Real AES-256 encryption, the same kind Acrobat writes.
Your file and your password never leave this device.
The encryption engine (qpdf, compiled to WebAssembly) runs inside this page in a background thread. Nothing is sent anywhere.
I forgot the password to a PDF
Then it stays shut. AES-256 has no back door and nobody has the key: not this site, not Adobe, not the company that made the file. Any site claiming it can open a PDF without the password is either guessing common passwords or lying.
How strong is this, really?
256-bit AES, written by qpdf, the same standard Acrobat uses. The strength then rests entirely on your password. A short or obvious one can be guessed no matter how good the encryption is.
What is the owner password for?
The opening password lets someone read the file. The owner password says who controls the document: the rules about printing, copying and editing, and whether the protection may be taken off at all. Set a separate one and you can hand out the reading password without handing over control. This tool refuses to remove protection for anyone holding only the reading password.
Are the restrictions actually enforced?
Printing, copying and editing limits are instructions that PDF readers agree to honour, and mainstream readers do. They are not the same as the encryption itself, which genuinely cannot be bypassed. If a document must not be read by the wrong person, the password is what protects it, not the tick boxes.