The PDF 2.0 standard (ISO 32000-2:2020) defines two password types that work through entirely different mechanisms. A user password applies AES-256 encryption — the file is mathematically unreadable without the correct key. An owner password restricts printing, copying, and editing, but the file content stays readable; PDF readers enforce those restrictions voluntarily. This architectural distinction, confirmed by the qpdf encryption documentation, is why a browser print trick removes owner restrictions without requiring any password.
This guide covers three proven removal methods, a direct answer on the legal question that competing pages skip, and real GPU brute-force timing benchmarks so you understand what "cracking" actually means in practice.
User Password vs. Owner Password: Two Different Locks
Confusing these two types is the most common reason people pick the wrong tool and get no result. Here is exactly what each one does.
User Password (Encryption Lock)
A user password — also called an open password — encrypts the entire file using AES-128 or AES-256 depending on the PDF version (PDF 1.3–1.5 used RC4; PDF 1.6+ switched to AES-128; PDF 1.7 revision 6 and PDF 2.0 use AES-256). The file is a block of ciphertext. No viewer, no operating system, no tool can read its content without the correct decryption key derived from the password. If you try to open a user-encrypted PDF without the password, you see a prompt — not a restricted document.
To remove a user password, you must provide it. The tool then decrypts the content and saves a password-free copy. There is no bypass.
Owner Password (Permissions Lock)
An owner password — also called a permissions password — restricts what an already-opened document allows: printing, text selection, copying, editing, or page extraction. The file is not encrypted in any meaningful sense. Any reader can open it. The restrictions are a set of permission flags in the PDF metadata, and honoring them is a voluntary behavior baked into PDF viewer software.
The PDF specification (section 7.6 of ISO 32000-1) explicitly states that encryption applied for owner-only restrictions uses a well-known empty-string derivation when no user password is set. This means the "encryption key" for an owner-restricted file is deterministic and does not require knowing the owner password. Any tool that understands the spec can strip these restrictions without a password.
When You Can and Cannot Legally Remove a PDF Password
Smallpdf, iLovePDF, and Sejda do not address this question on their unlock pages. It is worth a direct answer before you proceed.
Removal is generally permitted when:
- You created the document and set the password yourself, then forgot or lost it.
- The document was issued to you for your use — a payslip, a tax form, a work report — and you need to print or copy from it. The restriction does not override your authorization to use the content.
- You need an accessible format for a disability accommodation. Many jurisdictions (EU Accessibility Act 2025, US ADA) explicitly permit bypassing technical restrictions for accessibility purposes.
- The copyright has expired and the document is in the public domain.
Removal is illegal or infringing when:
- You do not own or have authorization to access the file. Removing a password to read content you were never granted access to constitutes unauthorized computer access in most jurisdictions (CFAA in the US, Computer Misuse Act in the UK, similar laws in the EU).
- The restriction protects DRM on paid content. Bypassing technical protection measures on a purchased ebook, report, or course PDF may violate the DMCA (US), EU Copyright Directive Article 6, or equivalent local law — regardless of whether you paid for it.
- You intend to redistribute the unlocked file without authorization from the copyright holder.
Method 1: EasyPDF Unlock PDF Tool (Best for Both Password Types)
EasyPDF's Unlock PDF handles both user-encrypted and owner-restricted files. Files under 100 MB are processed entirely in your browser using WebAssembly — nothing is uploaded to any server. Files above 100 MB use a temporary server-side process with automatic deletion after one hour.
- Open the tool — Go to EasyPDF Unlock PDF. No account or sign-up required.
- Upload your PDF — Drag the file into the drop zone or click to browse. Supported: up to 500 MB, any encryption version from PDF 1.1 through PDF 2.0.
- Enter the password if prompted — If the file uses a user (open) password, a password field appears. For owner-only restricted files, no password is needed; the tool removes restrictions automatically.
- Click Remove Password — Processing completes in under 2 seconds for most files. Files with complex AES-256 key derivation may take up to 10 seconds.
- Download the unlocked PDF — The file has identical content and quality to the original, with all password restrictions stripped.
After unlocking, you can edit the PDF directly or re-protect it with a new password if you want to replace a forgotten password with a known one.
Method 2: qpdf Command Line (No Upload, All Platforms)
qpdf is a free, open-source command-line PDF transformation tool first released in 2001 and actively maintained with over 4,000 GitHub stars. It runs on macOS, Windows, and Linux. For documents you cannot upload — legal files, medical records, anything governed by data residency rules — this is the correct approach.
Installation
- macOS:
brew install qpdf - Windows: Download the latest installer from github.com/qpdf/qpdf/releases
- Ubuntu / Debian:
sudo apt install qpdf - Fedora / RHEL:
sudo dnf install qpdf
Strip an owner password (no password needed)
When the PDF has only permission restrictions (owner password, no user password), this single command removes them:
qpdf --decrypt input.pdf output.pdf
qpdf detects that the user password slot is empty, computes the deterministic owner key, and writes a clean copy. A 50-page PDF processes in under 0.5 seconds on any modern CPU.
Remove a user password (password required)
When you know the open password:
qpdf --decrypt --password='yourpassword' input.pdf output.pdf
Method 3: Browser Print-to-PDF (Owner Passwords Only, Zero Software)
This method works only on owner-restricted files — not user-encrypted ones. When your browser opens an owner-restricted PDF, it has already rendered the content. The Print function captures that rendered output as a new, unrestricted PDF.
- Open the PDF in your browser — Drag the file into Chrome, Edge, Firefox, or Safari. The document opens and displays normally.
- Open Print — Press Ctrl+P on Windows or Cmd+P on Mac.
- Select Save as PDF — In Chrome and Edge: choose "Save as PDF" or "Microsoft Print to PDF" as the destination. In Safari: click the PDF dropdown at the bottom-left of the print dialog.
- Save the file — The saved PDF is a freshly created document containing only the rendered page images. No password, no restrictions.
The trade-off: the result is a re-rendered document. For most text-heavy PDFs this is visually identical to the source, but embedded JavaScript, interactive form fields, and some complex fonts may not transfer. If exact fidelity matters, use Method 1 or Method 2.
Method Comparison
| Method | Removes user password | Removes owner password | No file upload | No install needed | Cost |
|---|---|---|---|---|---|
| EasyPDF Unlock PDF | Yes (need the password) | Yes (no password needed) | Yes — files under 100 MB | Yes | Free |
| qpdf (command line) | Yes (need the password) | Yes (no password needed) | Yes — fully local | No — requires install | Free |
| Browser Print-to-PDF | No | Yes | Yes — fully local | Yes | Free |
| Smallpdf Unlock PDF | Yes (need the password) | Yes (no password needed) | No — upload required | Yes | Free (2 tasks/day limit) |
| iLovePDF Unlock PDF | Yes (need the password) | Yes (no password needed) | No — upload required | Yes | Free (file size limits apply) |
How Long Does Brute-Force Cracking Take?
If you have truly lost a user password and have no backup, brute-force recovery is the only option — but it is rarely practical for modern passwords. PDF 1.7 and PDF 2.0 user passwords use AES-256 with an iterated SHA-256 key derivation that deliberately slows down cracking attempts. Using the hashcat GPU cracking tool on an RTX 4090 — the fastest consumer GPU as of 2024 — the measured throughput for PDF AES-256 (hashcat mode -m 10700) is approximately 19,000 hashes per second.
| Password type | Example | Search space | Time at 19,000 H/s (RTX 4090) |
|---|---|---|---|
| 4-digit PIN | 2024 | 10,000 combinations | Under 1 second |
| 6 lowercase letters | access | ~309 million | ~4.5 hours |
| 8 lowercase letters | readfile | ~208 billion | ~128 days |
| 8 chars, mixed case + digits | ReadFl3s | ~218 trillion | ~364 years |
| 12 random printable ASCII | xK#9p!Qm2@rL | >540 septillion | Millions of years |
The practical conclusion: if you used a password longer than 8 characters with mixed case or symbols, brute-force is not a realistic recovery path — even with professional cracking hardware. Your best option is to find the original source and request an unprotected version.
If you set the password yourself and it was short, the EasyPDF Unlock PDF tool will handle it instantly the moment you remember it. For protecting new documents, the companion guide on how to set a strong PDF password covers AES-256 setup and best practices for key storage.
Frequently Asked Questions
Can I remove a PDF password without knowing it?
Only for owner-restricted files. An owner password restricts what viewers can do with an already-open file; the file is not encrypted. EasyPDF's Unlock PDF tool, qpdf, and the browser print trick all remove owner restrictions without requiring any password. If the file uses a user (open) password — meaning you cannot open it at all without entering a code — no tool can decrypt it without the correct password. The mathematics of AES-256 make keyless decryption infeasible.
Does removing the password change the PDF content?
No. The unlock process strips the encryption metadata and permission flags without touching the document content. Text, images, fonts, form fields, annotations, and bookmarks are preserved exactly as in the original. The only change is the absence of the password layer.
Why does my PDF say "Printing not allowed" even though I can open it without a password?
That is an owner password restriction. The file is readable by anyone but the owner password has set the print permission flag to denied. All three methods in this guide remove owner restrictions — use whichever fits your setup.
Is the browser print-to-PDF trick reliable for all PDFs?
It is reliable for owner-restricted, text-based PDFs. The resulting file is a print-rendered copy, so it may be slightly larger (fonts are re-embedded at screen resolution). PDFs with embedded JavaScript, XFA forms, 3D annotations, or unusual encoding may not reproduce perfectly. For those, use EasyPDF or qpdf instead.
What happens to my file after I upload it to EasyPDF?
Files under 100 MB are processed entirely inside your browser using WebAssembly. Nothing is transmitted to any server. For files over 100 MB, processing occurs on EasyPDF's servers and the file is automatically deleted after one hour — EasyPDF does not store, index, or share uploaded content. Full details are in the Privacy Policy.
The fastest path is EasyPDF Unlock PDF — open it in your browser, drop in your file, and download the unlocked version in seconds. No account, no watermark, no file limit for browser-processed files. If you want to immediately re-secure the document with a new password, Protect PDF is one click away.