Password Protect or Unlock PDF Online for Free

PDF Password Protect and Unlock: Lock Down or Open Up a PDF's Encryption

This tool does two related but opposite jobs on a single PDF: add a password so the file can no longer be opened without one, or remove a password from a file you already have the correct current password for. Both operations run on the server through mupdf, which applies AES-256 encryption when protecting a file and reverses it when unlocking one — this is genuine document encryption, the same category of protection built into desktop PDF software, not a cosmetic lock that a determined viewer could bypass.

Because encrypting or decrypting a PDF is computationally what mupdf does server-side, this tool works differently from several other tools on this site that run entirely inside your browser tab. Both your file and the password you enter are sent to the server to perform the operation — a distinction that matters enough to deserve its own honest section below, rather than being glossed over.

How to Protect or Unlock a PDF with This Tool

1. Upload the PDF you want to work with, then choose whether you're adding a password ("protect") or removing one ("unlock").
2. For protect mode: enter the password that will be required to open the file going forward. You can optionally set a separate owner password, which governs edit and print permissions independently of the password needed just to open the document — leave it blank and it defaults to the same value as the open password.
3. For unlock mode: enter the file's current password exactly as it is. This step genuinely requires knowing that password — there's no bypass or brute-force attempt happening here, only a straightforward decrypt using the password you supply.
4. Submit the request. The file and the password travel to the server, where mupdf performs AES-256 encryption (for protect) or removes the encryption entirely (for unlock), and the resulting PDF comes back as a download — protected.pdf or unlocked.pdf depending on which mode you ran.
5. If unlock mode is given the wrong password, or no password at all, the tool reports a clear error rather than returning a corrupted or still-locked file — it never guesses or attempts to work around a password it wasn't given correctly.

Why People Need to Add or Remove a PDF Password

The need for one mode or the other tends to show up at opposite ends of a document's life. Protection is usually something you reach for right before a file leaves your hands — attaching a statement to an email, uploading a contract to a shared folder, handing a report to someone outside your organization. Unlocking, by contrast, tends to come up once a document has already served its guarded purpose and now just needs to be usable again — filed away, searched, merged with related paperwork, or handed off to a colleague who already has legitimate access to its contents. Recognizing which end of that lifecycle you're at is usually enough to know which mode to pick.

• Sending a sensitive document over email or a shared drive. A password-protected PDF adds a real barrier if the file ends up somewhere it shouldn't — forwarded to the wrong person, or intercepted in transit.
• Meeting a client or employer's confidentiality requirement. Some organizations require contracts, financial statements, or HR documents to be password-protected before they're shared externally.
• Removing a password from a file you legitimately own once it's no longer needed. A password that made sense during negotiation or review can become friction once a document is finalized and needs to be filed, searched, or merged with others — unlock mode strips it once you no longer need the barrier.
• Preparing a locked file for another processing step. Many PDF tools, including several others on this site, can't operate on an encrypted document directly — unlocking first (with the correct password) clears the way for merging, compressing, or extracting from that file.
• Controlling permissions separately from access. Setting a distinct owner password lets you restrict printing or editing for anyone who has the file, even if you've shared the open password more broadly.

What "Protect" and "Unlock" Actually Do

Protect mode encrypts the PDF using AES-256, the same modern, strong encryption standard used broadly across security-sensitive software — this isn't a lightweight or legacy scheme. The password you provide becomes the "user password," required to open the document at all; the optional owner password is a separate credential that controls permissions like printing or editing without affecting whether the document opens in the first place. If you don't set one, the owner password simply matches the user password, so there's no separate permissions layer unless you explicitly ask for one.

Unlock mode does the reverse: it removes encryption from a PDF entirely, but only given the document's correct current password. This is a decrypt operation, not a password-cracking one — if you don't know the file's actual password, this tool will not find it or work around it for you; supplying the wrong password (or none) produces a clear rejection rather than a corrupted file or a lucky guess. That's an important distinction from "PDF password remover" tools that claim to strip protection without knowing the password — this one requires it, by design, because it's genuinely decrypting the file rather than attempting to defeat its encryption.

Either mode accepts a password up to 128 characters, which comfortably covers a long, genuinely strong passphrase rather than restricting you to a short PIN-like value. Both the open password and the owner password are checked and applied through the same mupdf encryption call, so protect mode isn't a two-step process behind the scenes — a single request to the server produces the fully encrypted output in one pass, and likewise a single request performs the decrypt for unlock mode.

Mode	What you provide	What happens	If the password is wrong or missing
Protect	A new password (and optionally a separate owner password)	The PDF is encrypted with AES-256; the password becomes required to open it	N/A — there's no existing password to get wrong
Unlock	The file's existing, correct password	Encryption is removed entirely; the file opens without any password afterward	The request is rejected with a clear error — no file is returned

Server-Side Encryption vs. This Site's Client-Side Tools

It's worth contrasting this tool directly against the browser-only tools elsewhere on this site, because the difference isn't cosmetic:

	This tool (protect/unlock)	Client-side tools (e.g. merge, rotate, watermark)
Where the work happens	On the server, via mupdf	In your browser tab, via pdf-lib
Is the file uploaded?	Yes — required for AES-256 encrypt/decrypt	No — the file never leaves your device
Is the password transmitted?	Yes — sent with the request so the server can perform the operation	Not applicable to those tools
Why the difference exists	Genuine PDF encryption is computationally handled by a server-side engine (mupdf) in this implementation	Simpler structural edits (merging, rotating pages) can run entirely in JavaScript in the browser

What Happens to My File and My Password?

Be clear-eyed about this before you use the tool: because encrypting and decrypting a PDF here runs through mupdf on the server, both the PDF file you upload and the password you enter are transmitted to the server as part of the request — unlike this site's browser-only tools, nothing about this operation stays local to your device. The server uses that password only to perform the requested operation (encrypting the file with it, or decrypting it if you're unlocking); the password is never written to a log, and once the resulting file has been returned to you, neither the original upload nor the password is retained afterward. If your workflow requires a password to never leave your machine under any circumstances, that's a genuine limitation of a server-side encryption tool like this one, and it's worth knowing before you submit a highly sensitive password through it. For the common case — protecting a routine document before sharing it, or unlocking one you already have full rights to — a brief, one-time transmission to perform real AES-256 encryption is the trade this tool makes in exchange for offering that encryption at all.

Can this tool remove a password from a PDF if I don't know what it is?

No. Unlock mode requires the document's correct current password to work — it decrypts the file using the password you supply rather than attempting to guess, crack, or bypass an unknown one. If you don't have the password, this isn't the right tool for that situation.

What's the difference between the password and the owner password in protect mode?

The password (user password) is required just to open the PDF at all. The owner password is a separate, optional credential that governs permissions like printing and editing independently of the open password; if you leave it blank, it defaults to the same value as the user password, meaning there's effectively no separate permissions layer.

Does this tool send my password to a server?

Yes. Because the encryption and decryption run through mupdf on the server, both the uploaded PDF and the password you type are transmitted there to perform the operation. The password is never logged, and neither the file nor the password is retained after the request finishes — but the transmission itself is a real, honest part of how this tool works.

What encryption standard does the "protect" mode actually use?

AES-256, a strong, modern, industry-standard encryption algorithm — the same category of protection built into professional PDF software, not a lightweight or easily-reversed scheme.

What happens if I enter the wrong password in unlock mode?

The request fails outright with a clear error message. The tool never returns a partially-decrypted, corrupted, or still-locked file when the password is wrong — you'll know immediately that the password you supplied didn't match.

How long can the password be, and are there any character restrictions?

Passwords can be up to 128 characters, which is generous enough for a genuinely long passphrase rather than a short word. There's no special character restriction beyond that length cap, so punctuation, spaces, and mixed case are all fine to include.

If I protect a PDF and then immediately unlock it again, do I get back the exact original file?

Functionally yes — the content, page layout, and structure are unchanged; what changes is only whether AES-256 encryption wraps the file. Encrypting and then correctly decrypting a PDF through this tool is a clean round trip: the readable content that comes back out matches what went in, protected only by whether you supplied the right password at the unlock step.

Related Tools

Once a PDF is unlocked, it's ready for other operations that a locked file can't accept directly — combine it with others using the PDF merge tool, or shrink it with the PDF compress tool, which likewise runs server-side. If you need to stamp a visible marking on a document rather than an access restriction, the PDF watermark tool adds text directly to every page instead of encrypting anything. And if the goal is pulling the words out of a document you've just unlocked, the PDF to text extractor reads its text layer once the encryption barrier is gone.