PDF Sanctum
HomeMergeOrganizeCompressRebuildRedactConvertWatermarkMetadataCropUnlockEncryptionSignCompareEditExtractFormsSanitizeImagesBatchImpose
Runs locally · nothing uploaded
Home/Remove Password/Password types

Owner password or user password — which one does your file have?

The difference decides whether you have to remember anything at all. It also decides whether the file you encrypted is actually protected, or merely labeled with a request.

Drop the protected PDF

or choose a file

You'll be asked for the password on the next screen. Nothing is decrypted until you press the button.

The user password: the real one

Set this and the document content is encrypted. Without the password, a reader holds ciphertext and shows you nothing: no pages, no text, no thumbnails.

This is what people mean when they say a PDF is locked. Lose it and the file is gone.

The owner password: a set of instructions

Set this and the content stays readable. What changes is the permission bits: printing, copying, editing, annotating, assembling. Readers that honor the flags gray those actions out.

The user password can be left empty while the owner password is set. That produces a file anyone can open and most readers won’t let them print or copy. Plenty of software does exactly this by default and calls the result protected.

This is why “unlock any PDF, no password needed” services exist. They’re not breaking anything. A file with an empty user password opens without one, and the restriction is a flag. If you encrypted a document believing otherwise, find out which of the two you actually set.

Find out which one you have, in five seconds

  1. Try to open the file. If it asks for a password before showing anything, there’s a user password, and you need it.
  2. If it opens without asking but Print or Copy is unavailable, there’s an owner password. The content was never encrypted.
  3. To know rather than guess, drop the file into the tool here. The first panel reports the scheme (RC4 or AES), the key length (40, 128 or 256) and the permission bits, and asks for a password only if one is genuinely required.

What each scheme means

RC4-40
The original scheme. Broken for practical purposes, so keep nothing sensitive behind it.
RC4-128
The long-standing default of the 2000s, still common in exports from that era.
AES-128
Acrobat 7 era. A strong cipher, a short key by current standards.
AES-256
What modern tools produce. The password is the weak point, not the cipher.

If what you want is a file that stops asking

For a user-password file, the tool derives the key from the password you supply and writes an unencrypted copy. For an owner-password file there’s nothing to derive. The flags are cleared and the pages are copied as they were.

Either way the export is a plain PDF. Text layer, fonts and layout are untouched, and the metadata is a separate job if it matters.

Straight answers

Can a PDF have both passwords?

Yes, and that’s the strongest form: a user password to open, an owner password and flags to restrict. You need the user password to get in, and the rest is cleared on export.

I set an owner password thinking the file was safe. Was it?

The content was never encrypted, so anyone with a reader that ignores the flags can read it. Use a user password if the point is keeping people out.

Does the key length tell me how old the file is?

Roughly. RC4-40 is 1990s, RC4-128 mostly 1998 to 2010, AES-128 from Acrobat 7, and AES-256 from Acrobat X. A decent clue about which tool wrote it.

Will the export tell me what was restricted?

Yes. The inspection panel lists which permissions were switched off, so you can see what you’re about to remove before you remove it.

More on remove password

Open a password-protected PDF

You have the password.

The PDF opens fine — but it won’t print, copy or edit

The window opens, the pages look right, and Print is grayed out.

A PDF can’t stop you printing it

You own the file, or you paid for it, and the Print menu is grayed out.

The full tool, with every option: Remove Password.