Owner vs User Password: What's the Difference?

Every week we hear the same question: “My PDF is locked — can you unlock it?” The answer depends entirely on which kind of lock you’re dealing with. PDF files support two completely separate password mechanisms, and they work in fundamentally different ways.

The user password (also called “open password”)

A user password encrypts the actual content of the PDF. When you try to open the file, your PDF reader asks for the password. If you type the wrong one — or nothing at all — you see a blank page or an error. The binary data inside the file is scrambled using an encryption algorithm (RC4 or AES), and without the key derived from the correct password, it cannot be unscrambled.

This is real security. The file content is mathematically protected. There is no shortcut to bypass it — the only way in is to know the password or to crack it through exhaustive search.

The owner password (also called “permissions password”)

An owner password does not encrypt the content. The file opens normally, without any prompt. However, the PDF creator has set restriction flags: no printing, no copying text, no editing, or some combination of these.

Applications that respect the PDF specification — Adobe Reader, most web browsers, Preview on macOS — will enforce these restrictions. But the content itself is right there, unencrypted. The owner password is essentially a polite request to the software, not a cryptographic lock.

Any tool that chooses to ignore the restriction flags can remove an owner password instantly. This includes open-source tools like qpdf, pdftk, and online services like PDFUnlock. The operation takes milliseconds.

How to tell which one you have

The simplest test: try to open the file.

• The PDF asks for a password before showing anything → you have a user password. The file is encrypted.
• The PDF opens normally, but you can’t print, copy or edit → you have an owner password. The file is not encrypted.
• The PDF asks for a password AND has restrictions after opening → you have both. The user password must be dealt with first.

Most PDF readers also display the security properties. In Adobe Reader, go to File → Properties → Security. You’ll see entries like “Document Open Password: Yes” and “Permissions Password: Yes.”

When each is used

Owner passwords are commonly set by:

• Companies distributing read-only reports or branded documents
• Schools sending exam papers that shouldn’t be modified
• Government agencies publishing forms that should be printed but not altered
• Anyone who wants to prevent casual copy-paste of their text

User passwords are commonly set by:

• Tax accountants protecting client returns
• Lawyers encrypting confidential contracts
• Banks sending password-protected statements
• Anyone who wants genuine confidentiality

How each can be handled

Owner password → free, instant removal

Since owner passwords don’t encrypt anything, removing them is trivial. At PDFUnlock, we do this for free. Upload your file, we detect that it only has an owner password, and you download the unrestricted version in seconds. No account needed, no payment, no waiting.

User password → password recovery

User passwords require actual cracking. We extract the encryption hash from the PDF and run it through hashcat on dedicated GPUs, trying millions of password candidates per second. The process goes through ten phases — from a quick dictionary test to Markov brute force — and can take anywhere from seconds to days depending on the password strength and encryption type.

You only pay if we find the password. If the password is too strong to crack (a truly random 12+ character string on AES-256), we’ll tell you honestly.

The bottom line

If your PDF opens but won’t print → owner password → free removal.

If your PDF won’t open at all → user password → upload for recovery and we’ll give you an honest assessment before you spend anything.