fundamentals · 6 min read
PDF passwords and permissions explained
A PDF can be protected in two different ways, and they are easy to confuse: a password you must type before the file opens, and owner permissions that restrict what the viewer lets you do once it is open.
The distinction decides whether an unlock tool can help at all. This guide explains the two locks, what the permission flags genuinely control, what removing protection can and cannot preserve, and when protecting a PDF is the right call.
The two locks inside an encrypted PDF
Encrypted PDFs use the standard security handler, which derives an encryption key from a password and then encrypts the document's strings and streams. Two passwords can be involved. The user password is the one a reader must type to open the file. The owner password controls the permissions and allows a full-access program to change the security settings. When both are set, the user password opens the document under the restrictions the owner configured.
Many real files carry only an owner password. They open without asking for anything, because the user password is empty, but the viewer is expected to enforce restrictions such as no printing or no copying. A bank statement or an e-book may behave this way: it is encrypted, yet double-clicking it shows the pages immediately. That is why 'password-protected' and 'asks for a password' are not the same thing.
What the permission flags actually do
The permission bits cover distinct actions: printing, copying text and images, editing content, adding annotations, filling in form fields, assembling pages, and extracting text for accessibility tools. The file records a value for each, and the owner password can set them. Encrypted content is protected by the key; the flags describe what a cooperative viewer should allow.
Enforcement happens in the viewer, not in the file's mathematics. A viewer that respects the flags hides editing controls or blocks copy and print, while a viewer that ignores them can still draw the page. Permissions are a clear signal and a deterrent against casual copying or editing, but they cannot stop someone who can see the page from taking a screenshot or retyping it. They are not a digital rights management system.
Why a removal tool needs the password
Because the page content is encrypted with a key derived from the password, there is no shortcut that strips protection like deleting a metadata field. A tool must derive the key from a correct password before it can read the pages at all. That is why honest tools ask you for the password and why a wrong password produces a clear decryption failure rather than partial output.
Once decrypted, removing protection means writing a new file that is not encrypted. One approach keeps the original page objects and produces a new unencrypted document, preserving selectable text and vector graphics. Another renders each page to an image and rebuilds the PDF from those images, which works for any document but turns text into pixels. Our Unlock PDF tool uses the second approach, so its output opens without a password but no longer has selectable text and is often larger.
When protecting a PDF makes sense
Encryption is worthwhile when a document is genuinely sensitive: payroll summaries, medical letters, signed contracts, or draft material shared outside an organization. It also helps when you want to discourage casual edits of a final version. Choose a long, unique password, store it in a password manager, and send it through a different channel from the file so that one intercepted message does not reveal both.
Do not treat PDF permissions as a substitute for proper access control. Restrict who can download the file in the first place, keep the storage account protected, and encrypt the device that holds it. Treat a lost password as lost data: if you encrypt an archive and forget the password, no legitimate service can promise to recover it. Keep an offline copy of recovery details for files you will need years from now.
What unlocking cannot fix or preserve
Removing a password does not recover a forgotten one. It also does not strip watermarks, undo redaction mistakes, or restore selectable text that a rasterizing rebuild has turned into pixels. Editing any PDF with a digital signature invalidates that signature, and rebuilding a document usually drops bookmarks, form fields, annotations and embedded attachments.
Use protection removal only on documents you own or have explicit permission to unlock; bypassing someone else's protection may break their agreement with you or the law. After creating an unlocked copy, verify it before deleting anything:
- Open the new file and check the page count, page order and orientation.
- Try selecting and searching text if you need copyable words.
- Check that form fields, annotations and links survived, or accept the documented losses.
- Keep the original protected file until the new copy has been used successfully.