Remove PDF password

No — Remove PDF password cannot open a document whose password you do not know, and that is a deliberate design decision rather than a missing feature. The tool hands the password you type to the decryption routine and asks it to open the document; if the password is wrong, the routine fails and you are told to try again. There is no dictionary attack, no brute-force loop and no attempt to exploit the security handler, so a file you were never given the password for stays closed. What it does do is remove protection from a document you can already open — which is the actual everyday problem, since a password you retype every time you look at your own bank statement is friction rather than security.

A protected PDF opens without a prompt when it carries owner restrictions but no user password — a common and often misunderstood configuration. Such a file is technically encrypted, but with an empty user password, so every ordinary reader opens it instantly and simply honours the flags that say printing or copying is not allowed. The tool probes that empty password explicitly instead of demanding secret text you do not have, reports that no password is needed, and saving a copy drops the restrictions. Desktop viewers behave the same way. If a document you received is protected like this, be aware that the restriction was never keeping anyone out — it was only asking politely. Whether it could be read, printed or copied from always came down to which viewer the recipient happened to open it in.

The standard security handler is supported across its usual range: RC4 and AES ciphers, revisions 2 through 6, which covers essentially everything ordinary software produces — 40-bit and 128-bit RC4 in older files, AES-128 from the mid-2000s onward, and AES-256 in PDF 2.0. What is not supported is a custom or proprietary security handler, the kind some enterprise rights-management systems attach; those need the vendor's own client. When the tool hits one it reports that the PDF may use unsupported encryption instead of pretending to succeed. Certificate-based encryption, where access is tied to a recipient's key rather than a password, is likewise outside what a browser tool can do. In every supported case the unlocked result is a plain, standard PDF that opens anywhere without a prompt.

No — the saved copy has no security handler at all, so every permission restriction goes with it. Once the document is open it is re-saved without an encryption step, which means the encrypt dictionary and the permission bit field are simply never written into the new file. Full-resolution printing, copying text and images, editing, annotating, filling forms and assembling pages are all unrestricted afterwards, and the file opens with no prompt in any reader. If you want protection back with different settings, run the unlocked file through Add password to PDF, which encrypts with AES-128 and lets you choose which of seven permissions to allow. Getting an unencrypted copy is often the real reason to run this step at all, since most PDF tools — the rest of PDFChamp included — need a document unlocked before they can rewrite it.

Whether you may remove a password depends entirely on your rights to the document, and the tool is built so the obvious misuse is impossible. Because it requires the correct password, it cannot open anything you were not given access to in the first place. Whether you may then redistribute an unprotected copy is a separate question about the agreement or licence attached to the file — a bank statement of your own is one thing, a confidential report a client shared with you under restriction is another. If a document was sent to you protected, the sensible default is to keep an unlocked copy for your own use and pass on the protected original.

Remove PDF password is free with no account and no limit, and neither the file nor the password is ever transmitted. Decryption runs in your browser through @cantoo/pdf-lib; the password you type is held only in the page's memory for as long as the tab is open, and it is discarded the moment you reset the tool or navigate away. Nothing is logged, stored or sent, and the unlocked copy is written straight to your downloads with no watermark and no added branding. That is the whole reason to use a client-side unlocker: typing a password into a site that uploads your document would hand a stranger both halves of the secret at once.