Can't unlock PDF restrictions or forgot your password?

Format Support

AccentPPR works with every version of the PDF format. The version decides the encryption algorithm, and the algorithm decides how fast the brute force runs and whether a graphics card can be put to work.

How do you tell which version you have? AccentPPR detects the format version automatically when it opens the file.

Instant Permissions Password Removal

The Permissions Password (also known as the Owner Password) turns on file encryption, but the key itself stays inside the document. A PDF like that can't be printed, copied, edited, and commented on. Yet those restrictions lift instantly.

AccentPPR derives the encryption key right out of data that sits inside the document. No brute force. The program decrypts the file and saves it back without the restriction list. You end up with a regular PDF where printing, copying, editing, and commenting are available again. This works for every version of the format, from the early RC4 to the current AES-256.

That's the key difference from the Document Open Password. Without it, the encryption key can't be derived: you have to brute-force the password.

Document Open Password Recovery Speed

Recovering the Document Open Password comes down to brute force, and the speed depends directly on the encryption algorithm. For AES-256 (the current encryption revision /R6), that's around 28,000 passwords per second on a Ryzen 9 9950X. For earlier revisions with RC4 and AES-128, the speed is orders of magnitude higher.

Three factors determine the total recovery time: the encryption algorithm, password complexity, and raw CPU power. To wring every cycle out of the processor, the critical sections of AccentPPR code are written in assembly, a low-level language. That's where you can tap into CPU-specific instructions from Intel and AMD: SSE, AVX, and AES-NI. And all for speed.

For files saved with "Acrobat 7.0 and later" compatibility (RC4 128-bit and AES-128), the brute force can be accelerated with a graphics card. GPU acceleration is available in Passcovery Suite.

Targeted Brute Force with a Positional Mask

A positional mask spells out the allowed characters separately for each position in the password. AccentPPR uses that description as a filter: only the combinations that fit it get tested, and everything else is skipped. The search space shrinks by orders of magnitude.

For example, a 7-character alphanumeric password gives 3.5 trillion combinations. If you remember the structure (say, 4 lowercase letters followed by 3 digits), a positional mask cuts the search space down to 457 million candidates. What would take almost 4 years of exhaustive brute force fits into 4-5 hours. Calculation for a PDF with AES-256 /R6 on a Ryzen 9 9950X.

See a Few Mask Examples

Dictionary Attack with Mutation Rules

A password is often a familiar word with predictable tweaks: the case changes, a year gets tacked on, and characters get swapped (a for @ or o for 0). AccentPPR plays into that habit. The program loads up to four dictionaries at once, merges them, and applies your mutation rules to every word. You write the rules in the built-in editor. That's how a dictionary password becomes P@ssw0rd2026, and AccentPPR can spin out dozens of such variants.

The editor previews mutations as you write the rules. You see what turns into what, and how words from different dictionaries combine.

See an Example: An 18-Character Password in 90 Seconds

Attack Chains in a Scenario

A scenario runs a chain of several attacks one after another automatically, with no manual switching between methods. A single file can describe a mask, a dictionary with mutations, and an exhaustive brute force over a narrow range. AccentPPR walks through the chain step by step and stops on the recovered password.

Reproducible Brute Force for Forensics and Security Audits

AccentPPR locks in the attack parameters before the run and tracks the brute force as it goes. That's enough to repeat the process and get the same result – the foundation of any expert report. Locked in before the run: the file's encryption algorithm, attack type, range or dictionary, mutation rules, and the calculated number of candidates. During the run you see the current speed and the time remaining.

Where it fits: digital forensics and recovering passwords from evidence, incident response and regaining access to corporate documents, and password policy audits and stress-testing the organization's protected files.

Status auto-save and command-line operation let AccentPPR slot into batch processing and automated DFIR pipelines.