“Password protect this PDF” sounds like a single setting, but the PDF specification actually defines two completely independent passwords that control two different things. Mixing them up is the most common source of confusion when protecting or unlocking a PDF.
The owner password
The owner password controls permissions — whether the document can be printed, whether text and images can be copied out of it, and whether it can be edited. It does not restrict who can open the file. Anyone can view a PDF protected only with an owner password; what they can't necessarily do is print it, copy from it, or modify it, depending on which permissions were set. This is the password you almost always want if your goal is “let people read this, but stop them from editing or redistributing it.”
The user password (the “open” password)
The user password is the one most people picture when they hear “password-protected PDF” — it's required just to open the file at all. Without it, the document won't display in any PDF reader. This is the right choice when the content itself needs to stay confidential from anyone who doesn't have the password, not just restricted in what they can do with it once open.
Why this distinction actually matters
A lot of “locked” PDFs found in the wild — bank statements, official forms, reports from an office suite — only have an owner password set, with no user password at all. That's why some restricted PDFs open just fine but refuse to let you copy text or print, while others demand a password before you can even see the first page. If you're trying to remove restrictions from a document and it opens without prompting for anything, you're dealing with owner-password-only restrictions, which is a much simpler case to resolve than a genuine open password you don't know.
Setting both when you protect a file
You can set an owner password, a user password, or both at once. A common, sensible combination: set a user password so only the intended recipient can open the file, and a separate owner password so that even if they share the open password further, they still can't print or edit the document without the owner credentials.
How the encryption itself works
Under the hood, both password types feed into the same encryption layer, typically AES with a 128-bit or 256-bit key depending on which PDF version the file targets. Older PDFs sometimes use the much weaker RC4 cipher from earlier spec revisions, which is considered crackable with enough computing power and shouldn't be relied on for anything genuinely sensitive. If privacy actually matters — not just casual restriction — make sure whatever tool you use is producing a modern AES-256 encrypted file rather than falling back to an older, weaker default for compatibility with very old readers.
What password protection doesn't protect against
A password stops casual access — someone double-clicking the file without the right credentials. It doesn't protect against a determined attacker with password-cracking tools, particularly if the password itself is short or guessable; a weak password on strong encryption is still a weak password. It also doesn't protect against the file being intercepted before it's encrypted in the first place — for example, if you email an unprotected copy and a protected copy separately, or if a document sits unprotected somewhere before you remember to lock it down. Treat password protection as one layer, not a substitute for being careful about who receives the file and how.
Removing protection you have the right to remove
If you know the password and just want it gone — you're the one who protected the file, or you've been given the password legitimately — an unlock tool decrypts the PDF using the password you provide and saves an unprotected copy. This is different from “cracking” a password you don't have; a legitimate unlock tool still requires the correct password as input, it just removes the need to enter it every time afterward.
Try these DocZap tools