unlocked copy in a downloads folder, on a shared drive, or in a mail thread is a different risk from the encrypted original.

A reasonable middle path: unlock a working copy, keep the protected original, delete the working copy when you are done. And if you are sending it on to someone who does need protection, Protect PDF puts a new password on with encryption you choose.

The awkward case: it is not your file

If the document belongs to somebody else and you do not have the password, the answer is to ask them. There is no technical route around that, and there should not be.

Where the document is yours but the sender set the password — a bank, an employer, a government portal — they will usually tell you the scheme. It is very often a fixed rule: date of birth in a particular format, the last digits of an account or identity number, a customer reference. Their help pages state it.

What removing the password does not change

Two things people assume are connected and are not.

A signature stays valid, but only if you change nothing else. Decryption alone does not alter the page content. Editing after unlocking does, and that will invalidate a signature.

Metadata is unchanged. Author, creation software and title survive. If the point of unlocking was to strip identifying information, that is a separate job — and worth checking, because it is easy to assume the unlock did it.

Where the password usually comes from

If the file is one you receive regularly rather than one you made, the password is almost always generated by a rule rather than chosen.

Common patterns, and they are documented by the sender rather than secret:

• Date of birth as DDMMYYYY or YYYYMMDD
• The last four or six digits of an account, card or identity number
• A customer or policy reference, sometimes with a fixed prefix
• Postcode with no space, sometimes lower case

If you are stuck, the sender's help pages state the rule. It is worth finding, because the same rule will apply to every statement they send you afterwards.

Doing this for a document you receive every month

If a bank or a payroll system sends you an encrypted PDF regularly, you have two sensible arrangements.

Unlock each one and file the plain copy. Convenient to search, and the right choice if the folder itself is somewhere safe — an encrypted drive, or a machine only you use.

Keep them encrypted and unlock only when needed. Slower, and the right choice on a shared or backed-up-to-anywhere machine.

What is worth avoiding is the middle: unlocking them and leaving both copies in a downloads folder, which gives you the inconvenience of the encrypted version and the exposure of the plain one.

After unlocking

Two things to check, because both are easy to assume and neither is automatic.

Does it still open correctly? Open the unlocked copy before deleting anything, especially if the original was made by an unusual system.

Is the content complete? Compare the page count with the original. It should be identical — the pages are copied, not rebuilt — and if it is not, something went wrong and the original is still the file to keep.