How to unlock a restricted pdf document
- Step 1Open the PDF Unlock tool — Load the PDF Unlock tool. The qpdf WebAssembly engine initialises in your browser on first run — nothing about the document is transmitted.
- Step 2Drop the restricted PDF onto the dropzone — Drag the file in or click to browse. The file panel shows the name, size, and (for parseable files) the page count so you can confirm you picked the right document.
- Step 3Type the password into the single password field — The tool shows one control labelled
Enter current password. Type the user or owner password the document was encrypted with. The field is masked. It is required — leaving it blank stops withEnter the owner password. - Step 4Run the unlock — qpdf runs
--decryptover the file in your browser, validates the password, and rebuilds the document without the encryption dictionary. - Step 5Download the unrestricted copy — Save the result. It is a fully decrypted PDF — printing, copying, and editing are all enabled and no password is needed to open it.
- Step 6Verify the restrictions are gone — Open the downloaded copy in any viewer. The print button is active and text is selectable. If a viewer still shows it as restricted, close and reopen it — some viewers cache the original file's permission state.
What each restriction maps to, and what unlocking does
PDF permission flags live in the encryption dictionary. Decrypting with qpdf removes the dictionary, which clears every flag at once — there is no per-flag toggle in this tool.
| Restriction you see in the viewer | Underlying PDF permission flag | After unlock (qpdf --decrypt) |
|---|---|---|
| Print button greyed out | /P print bit denied | Cleared — printing allowed |
| Text cannot be selected or copied | /P extract-content bit denied | Cleared — copying allowed |
| Document cannot be edited / pages cannot be changed | /P modify bit denied | Cleared — editing allowed |
| Form fields locked / annotations blocked | /P fill-form and annotate bits denied | Cleared — all action bits removed with the dictionary |
| Password prompt when opening | User (open) password set | Removed — output opens with no password |
What you need before unlocking
The tool decrypts; it does not crack. These are the real preconditions enforced by the processor and the qpdf engine.
| Requirement | Detail |
|---|---|
| A password (required) | The single Enter current password field must be non-empty, or processing stops with Enter the owner password. |
| User or owner password | qpdf --decrypt accepts either one — you only need whichever you know |
| A valid PDF under your tier's size limit | Free 2 MB / 50 pages; Pro 50 MB / 500 pages; Pro + Media 500 MB / 2,000 pages; Developer 2 GB / 10,000 pages |
| Browser support | qpdf runs as WebAssembly in your browser; there is no server-side fallback for unlocking |
Free vs Pro limits for unlocking
PDF-family tier limits from the centralised limits table. One file at a time — unlock is a single-file tool.
| Tier | Max file size | Max pages | Files per run |
|---|---|---|---|
| Free | 2 MB | 50 | 1 |
| Pro | 50 MB | 500 | 5* |
| Pro + Media | 500 MB | 2,000 | 50* |
| Developer | 2 GB | 10,000 | unlimited* |
Cookbook
Real restriction scenarios and exactly what this tool does for each. Decryption requires the password — there is no crack path.
A document that opens freely but won't print
The classic owner-locked PDF: no prompt to open, but the print and copy options are disabled. You have the owner password from whoever produced the file. Type it in and unlock.
Input: report.pdf — opens with no prompt, print greyed out
Action: PDF Unlock, password = owner password
qpdf: --decrypt --password=<owner pw>
Output: report-unlocked.pdf — print + copy enabled,
no encryption dictionary remainsYou only know the open password, not the owner password
Some documents share the open (user) password with recipients while keeping a separate owner password private. qpdf decrypts with either — the user password is enough.
Input: briefing.pdf — prompts for a password to open
Action: PDF Unlock, password = the user/open password
Result: file decrypts; both the open prompt AND the
permission flags are removed in one passBlank password field — nothing happens
The tool never guesses. If you drop a restricted file and click run without typing anything, the processor stops immediately.
Action: run with empty password field Error: "Enter the owner password." Fix: type the password the file was encrypted with
Wrong password
qpdf validates the password before decrypting. A mismatch returns a processing error rather than a partially-unlocked file.
Action: run with an incorrect password
qpdf: exits with code 2 (could not process)
Message: "qpdf could not process this PDF — it may be
corrupted or use an unsupported encryption."
Fix: re-check the password (case-sensitive)Unlock, then re-apply your own restrictions
Need to change the permissions rather than remove them? Unlock first, then set fresh permissions with the sibling tool.
Step 1: PDF Unlock → fully unrestricted copy
Step 2: PDF Permission Setter → set a new owner password
and choose which actions to block
(see /pdf-tools/pdf-permission-setter)Edge cases and what actually happens
Password field left blank
rejectedThe processor requires a non-empty password and stops with Enter the owner password. This tool does not attempt to remove restrictions without a password — there is no crack or brute-force path.
Wrong or mistyped password
errorqpdf validates the password and exits with code 2 when it doesn't match, surfaced as qpdf could not process this PDF — it may be corrupted or use an unsupported encryption. Passwords are case-sensitive; re-check capitalisation and trailing spaces.
PDF has no encryption at all
By designIf the file isn't encrypted there are no restrictions to remove. qpdf still processes it and returns a clean copy, but the practical effect is a no-op. If a viewer shows the file as restricted yet it has no encryption, the limitation is in the viewer, not the file.
Only a user (open) password is known
Supportedqpdf --decrypt accepts the user password as well as the owner password. Typing whichever you know removes both the open prompt and the permission flags — the output is a fully unencrypted PDF.
File larger than your tier limit
blockedFree tier caps PDFs at 2 MB / 50 pages. A larger restricted file is blocked before processing with an upgrade prompt. Pro raises the ceiling to 50 MB / 500 pages.
Page count shows blank on upload
ExpectedPage count is read by a separate parser that may not read an encrypted file before decryption. A missing page count on a password-protected upload is normal — the unlock itself is handled by qpdf and isn't affected.
Unsupported or exotic encryption
errorqpdf handles standard PDF encryption (RC4 40/128-bit and AES 128/256-bit). A non-standard or DRM-style protection scheme returns exit code 2. DRM-wrapped documents (e.g. library or vendor DRM) are not removable here.
Viewer still shows restrictions after download
PreservedThe output has no encryption dictionary. If a viewer still greys out print, it cached the original file's permission state — close and reopen the downloaded copy, or open it in a different viewer to confirm.
Corrupted PDF structure
errorIf the file's cross-reference table or object structure is damaged, qpdf may exit with code 2. Repair the structure first with the PDF Repair tool, then retry the unlock.
Frequently asked questions
Do I need a password to unlock a restricted PDF?
Yes. This tool decrypts the file with qpdf, which requires the password the document was encrypted with. The single Enter current password field is required — if it's empty the tool stops with Enter the owner password. It does not crack, guess, or brute-force passwords.
Which password do I type — user or owner?
Either. qpdf's --decrypt accepts both the user (open) password and the owner (permission) password. You only need to know one of them. Typing whichever you have removes the encryption entirely, including any open-prompt and all permission flags.
What is the difference between a permission password and an open password?
A permission (owner) password restricts editing, printing, and copying but still lets the PDF open without a prompt. An open (user) password forces a password before the document will open at all. This tool handles either — both are accepted in the same field — and decryption removes whichever is present.
Will the unlocked PDF look identical to the original?
Yes. qpdf decrypts the existing pages without re-rendering them — text stays selectable, fonts and layout are unchanged, page order is preserved. The only thing removed is the security/encryption layer. The document content is the same.
Is my document uploaded anywhere?
No. The qpdf engine is a WebAssembly module that runs entirely in your browser, and the unlock happens locally. The restricted document is never sent to a server. Only an anonymous usage counter is recorded when you're signed in.
Can it remove DRM?
No. This tool removes standard PDF encryption (RC4 and AES) given the password. Vendor or library DRM (e.g. Adobe DRM, e-book DRM) is a separate wrapper that qpdf cannot strip — those files return a processing error.
What encryption strengths are supported?
qpdf decrypts the standard PDF security handler: RC4 40-bit and 128-bit, plus AES 128-bit and 256-bit. As long as you supply the correct password, all of these decrypt to a plain PDF. Non-standard schemes return exit code 2.
I got 'qpdf could not process this PDF' — what does that mean?
That's qpdf's exit code 2, surfaced when the password is wrong, the file is corrupted, or the encryption is unsupported. Re-check the password (it's case-sensitive), and if the file structure looks damaged run the PDF Repair tool first, then retry.
How big a file can I unlock?
On the free tier, up to 2 MB and 50 pages. Pro raises that to 50 MB / 500 pages, Pro + Media to 500 MB / 2,000 pages, and Developer to 2 GB / 10,000 pages. Unlock is a single-file tool, so one document at a time.
How is this different from PDF Remove Password?
Functionally the engine is the same — both call qpdf --decrypt with the password you supply and produce a fully decrypted PDF. The PDF Remove Password tool is framed around files that prompt for a password to open; PDF Unlock is framed around files that open freely but block printing/copying/editing. Use whichever matches your situation; either accepts the user or owner password.
Can I re-protect the file after unlocking?
Yes. Run PDF Permission Setter to set a new owner password and choose which actions to block, or PDF Password Protect to require a password to open. Both re-encrypt with AES-256.
Is it legal to unlock a PDF?
Unlocking a document you own or have legitimate rights to is lawful. Removing restrictions to bypass another party's copyright or licence terms may breach those terms — use this only on documents you own or are authorised to modify.
Privacy first
All PDF processing runs locally in your browser using PDF-lib and pdf.js. No file is ever uploaded — only metadata counters are saved for signed-in dashboard stats.