How to open a password-protected bank statement PDF
Banks encrypt statement PDFs so that a statement sitting in your email, or forwarded by mistake, can't be read by anyone who doesn't know the password. That's useful protection. It also means the PDF won't open in some tools, and many converters refuse it outright. This guide covers where the password comes from, how to open the file, and how to remove the password on your own device when you need an unlocked copy.
Ground rule: everything here assumes it's your statement, or you're authorised to handle it (for example, as the account holder's accountant and they've given you the password). Don't try to get into statements that aren't yours.
Two kinds of PDF password
PDFs support two separate passwords:
- Open (user) password: needed to open and read the file at all. This is what banks use.
- Permissions (owner) password: the file opens, but printing, copying or editing is restricted.
Adobe's Acrobat documentation treats these separately: you remove the open password by unticking "Require a password to open the document", and the permissions password by unticking "Restrict editing and printing" (Adobe). The open-source tool qpdf makes the same distinction between the user password and the owner password (qpdf manual).
Where is the password?
Banks almost always tell you the format in the email that delivered the statement or on the download screen. Read that first; formats differ by bank, by product, and sometimes by channel (download vs email). Formats the banks themselves publish:
| Bank / product | Password | Source |
|---|---|---|
| HDFC Bank, statement downloaded from NetBanking | Your Customer ID. HDFC also shows this in the note on the download page when you pick PDF | HDFC Bank FAQ |
| Axis Bank e-statements (help article filed under credit cards) | First four letters of your name in UPPER CASE as printed on the statement (ignore spaces and periods) + four digits of your date of birth. Alternative: the same four letters + your nine-digit Customer ID | Axis Bank support |
| ICICI Bank credit card statement PDF | Last 4 digits of your credit card number; ICICI says it can't be customised or reset | ICICI Bank |
| SBI e-statement requested through SBI Quick (SMS) | A 4-digit code you choose and include in the SMS; it encrypts the emailed PDF | SBI |
| Monzo, statement emailed when an account is closed | Monzo password-protects it and texts you the password | Monzo |
Two things to notice. First, these are product-specific: ICICI's card statement format is not necessarily its savings-account format. Second, if a format you found on a forum doesn't work, the bank's own email or download page is the authority, not a list on the internet (including this one).
If you're the bookkeeper: ask the client for the password over a different channel from the one the PDF came through (for example, PDF by email, password by phone).
Opening the file
You don't need any special software to open an encrypted statement: Chrome, Edge, Firefox, macOS Preview and Adobe Acrobat Reader all prompt for the password. If it opens and you only need to read it, you're done.
Removing the password (when you need an unlocked copy)
Some accounting tools and converters won't accept encrypted files. Options, all on your own device:
Adobe Acrobat (paid)
All tools > Protect a PDF > Set security properties > Security tab > Change Settings, then untick Require a password to open the document, and save (Adobe). Adobe notes that permanently removing protection needs an Acrobat subscription; Acrobat Reader can only open protected files (Adobe).
qpdf (free, command line)
qpdf --password=YOUR_PASSWORD --decrypt statement.pdf statement-unlocked.pdf
--password supplies the password to open the file, and --decrypt writes an output with no encryption (qpdf manual). The qpdf manual notes the feature "is not intended to be used for bypassing copyright restrictions", which is fine here: you're the owner and you have the password. To keep the password out of your shell history, put it in a file, pass --password-file=thatfile, and delete the file afterwards. (qpdf can also read it from standard input with --password-file=-, but the manual warns that what you type is echoed with no prompt.)
"Print to PDF"
Opening the statement and printing it to a new PDF often produces an unlocked copy. Two caveats: a permissions password can block printing, and some print drivers flatten the page so the text layer is lost or garbled, which hurts conversion accuracy. Prefer Acrobat or qpdf.
Avoid "free online PDF unlockers" for bank statements
Uploading the PDF and its password to an unknown website hands a stranger your account number, address and every transaction. If you must use an online service, read exactly how long it keeps files.
Keep the protection where it matters
Unlock a working copy, convert it, then delete the unlocked copy. Keep the original encrypted PDF as your record. If a lender or auditor needs the statement, send the bank's original (see bank statements for mortgage applications).
How Footed handles encrypted statements
Footed opens the PDF in your browser. When a statement is password-protected, you type the password into Footed's page; the file is decrypted in your browser, and only the extracted text is sent for parsing (processed in memory, not stored). Neither the PDF nor the password is uploaded. You don't need to make an unlocked copy first.
FAQ
I've tried every format and the PDF still won't open. Check whether the statement came through a different channel (email vs download vs app) than the one whose format you're using, check upper vs lower case, and check which date format the bank expects (DDMM vs DDMMYYYY). Then ask the bank; they will tell the account holder.
Is it legal to remove the password from my own bank statement? Removing protection from your own document, with the password the bank gave you, is ordinary file handling. Bypassing protection on someone else's document without permission is not.
Why does my converter say the file is "damaged" or "unsupported"? Many converters can't handle encrypted PDFs. Use one that asks for the password, or make an unlocked copy with Acrobat or qpdf first.
Does removing the password change the statement? It removes the encryption only; the content is the same. But lenders may want the bank's original file, so keep it.
Got an encrypted statement to convert? Footed asks for the password in your browser, never uploads the PDF, and reconciles every row against the statement's balance. Free for 5 pages a day.
Published 2026-10-07.