Skip to main content
PDFBase

Security Tools

2 tools

Two tools, and the strongest argument on the site for client-side processing. Every other password tool asks you to upload a confidential document and then type its password into the same form — handing a stranger both the lock and the key in one action.

Why does it matter that these run in your browser?

Because of what you are submitting. Uploading a password-protected file to a remote service and typing the password alongside it hands over the document and the credential together, to infrastructure you cannot inspect, at the exact moment the document is sensitive enough that someone bothered to encrypt it. Here the file is read by the File API and the password is typed into a form field that no code transmits anywhere. Passwords are also cleared from the interface as soon as processing finishes, so they do not sit in memory or survive an autofill.

Is it legal to remove a PDF password?

Removing a password from a document you own or are authorised to access is ordinary file management — the everyday case is a bank statement, payslip or utility bill that arrives encrypted and needs to be filed unencrypted in your own records. Circumventing protection on someone else's document without permission is a different matter and may be unlawful where you are. These tools require the password: nothing here cracks, guesses or brute-forces anything, so they cannot open a document you do not have the credentials for.

What do you lose by unlocking a PDF here?

More than you might expect, and the page says so before you start. The unlocked copy is produced by rebuilding each page from a high-resolution image, which preserves the visible appearance but discards selectable text, links, form fields, annotations, metadata and accessibility structure. If you need those to survive, the right tool is qpdf on the command line — "qpdf --password=SECRET --decrypt in.pdf out.pdf" removes the encryption without re-rendering anything. The unlock page publishes that command, because sending you elsewhere for a better result is more useful than quietly degrading your file.

Every tool in this category runs on your device

There is no upload step and no processing server. Open your browser’s network panel and run any of them — the only requests are for the page itself.