Forgot a PDF Password? What You Can Legally Do
By Ali Hamza · Published · 5 min read

On this page
If you have forgotten the password to a PDF, the most reliable fix is to find the password where it was originally given, or get a fresh copy from whoever created the file. Bank statements, payslips and e-tickets usually state the password format in the email or letter that came with them. A properly encrypted PDF (AES) cannot practically be cracked, and no legitimate online tool, ToolMany included, can bypass it. Once you have the password, you can remove it with the Unlock option of ToolMany's PDF password tool.
First, which kind of password is it?
PDFs can have two different passwords, and they behave very differently:
| You see… | It's a… | What it means |
|---|---|---|
| A prompt for a password before anything appears | Open (user) password | The content is encrypted. Without the password, the file can't be read. |
| The file opens, but printing, copying or editing is greyed out | Permissions (owner) password | The content is readable; only certain actions are restricted. |
If your file opens and you can read it, you are dealing with permission restrictions, not a lost open password. In that case, ask yourself whether you actually need to print or copy, and if you do, ask the document's owner for an unrestricted copy.
Where the password usually is
Before assuming it is lost, check the obvious places. Most locked PDFs people receive come from organisations that send the password, or the rule for building it, separately:
- The email the PDF came with. Banks and employers often write something like "the password is your date of birth in DDMMYYYY format" or "the last four digits of your account number followed by your postcode". Read the whole email, including the small print at the bottom.
- A separate email or text message. Careful senders send the password through a different channel. Search your inbox and messages for the sender's name and "password".
- Your password manager or browser. If you set the password yourself, you may have saved it.
- The organisation's help pages. Search "[bank name] statement password". Many publish the format openly.
- Your own records. If you created the PDF, check notes or documents from the day you made it.
Ask for a new copy
This is the most overlooked option and often the fastest:
- Banks, employers, schools, utility companies: download the document again from the online portal, where it may not be password-protected, or ask for a copy to be re-sent.
- A colleague or client: ask them to resend it or share the password by phone.
- Government portals: many let you re-download official documents after logging in.
A short, polite message ("I can't open the PDF you sent on 3 October. Could you resend it or remind me of the password?") solves most cases within a day.
Why the encryption can't simply be "removed"
Modern PDFs use AES encryption, the same family of algorithms used to protect online banking. With an open password set, the document's content is genuinely scrambled. The only way to read it is with the password, or by guessing it.
- Guessing works only for weak passwords. Recovery software tries enormous numbers of combinations. A short password, such as a 4-digit number or a date of birth, can fall quickly; a long, random one is practically impossible to guess.
- Websites that promise to "unlock any PDF" instantly either remove only permission restrictions, which is not the same thing, or ask you to upload your private document to their servers. Be careful what you upload.
- ToolMany will not crack passwords. Its Unlock option needs the current password and then saves a password-free copy in your browser.
When is it legal to remove a password?
Removing a password is fine when the document is yours, or you are authorised to use it without restrictions, and you know the password. For example: your own bank statement, a contract you are a party to, or a file you created yourself.
It is not appropriate to remove protection from documents you are not entitled to access, or to bypass restrictions on copyrighted material. If in doubt, ask the document's owner.
Removing a password you do know
- Open the PDF password tool and choose Unlock.
- Select the PDF and type its current password.
- Download the password-free copy.
The pages and their content are copied into a new file. Bookmarks, form fields and attachments are not carried over, so keep the original too. In our tests, unlocking a protected 2-page file with the correct password produced a normal 2-page PDF, and a wrong password produced a clear "password is not correct" message.
Once unlocked, the file works with other tools such as Merge PDF, Split PDF or PDF to Text, which refuse password-protected files.
Avoiding this next time
- Save the password the moment you receive the file, in a password manager or alongside the file's name in a notes app.
- Rename files clearly, e.g.
HBL_statement_2026-09.pdf, so you can find the matching email later. - Keep an unlocked copy of your own documents in a secure place, if your organisation's rules allow it.
- If you lock files yourself, use a password you will remember or can derive, and record it. Our guide to password-protecting a PDF covers choosing and sharing passwords.
Frequently asked questions
Can ToolMany unlock a PDF without the password?
No. It removes a password only when you type the current one. It cannot crack or bypass encryption.
My bank statement PDF won't open. What's the password?
Banks usually set it to a format based on your details, such as date of birth or part of your account or ID number. Check the email the statement came with or the bank's help pages.
Is it possible to crack a PDF password?
Only weak passwords can be guessed by recovery software, and that should be done only on files you own. Strong passwords on AES-encrypted PDFs are practically impossible to crack.
The PDF opens but I can't print it. Is that a password?
Yes, a permissions password. The content isn't secret; ask the owner for an unrestricted copy if you need to print.
Is my file uploaded when I unlock it with ToolMany?
No. The file and password are used only in your browser.



