Forgot your PDF password? What is actually possible

Triage first: which lock do you have

It opens, but printing or copying is blocked. That is an owner password, and it is solved today: Unlock PDF writes a copy without the restriction and asks for nothing. See the fix when a PDF will not print or copy.

It does not open at all. That is a password to open, and the file’s content is encrypted with a key that comes from it. Read on.

The paths that actually work

1. Ask the sender. Statements, pay slips and reports from banks, employers and portals are sometimes protected with a pattern, such as part of a date of birth or a customer number. Look in the email or letter the file came with first; the pattern is often written there.
2. Get it again from the source. Log in to the bank portal, HR system or tax account and download the document again; some portals offer it without a password or state the password rule. If you made the PDF yourself, export it again from the Word, LibreOffice or scanning app file.
3. Find an unprotected copy. Your sent mail, a backup, the cloud folder you synced before you protected it, the original document on another computer.
4. Try your own habits, by hand. Unlock PDF has no limit on tries, and each try takes a moment. Work through the passwords you usually use, then their variants: with a capital first letter, with the year you made the file, dates written as 31012026 and 20260131. Write down what you tried so you do not go round in circles. An evening of this is reasonable; a week is not.

Why password recovery tools mostly disappoint

A tool cannot read a password out of a PDF; the file only holds a value to check guesses against. So every recovery tool guesses. How fast depends on the file’s encryption, and you can find out which yours has without opening it: copy the file, open the copy in a plain text editor (Notepad, TextEdit), search for /Standard, and read the number after /R next to it. The encryption settings are always stored unencrypted.

/R number	What it means for recovery
2	40-bit RC4. Specialist tools search every possible key in minutes, whatever the password. Recoverable.
3 or 4	128-bit. Only guessing, at around 122 million guesses a second on 1 strong graphics card. A short password falls; a long random one does not.
5	The Acrobat 9 variant of AES-256, weak against guessing: around 22 billion guesses a second.
6	Current AES-256, also what getPDF writes. Around 427,000 guesses a second: 8 random characters take centuries, 5 random words millions of years.

The speeds come from a public hashcat benchmark on 1 Nvidia RTX 4090 (hashcat 6.2.6, October 2022). How strong PDF encryption is has the full table and the sources.

Be careful with online “PDF password recovery” services: you upload the file, and if they succeed, they have the content. That is exactly what the password was there to prevent.

Why getPDF does not offer cracking

Not even for your own file, because a tool cannot tell whose file it is. One that opened files without the password would work just as well on a stolen laptop’s documents, and against a current AES-256 file with a good password it would fail anyway. Unlock PDF asks for the password and removes it once you have it; that is the whole job, and it runs in your browser, so nothing is uploaded.

What the law says, in 1 paragraph

Guessing the password of your own file is generally your own business. A file someone else protected is different: removing the protection can breach the terms you received it under, and for copyrighted works the law protects technical measures. In the EU, Article 6 of Directive 2001/29/EC requires member states to protect “effective technological measures” against circumvention; in the US, 17 U.S.C. 1201 forbids circumventing a measure that controls access to a work, and defines that as including “to decrypt an encrypted work” without the owner’s authority (both read on 11 October 2026). At work, company rules usually decide before any law does. This explains the rules in plain words; it is not legal advice.

The honest part

Sometimes the file is simply gone. If you protected it yourself with a long random password, did not save the password, and have no other copy, nothing will open it, and anyone who promises otherwise is selling you something. The 1-line prevention: when you set a password, save it in a password manager at that moment, next to the file’s name.

If the file is not locked but will not open at all, it may be damaged rather than protected; fix a broken PDF covers that. The full privacy map is in the PDF privacy and protection guide.

Inspect PDFFonts, images, metadata, why it is big. Free, runs on your device.Open

Once a file opens, Inspect shows its encryption revision and permissions in a few seconds, so you know what you are dealing with next time.