'Incorrect password' when unlocking a PDF: what to check

Incorrect password — please try again.

You copied it straight out of the message. You pasted it. You got that. You pasted it again, slowly, watching. Same line.

And the irritating part is that the file opened in your PDF reader an hour ago with that exact password, so it cannot be wrong.

Nine times out of ten it is not wrong — it is subtly different from what you think is in the box. Here is the checklist, in the order the causes actually turn up, for getting past that message in PDF Unlock.

1. Look at what is actually in the field

Tap the eye icon and read the password rather than trusting that it is what you typed.

On a phone this catches the single most common failure in the whole list. Mobile keyboards capitalise the first character of a text field by default. A password that begins with a lowercase letter arrives with a capital, invisibly, behind the dots. PDF passwords are case-sensitive, so sbi2026#Kx and Sbi2026#Kx are two entirely different passwords and only one of them opens the file.

Same category, less obvious: predictive text quietly "correcting" a word-shaped password as you type it.

2. Something came along with the paste

Leading and trailing spaces are trimmed before the password is used, so a space at either end is already handled for you.

What is not trimmed, and what chat apps and email clients insert without telling anybody:

• A curly apostrophe where the original had a straight one
• An en-dash where the original had a hyphen
• A zero-width character picked up from a web page
• A line break in the middle, if the password wrapped in the message
• A space in the middle that you cannot see because the font is proportional

WhatsApp, Outlook and most webmail composers all do at least one of these. If you copied out of any of them, type the password by hand once instead of pasting it. It takes ten seconds and it settles the question.

3. Zero, O, one, l

If the password was read out over a call or copied off a printed letter, this is where it went wrong.

0 and O. 1, l and I. 5 and S. 8 and B. In most fonts these are near-identical, and in a password nothing gives you context to disambiguate them.

Do not try random variations. Write the password down, mark every ambiguous character, and work through them systematically. There are usually only two or three, which is four to eight attempts — a minute's work, and the file stays loaded between tries so you are not re-uploading anything.

4. Check the keyboard layout

On a laptop where the input language has drifted — often after connecting an external keyboard, or after somebody else used the machine — symbols move. @ and " swap places between the US and UK layouts. # moves. On some layouts the \ is somewhere else entirely.

The password you are typing may be correct as a sequence of keystrokes and wrong as a sequence of characters. Type it into any plain text box first, look at it, then bring it across.

5. Make sure it is the right password for this file

Boring, and it happens constantly.

Statement formats change. The covering email for March may state a different construction from the one for January. Two files downloaded the same afternoon get muddled. A policy document and a statement from the same insurer use different schemes.

Look at the filename in the panel and confirm you are matching it to the right email.

6. The file may not have an open password at all

This one is a category error rather than a typo, and it wastes more time than any of the above because nothing you type will ever work.

Some PDFs open immediately — no prompt, no box — but refuse to let you copy text, edit the page or add a comment. That is a permissions restriction, which is a different mechanism from the password that stops a file being opened. PDF Unlock is built around the open password: it needs a key to decrypt with, and a file of this kind never asked for one.

The test takes two seconds. Double-click the file. If it opens straight away, there is no open password to supply. If it demands one before showing you a single page, you are in the right place.

7. Confirm the file is what you think it is

If nothing above helps, stop working on the password and look at the file.

Drop it into File Info. It reports the PDF version, the page count, and an explicit Encrypted field with a yes or no. Three useful outcomes:

• Encrypted: No — there is no password on this file. Something else is stopping you.
• Encrypted: Yes — the file is genuinely locked, and the problem really is the password string.
• File Info cannot read it at all — the file is damaged or was never a PDF. A download that failed halfway, or a .docx somebody renamed. Get a fresh copy; no password will open a truncated file.

When the password is genuinely gone

Time to be direct about this, because it is the question underneath most of the searches that land here.

There is no recovery. PDF Unlock decrypts using the key you supply; it does not search for one, and it will not. That is not a missing feature — it is the same property that makes the encryption worth having in the first place. A tool that could open your locked file without the password could open anyone's.

The realistic routes back:

• Bank, insurer, utility, mutual fund. Log in and download a fresh copy. The password format is usually restated at the point of download, and the new file is identical to the one you cannot open.
• A file a colleague or vendor sent. Ask them. One slightly awkward message beats a permanently unopenable document.
• A file you protected yourself. Hopefully you kept the unprotected original — that is the reason to keep it. If you did not, and you set the password with a tool that enforced a strength check, you at least know the shape of what you typed: eight characters or more, with at least three of lowercase, uppercase, digits and symbols, and no 1234-style run in it. That narrows the field of things you might plausibly have chosen.
• Paid "PDF password recovery" services. For a properly encrypted file with a non-trivial password, these are selling you time on a brute-force attempt that will not finish. Spend the money on getting a fresh copy instead.

Once it opens

The download happens automatically, named after the original with -unlocked appended, and your encrypted original is left exactly as it was. Nothing about the process touches the file you dropped in.

Both the file and the password stay inside your browser tab throughout — decryption runs on your own machine, which is the property that makes it reasonable to do this with a statement or a signed agreement. The size cap is 100 MB per file.

The unlocked copy is a real unlocked copy, so it will open for anyone who finds it. Save it somewhere sensible rather than leaving it in Downloads on a shared machine.

And now that it is readable, the other tools will accept it — PDF Text Extract can pull its text out, and if it is going back out by email you can put a fresh password on it with PDF Password Protect, one you actually chose rather than one derived from your PAN. The full set is on the PDF tools page, and everything else lives on all tools.