How to unprotect a pdf file and remove all restrictions
- Step 1Open the unlocker — Load the PDF Unlock tool. The qpdf engine initialises in your browser; the document never leaves your machine.
- Step 2Add the protected PDF — Drop the file in. The file panel shows the name and size; an encrypted file may not show a page count until it's decrypted, which is normal.
- Step 3Enter the password — Type the user or owner password into the single
Enter current passwordfield. It's required — the tool won't run on an empty field. - Step 4Decrypt the whole protection stack — qpdf runs
--decrypt, validates the password, and rebuilds the file without any encryption dictionary — open password, owner password, and permission flags all go together. - Step 5Download the fully unprotected PDF — Save the result. It opens with no prompt and has no usage restrictions of any kind.
- Step 6Re-protect later if you need to — If you want different protection, apply it fresh with PDF Permission Setter or PDF Password Protect.
The full protection stack and what one unlock removes
Everything below lives in the same encryption dictionary. A single qpdf --decrypt removes the dictionary, so the whole stack clears together.
| Protection layer | What it does | After unprotect |
|---|---|---|
| Open (user) password | Prompts for a password to open the file | Removed — opens freely |
| Owner (permission) password | Controls print/copy/edit permissions | Removed |
| Print bit | Blocks or degrades printing | Cleared |
| Extract-content bit | Blocks text/image copying | Cleared |
| Modify bit | Blocks editing the document | Cleared |
| Form-fill / annotate bits | Block filling forms or adding comments | Cleared |
| Encryption itself | AES/RC4 cipher over the file streams | Removed — plain PDF output |
What unprotect can and cannot do
The real boundaries: it decrypts with the password, but it is not a recovery or DRM tool.
| Scenario | Result |
|---|---|
| You know the user or owner password | Fully unprotected in one pass |
| You don't know any password | Cannot proceed — there is no crack mode |
| File has only an owner password (opens freely) | Permission flags removed |
| File has only an open password | Open prompt removed |
| File has both passwords | Both removed (knowing one is enough) |
| DRM-wrapped file | Not supported — qpdf returns an error |
| File over the tier size limit | Blocked before processing |
Tier limits for unprotecting
PDF-family size and page caps. Unprotect is a single-file operation.
| Tier | Max file size | Max pages | Files per run |
|---|---|---|---|
| Free | 2 MB | 50 | 1 |
| Pro | 50 MB | 500 | 5 |
| Pro + Media | 500 MB | 2,000 | 50 |
| Developer | 2 GB | 10,000 | unlimited |
Cookbook
Full-protection scenarios and exactly what one qpdf decrypt removes. The password is always required.
Open password + permission locks together
A document that prompts for a password to open AND blocks print/copy once open. One unlock with one password removes everything.
Input: confidential.pdf — open prompt + print/copy blocked
Action: PDF Unlock, password = the password you have
qpdf: --decrypt --password=<pw> → strips the
entire encryption dictionary
Output: confidential-unprotected.pdf — opens freely,
prints, copies, editsBoth passwords set, you only know one
The file has a user password for recipients and a separate owner password for permissions. qpdf decrypts with either — knowing the user password removes both.
Input: doc.pdf — user password (open) + owner password (perms)
Action: PDF Unlock, password = the user password
Result: both passwords AND all permission flags removed
in a single passAES-256 fully protected file
Modern strong encryption. Same workflow — qpdf decrypts AES-256 natively given the password.
Input: vault.pdf — AES-256, open + owner passwords Action: PDF Unlock with the correct password Output: plain unencrypted PDF, no protection layers (no password = nothing happens; the field is required)
Unprotect, then re-protect with your own settings
You want to fully strip the existing protection and apply a clean policy of your own.
Step 1: PDF Unlock → fully unprotected copy
Step 2a: PDF Password Protect → set a new open password
(/pdf-tools/pdf-password-protect)
Step 2b: PDF Permission Setter → set an owner password
and choose which actions to allow
(/pdf-tools/pdf-permission-setter)No password — cannot unprotect
Full unprotection still needs the password. There is no bypass.
Action: run with the field blank
Error: "Enter the owner password."
Reality: a file whose password you don't know cannot
be unprotected hereEdge cases and what actually happens
No password supplied
rejectedThe password field is required for full unprotection. Without it the tool stops with Enter the owner password. There is no crack or brute-force mode — knowing the password is the only way through.
Wrong password
errorqpdf validates the password and exits with code 2 on a mismatch (qpdf could not process this PDF...). Passwords are case-sensitive; check capitalisation and trailing spaces, then retry.
File has both passwords
Supportedqpdf --decrypt accepts either the user or owner password. On a doubly-protected file, supplying whichever one you know removes both passwords and all permission flags in the same pass.
AES-256 protection
Supportedqpdf decrypts AES-256 identically to weaker schemes, given the correct password. Strong encryption doesn't change the workflow — one decrypt removes the whole stack.
DRM-wrapped document
errorVendor or e-book DRM is a separate protection layer outside the standard PDF security handler. qpdf cannot remove it (exit code 2). Full unprotection here covers only standard PDF encryption.
Output file is slightly smaller
ExpectedRemoving the encryption layer drops a small amount of overhead, so the unprotected copy is usually marginally smaller. The page content is identical — nothing is lost.
Page count missing before unlock
ExpectedAn encrypted file may not be parseable for its page count until it's decrypted, so the upload panel can show no page count. This is normal and doesn't affect the unprotect — qpdf handles the decryption.
File over the tier limit
blockedA protected file larger than 2 MB / 50 pages is blocked on the free tier before processing. Pro raises the cap to 50 MB / 500 pages, Pro + Media to 500 MB / 2,000 pages.
Corrupted or non-standard structure
errorA damaged encryption dictionary or cross-reference table can make qpdf fail even with the right password. Run PDF Repair first, then retry the unprotect.
Frequently asked questions
Does 'unprotect' remove the password needed to open the PDF?
Yes. This tool decrypts the file, which strips the entire encryption dictionary — including any open (user) password. So the unprotected output opens with no prompt, in addition to having all permission restrictions removed. It's the full-stack version of unlocking.
Do I need a password to fully unprotect a PDF?
Yes. Unprotection is decryption, and decryption requires the password the file was encrypted with. The single password field is required (blank stops with Enter the owner password.). Either the user or the owner password works — knowing one is enough even on a doubly-protected file.
What exactly gets removed in one pass?
Everything in the encryption dictionary: the open password, the owner password, and the print, copy, edit, form-fill, and annotate permission flags — plus the encryption itself. The output is a plain, unencrypted PDF with no protection of any kind.
Can I unprotect a file if I don't know any password?
No. This tool decrypts with the correct password; it does not crack, guess, or recover passwords. Without the user or owner password there's no way to unprotect the file. If you own it, retrieve the password from its author or your records.
Does it handle AES-256 protection?
Yes. qpdf decrypts the standard PDF security handler across RC4 40/128-bit and AES 128/256-bit, given the correct password. AES-256 unprotects the same way as any other — one decrypt clears the whole stack.
Is the protected file uploaded anywhere?
No. qpdf runs as a WebAssembly module entirely in your browser and the decryption happens locally. The protected document is never sent to a server. Only an anonymous usage counter is recorded when you're signed in, and you can opt out in account settings.
Will unprotecting change the file size?
Slightly. Removing the encryption layer drops a small amount of overhead, so the unprotected copy is usually marginally smaller than the original. The page content, fonts, and layout are identical.
Can it remove DRM protection?
No. DRM (vendor, library, or e-book protection) is a wrapper outside the standard PDF security handler. qpdf can't decrypt it and the file fails with a processing error. Full unprotection here applies only to standard PDF encryption.
Can I re-protect the PDF with different settings after unprotecting?
Yes. After unprotecting, apply fresh protection with PDF Password Protect to require a password to open, or PDF Permission Setter to set an owner password and choose which actions to allow. Both re-encrypt with AES-256.
How is this different from the other unlock guides?
The engine and behaviour are identical across them — they all call qpdf --decrypt with your password and remove the whole encryption dictionary. The framing differs: this guide is about removing every protection layer at once (open + owner + flags), while the printing and copying guides focus on the specific restriction you're trying to lift. In practice, one unlock clears them all.
How large a file can I unprotect?
Free tier: 2 MB / 50 pages. Pro: 50 MB / 500 pages. Pro + Media: 500 MB / 2,000 pages. Developer: 2 GB / 10,000 pages. Unprotect is a single-file operation, so one document per run.
Is it legal to unprotect a PDF?
On a document you own or are authorised to modify, yes. Removing protection to bypass another party's copyright or licence terms may breach those terms. Use this only for files you have the right to unprotect.
Privacy first
All PDF processing runs locally in your browser using PDF-lib and pdf.js. No file is ever uploaded — only metadata counters are saved for signed-in dashboard stats.