What this tool does
It takes a PDF that asks for a password before it will open, and — once you type that
password — gives you back a copy that opens without one. Nothing else. The file is read and
rebuilt by Mozilla's PDF.js inside your own browser tab, so neither the document nor the
password is ever sent anywhere.
The everyday case is a document you already have access to and are tired of unlocking: a
bank statement, a payslip, an archived contract. You know the password, you just don't want
to type it every time, or you need to feed the file to something that refuses encrypted PDFs.
What it deliberately will not do
PDFs carry a second, weaker kind of protection: permission flags set with an owner
password, which let anyone open the file but mark printing, copying, or editing as
not allowed. Those flags are trivial to strip — most PDF libraries will drop them if you ask
— and plenty of tools do exactly that without asking for any password at all.
This one does not. If you hand it a
document that opens freely, it tells you there is nothing to decrypt and stops. Removing a
restriction you were never given the password for is circumventing someone else's decision
about their own document, not unlocking yours — and in the US, the EU and the UK it can put
you on the wrong side of anti-circumvention law. The restrictions panel above will show you
what a file restricts, so you know what you are dealing with; it will not offer to remove it.
How the decryption works, and its one real cost
PDF.js checks your password against the document's security handler, derives the AES or RC4
key, and decrypts the content streams. From there each page is rendered and embedded into a
fresh, unencrypted PDF.
That rebuild is worth understanding before you use it: the
output is a page-by-page image. It looks identical, prints identically, and opens
anywhere — but the text is no longer selectable or searchable, and file size usually grows.
If you need the text itself, run the original encrypted file through the PDF converter with
the password instead; it extracts real text rather than pictures of it.
Only on documents you are entitled to open
Use this on your own files, or on files whose owner gave you the password and the go-ahead.
Knowing a password is not the same as being authorised to remove it — if a document was
shared with you under a restriction, stripping it is still the owner's call, not yours.
Two kinds of lock, and only one of them is yours to remove
PDF protection comes in two flavors that people often confuse. Some files demand a password before they’ll even open — the content is genuinely encrypted and unreadable without it. Others open freely but mark printing, copying text, or editing as not allowed; that’s a permissions layer aimed at controlling what you do with a document you can already read.
The difference matters more than it looks. The first is protection on you — remove it with the password you were given and you’ve simply stopped re-entering something you already know. The second is the owner’s instruction to you, and it is famously weak: the content isn’t encrypted against the reader at all, so most PDF libraries will drop those flags on request, no password involved. That weakness is not permission. Circumventing it is what anti-circumvention law in the US, EU and UK is written about, which is why this tool only does the first thing and refuses the second.
When removing protection is the right move
- A bank statement or payslip you must upload to a portal that rejects encrypted PDFs.
- An archive you keep re-opening — the password has stopped being security and become a daily tax.
- Re-securing later — remove an old password so you can edit, then re-protect with a fresh one.
The decryption runs entirely in your browser, which is the whole point for sensitive files: a statement or contract you’re decrypting is processed in memory on your own machine and never uploaded to a server that could log or retain it. One trade-off to plan for — pages are re-rendered into the new file, so the output is an image of each page: identical to look at and to print, but no longer searchable or selectable. Use this only on documents you’re authorized to access, and remember that knowing a password is not the same as being cleared to remove it.
