PDF Owner Password vs User Password

Two passwords, one file, completely different jobs. Confusing them is why people think a PDF is protected when it is only being politely asked to behave.

One file, two passwords

The PDF format allows a document to carry two separate passwords, and they are not two copies of the same thing:

The user password — also called the document open password. Without it, the file will not open. It participates in encrypting the document's content.
The owner password — also called the permissions password. The file opens without it. It records a set of permissions — whether printing, copying text or editing is allowed — and the reading software is expected to enforce them.

In everyday speech both get called “the PDF password”, which is where the trouble starts. A file can have only an owner password and no user password: it opens freely, but the print button is greyed out. That is not a protected document in any meaningful sense, and it is what most people actually mean when they say their PDF is “locked”.

The user password: an actual barrier

When a document has a user password, its content is encrypted with a key derived from that password. Without the right password there is no readable content: not the text, not the images, not the structure. This is a mathematical barrier rather than a rule a program agrees to follow.

Practically, that means three things:

It stops the casual reader completely. Someone who does not know the password cannot look inside, full stop.
It cannot be removed without the password by any legitimate tool. The only routes are knowing it or guessing it.
Its strength depends on the password, not on the software. A short dictionary word falls to guessing quickly no matter how modern the encryption is; a long random passphrase does not.

The owner password: a request, not a lock

An owner password does not stop anyone opening the file. It stores flags like “printing: not allowed” or “copying text: not allowed”, and the PDF reader checks them before it lets you do those things. Well-behaved software complies. The document itself is not made unreadable.

Do not treat a permissions restriction as confidentiality. Because the restriction is metadata that the viewer is asked to honour, tools exist — including ours — that remove it without knowing the owner password. That is not a flaw in one program; it follows from how the restriction is defined. If the content must stay secret, it needs a user password, or it should not be sent at all.

What an owner password is genuinely good for is the everyday case: stopping a colleague from casually re-editing a final version, or preventing accidental printing of something that should stay on screen. It is a speed bump, and speed bumps are useful. They are not walls.

Which one do you actually need?

Ask what you are protecting against, then pick:

“Nobody should be able to read this file at all.” Use a user password, and make it long. This is the only one of the two that encrypts the content. Use the Protect PDF tool, which applies AES-256 in your browser.
“It's fine if they read it, but it shouldn't be edited or reprinted.” An owner password is the right tool, as long as you understand it is advice rather than enforcement.
“I need to stop one specific person whose details I don't control.” Neither password solves that. Access control is a sharing problem: send a link with per-person permissions, not a file.
“The file is signed and must stay verifiable.” Adding either password rewrites the file and invalidates the signature. Do not password a signed document you need to keep verifiable.

A short note on what is under the hood

Encryption strength is recorded in the file, and it is not uniform across the PDFs in circulation:

AES-256 is what a modern tool should use, and what the PDF 2.0 specification expects. This is what Protect PDF applies.
AES-128 appears in files produced by older software. Still serious encryption, but older.
RC4 (40-bit or 128-bit) appears in genuinely old files. It is obsolete and should not be used for anything new.

You do not normally need to think about this, but it explains a confusing experience: two files both “password protected” can be wildly different in strength. A 2006 document with RC4 is not in the same league as a 2020 one with AES-256.

Can a forgotten password be recovered?

Not by us, and not by anyone who is being straight with you. There is no back door. If a document has a user password you have forgotten, the options are remembering it, finding a copy of it elsewhere, or asking the sender for an unlocked version. Services that promise recovery are, in practice, running guesses against the password — which works only when the password was weak, and takes longer the stronger it was.

If a document has only an owner password, the permission restriction can be removed without knowing anything, which is exactly the point made above about it not being confidentiality.

How this maps to the tools on this site

Protect PDF — adds a password to a document. Set a password and the file is encrypted; that is the user-password role, with AES-256.
Unlock PDF — removes permission restrictions from documents you are entitled to modify. It cannot open a file that requires a password to open, and it does not pretend to.

If you are unsure which situation you are in, the two-second test: try to open the file. If it asks for a password, that is a user password. If it opens and only printing or editing is disabled, that is an owner password — see unlocking a PDF for editing or printing.

Frequently asked questions

What is a PDF user password?

The password a file asks for before it will open. It is involved in encrypting the document's content, so without it the pages cannot be read at all. It cannot be removed by a tool without knowing or guessing it.

What is a PDF owner password?

A permissions password. The file still opens without it, but it records whether printing, copying and editing are allowed, and the reading software is expected to enforce those flags. It does not encrypt the content, so it is not a confidentiality control.

Can owner password restrictions be removed?

Yes, and that is by design rather than a bug: the restriction is metadata the viewer is asked to honour. Tools can strip it without knowing the owner password. Only do this with documents you own or are authorised to modify.

Which should I use to protect a file I'm sending?

If nobody should be able to read it without permission, use a user password — it is the only one that encrypts the content. If you only need to discourage casual editing or reprinting, an owner password is enough. Either way, a link with proper sharing permissions solves more than any password applied to a file.

Can a forgotten PDF password be recovered?

No, not by us and not by any honest service. A user password has no back door; recovery services are guessing, which only works against weak passwords. If you control the document, regenerate it from the source; if not, ask the sender.

Ready to apply it? Protect PDF encrypts with AES-256 in your browser, and Unlock PDF removes restrictions you are entitled to lift.

Open Protect PDF