Why PDFs Have Two Kinds of Password — User Password vs. Owner Password
If you've ever seen the two separate fields — "open password" and "administrator (permissions) password" — when password-protecting a PDF and wondered what the difference is, this guide explains that difference, along with why one of them alone isn't real security.
1. The PDF standard's two passwords
The PDF standard (ISO 32000) defines, from the start, two passwords with different purposes. The User Password (open password) is a key required from the moment you open the document — without it you can't see the content at all. The Owner Password (administrator password) is, separately from opening the document, a key that controls individual permissions like printing, copying, editing, and adding annotations. A single PDF can have neither, just one, or both.
2. What happens when there's only an owner password
This is the most confusing point. If you leave the user password blank and set only an owner password, the file opens for anyone with no password. The restricted permissions (printing, copying, etc.) are enforced by the PDF viewer in its UI (e.g. the Print menu is disabled, text selection/copy is blocked). In other words, it's a structure that "shows all the content but blocks specific actions."
encrypt(). Print, copy, edit, and annotation permissions can be set individually with checkboxes, and if you leave the owner password blank it uses the user password as the owner password too (ownerPassword: ownerPw||userPw) — because the PDF standard always needs an owner password value for permission control.
3. The real security level of an owner password
One important fact: permission restrictions set with an owner password are not strong security. The content of the PDF file itself opens in an already-decryptable state without the user password — the owner password is closer to a gentleman's agreement that blocks certain features "if this viewer follows the rules." In practice, command-line PDF tools, some libraries, and dedicated "PDF permission removal" tools can often strip that restriction easily without knowing the owner password, because the structure only changes "permission flags," not secret information needed to read the content. The user password, by contrast, is a key actually needed to decrypt the content, so without it you fundamentally cannot see anything.
| Aspect | User (open) password | Owner (permissions) password |
|---|---|---|
| Without it? | You can't open the file at all | The file opens freely |
| Controls | Whether you can view | Individual actions: print, copy, edit, annotate |
| Security level | Needed to decrypt content — real security | Only effective in compliant viewers — bypassable |
4. Practical guidance
- If you really want to block viewing: be sure to set a user (open) password. Suitable for documents where access itself must be controlled, like contracts and pay slips.
- If you want to show the content freely but block only printing/copying: leave the user password blank and set only the owner password plus permission checkboxes. Fits documents meant to be "viewed but not re-edited or redistributed," like a report for distribution. Just use it knowing it's not enforceable protection.
- If you set both: viewing is blocked, and whoever opens it is also subject to the individual permission restrictions.
Frequently Asked Questions
Q. Can I set only a user password without an owner password?
A. Yes. This site's pdf-password-adder.html tool reuses the user password value as the owner password if you leave the owner password blank. From the user's point of view you only need to think about the open password, and permission restrictions work fine even if you don't set them separately.
Q. How strong is a printing restriction set with an owner password, really?
A. For an ordinary user opening the file in a standard PDF viewer (Adobe Acrobat Reader, a browser's built-in viewer, etc.), it works well. But it's not a strong defense against someone determined to bypass it, because the content itself already exists in decrypted form.
Q. If I forget the password, can it be recovered?
A. The AES-128 encryption this tool uses is designed to be strong against brute-force attack. If you lose the user password, even the original author cannot recover it by legitimate means, so be sure to store it separately in a password manager.
Q. How do I remove the password later?
A. If you know the password, you can enter it into a PDF password remover to decrypt. If you don't know the password, this kind of tool cannot remove it.