Docs · guide

PDF password: locking and unlocking a file

By Alberto Gulotta · Updated 2 September 2026 · 7 min read

A pdf password is two completely different things wearing the same name, and almost every confusion on this guide comes from that. One of them encrypts the document so it cannot be read without the password. The other lets anybody open it and merely asks the software not to allow printing or copying.

The permissions checkbox does the opposite of what its own label suggests. In Preview the route is File › Export — not Save — and then the Permissions button. Apple’s own instruction is to “Select the checkbox next to an action to allow printing or changes without the owner password”, and to “Leave the checkbox unselected to require the owner password”. So a ticked box grants the action; the restriction is the empty box. Two details from the same page are worth having with it: exporting under a new name leaves the original file untouched, which is how you keep an unprotected copy, and “Changes take effect the next time the PDF is opened” — the document still open in front of you will not look protected, and that is expected.

On “unlock pdf online”, the phrase people actually type: the objection is not that these services are dishonest about what they keep. iLovePDF publishes its rule plainly — files are “automatically and permanently deleted within two hours of being processed”, with a manual delete button on the download screen. The objection is narrower and it is about this guide specifically. A document with a password on it is, by definition, one somebody wanted kept shut, and the Mac route above never sends it anywhere.

The menu item moves once a password exists, which is why people who set one cannot find where to change it. Before there is an owner password the route is File › Export and the Permissions button. After one has been set, Apple documents a different route: “Choose File > Edit Permissions”. Same dialogue, different door, and nothing on screen tells you the door has moved.

Apple describes that checkbox twice, in opposite words, which is worth knowing before you trust your memory of it. On the export route the instruction reads “Leave the checkbox unselected to require the owner password”. On the edit route the same control is described as “Deselect the checkbox to require the owner password for printing or other actions. Leave the checkbox selected to allow changes without the password.” Both say the same thing — unticked means locked — but one starts from ticking and the other from unticking, and read quickly they seem to contradict each other. The safe habit is to ignore the sentence and remember the state: an empty box is the restriction.

Once that distinction is clear, the rest of this guide becomes straightforward — including the part people are usually embarrassed to ask about, which is getting rid of a password on a document they are entitled to read.

The searches follow the same split. Password protect pdf and how to password protect a pdf come from somebody about to send something confidential. Unlock pdf, remove password from pdf and pdf password remover come from the other side of the same document — usually a statement that arrives locked every month. Encrypt pdf and lock pdf are the same first job in more technical words, and decrypt pdf is where people go when they have forgotten one.

That case is far more ordinary than it sounds. Banks, insurers and payroll systems send statements locked with a password derived from a date of birth or an account number, and the recipient often wants one unlocked copy in their own records rather than typing it every time.

Not covered here. It will not help anybody open a document they are not entitled to read. That line is easy to draw and this guide draws it: everything in the unlocking wing starts with a file you can already open.

It will not oversell PDF protection either. An owner password is a request that software is asked to honour, and pretending otherwise leaves people believing a document is protected when it is not.

And it will not tell you to upload a bank statement to a website. This is the one guide in the section where every example is confidential by definition, and the free offline route exists on every machine. What holds instead is simple: setting and removing a password is free on a Mac and needs nothing installed.