Docomint
Tool guide

How to Unlock a Password-Protected PDF You Already Know the Password To

You password-protected a PDF months ago, and now you need to edit it, merge it with other files, or just open it without typing the password every time. Or a vendor sent you a locked file along with the password in a separate email, and you'd rather remove the lock once than enter it on every open. Either way, you know the password — you just want the PDF to stop asking for it. That's what this tool does, and it's worth being clear about what it doesn't do, too.

What this tool is, and what it deliberately isn't

This only removes a password you already know. You enter it, the tool verifies it against the file, and if it matches, decrypts the PDF and saves an unprotected copy. If the password doesn't match, it fails with "Incorrect password" — it does not guess, brute-force, or attempt to crack anything. If you've genuinely lost a password and have no idea what it was, this tool can't help you get back in; there's no legitimate shortcut around that, by design.

What's actually happening under the hood

PDF password protection isn't one single scheme — it's a handful of encryption standards that have evolved over two decades. This tool implements the PDF spec's Standard security handler directly: it reads the encryption dictionary from your file, derives the file's encryption key from your password using the same key-derivation algorithm the PDF spec defines, and — if that key successfully authenticates against the file — decrypts every string and stream in the document and removes the encryption dictionary entirely.

It supports the two schemes that cover the overwhelming majority of protected PDFs in the wild: the older RC4-based scheme (revisions 2 and 3) and AES-128 (V4/AESV2, the modern standard most current tools use by default). It explicitly refuses AES-256 (R5/R6) — a newer, stronger scheme — rather than pretending to handle it and silently failing. If your file uses that, this tool will tell you it isn't supported rather than producing a broken result.

How to unlock a password-protected PDF

  1. Open the Unlock PDF tool and add your password-protected file.
  2. Enter the password you already know for this file.
  3. Click unlock. Download the decrypted PDF once it's ready.

Why this runs entirely in your browser

Decrypting a PDF is arithmetic — key derivation and AES/RC4 decryption — which the browser's built-in Web Crypto API and a small amount of JavaScript can do directly on your device. Your file and your password are never uploaded anywhere; the entire authenticate-and-decrypt process happens locally, which matters given that what you're unlocking is, by definition, a document someone thought needed protecting.

Fixing the most common unlock problems

"Incorrect password" but you're sure it's right? Check for trailing spaces, autocorrect changes if you copied it from somewhere, or a mixed-up similar-looking character (a capital O versus a zero is a classic one). PDF passwords are case-sensitive.

Getting an "unsupported encryption scheme" error?That means the file uses AES-256 (R5/R6), a newer standard this tool doesn't decrypt. If you know the password, most current versions of Adobe Acrobat can remove protection from an AES-256 file directly.

Don't actually know the password?This tool won't help — see above. Whoever created the PDF is the only real path back in for a document you don't control.

Once it's unlocked

An unlocked PDF behaves like any other — you can merge it with Merge PDF, edit it with Edit PDF, or run any other tool on it that a locked file would have blocked. If you want to re-lock it with a new password afterward, Protect PDF adds AES-128 protection back on, entirely in your browser as well.

Frequently asked questions

Can this tool crack a password I don't know?

No. This only removes a password you already know — it isn't a password-cracking tool and won't attempt to guess or brute-force anything.

Which encryption schemes does it support?

The two that cover most real-world protected PDFs: the older RC4-based scheme and AES-128 (V4/AESV2). It explicitly refuses AES-256 (R5/R6) rather than mishandling it silently.

Is my file or password uploaded anywhere?

No — decryption runs entirely in your browser using the Web Crypto API. Neither your file nor your password is ever sent to a server.

What happens if I enter the wrong password?

The tool fails with an "Incorrect password" error and doesn't produce a file — it verifies your password against the document rather than guessing at variations.

Related tools