PDF Passwords Explained: Open Password vs Permissions Password

Your bank statement opens without a prompt, but the Print button is greyed out and the title bar says "SECURED". Another PDF, sent by your accountant, won't show a single page until you type a password. Both files are "password-protected", yet they behave nothing alike.

That is because a PDF can carry two different passwords that do two different jobs: an open password and a permissions password. One keeps people out of the file. The other only asks their PDF reader to behave. Knowing which is which tells you how safe a file really is, and what you can do about the one in front of you.

The open password: a real lock

The open password (Acrobat calls it the "Document Open" password, and the PDF specification calls it the user password) is the one that stops you at the door. Without it, you see a prompt and nothing else.

Behind that prompt, the file's contents are encrypted. The password is used to derive the key that decrypts the pages, so the text and images inside are scrambled for anyone who doesn't have it. It doesn't matter which app you open the file in, or whether that app is well-behaved: without the password, there is nothing readable to show.

This is also why a forgotten open password is such a problem. The password isn't stored in the file waiting to be looked up, and there is no "reset" link. Modern PDFs use AES encryption, and the only way in without the password is guessing it. A short password like a birth date can be guessed quickly. A long passphrase effectively can't.

The permissions password: a polite request

The permissions password (the owner password, in the specification's terms) does something much weaker. A file with only a permissions password opens for everyone, no prompt at all. What the password controls is a set of flags: whether printing is allowed, whether text and images can be copied, whether the document can be edited, annotated or have its pages rearranged.

Here is the catch. Those flags are instructions to your PDF reader, not a barrier around the content. The reader has to decrypt the pages to display them, so the content is fully available on your screen. Whether the Print button actually goes grey depends on the reader choosing to honour the flags. Acrobat honours them. Plenty of other viewers, including some built into browsers, ignore some or all of them, and nothing in the file can force them to.

So a permissions password is good at preventing casual misuse ("please don't print this draft") and bad at keeping anything secret. If what you care about is who can read the document, a permissions password on its own protects nothing.

The landlord who thought the statements were locked

A landlord collects bank statements and pay slips from rental applicants, then forwards them to the property owner for approval. To keep them private, he "protects" each file in his PDF editor by unticking printing and copying and setting a permissions password. He assumes that means locked. Then the owner mentions she opened all of them on her phone without typing anything, and he realises the files would have opened just as easily for anyone the email reached by mistake.

The bookkeeper typing the same password forty times

A bookkeeper receives monthly statements for a client from the client's bank. The bank sends every PDF with an open password built from the client's date of birth, which is sensible in transit. But she needs to file a year of them in the client's folder, merge some into a quarterly pack and search them later. Every single file now stops her with a prompt, and her merge tool can't combine files it can't open.

When you have both

A PDF can carry both passwords at once. The open password lets someone read the file, with the permission flags applied. The permissions password unlocks everything: in most readers, typing it at the prompt opens the file with no restrictions at all.

That has a practical consequence. If the open password and the permissions password are the same, anyone who can open the file also holds the key that lifts the restrictions. For restrictions to mean anything, the two passwords have to be different, and the permissions password has to stay with the author.

It also explains which password you need for what. To read a locked file, you need the open password. To remove an open password, you need to know it, because the file has to be decrypted before it can be saved without one. There is no legitimate shortcut around either: a tool that removes protection without the password is guessing it.

Adding the right password, or removing one you know

Once you know what each password does, the fix for both of those situations is straightforward. Both tools below run entirely in your browser: your PDFs and the password you type never leave your device, which matters for exactly the kind of documents people password-protect.

How the landlord actually locks the files

The landlord drops the applicants' statements into the tool and adds an open password to the PDFs, one password for the whole batch, which he reads to the owner over the phone instead of putting it in the same email. Now each file is encrypted end to end: anyone who opens an attachment without that password sees a prompt and nothing else, whatever app they use.

How the bookkeeper gets her archive back

The bookkeeper already knows the password; she just doesn't want to type it forever. She loads the year's statements, ticks the option to use the same password for every locked file, enters the birth date once and removes the password from the PDFs in one batch. She gets clean copies that open, merge and search without a prompt, which she files in the client's folder, protected the way the rest of that folder is.

The short version

An open password encrypts the PDF: without it, the file can't be read. A permissions password only asks PDF readers to block printing, copying or editing, and the file still opens for everyone. If a document needs to stay private, give it an open password and send that password through a different channel than the file. If a file's password is just in your way and you know it, remove it from a copy you keep somewhere safe.

Sending something that shouldn't be read in transit? Try Protect PDF for free →

Already have the password and tired of typing it? Unlock PDF → is right here too.