Open your HDFC or SBI bank statement PDF and you are immediately greeted with a password prompt. It is one of the most common frustrations for people trying to work with bank statements in India. The good news is that the password is not arbitrary — it follows a predictable pattern set by each bank — and modern tools can handle password-protected PDFs directly without requiring you to unlock them first.
This guide covers everything about password-protected bank statement PDFs: what the password is for major Indian banks, how to convert them without unlocking, when it might be appropriate to remove the password, and the security implications of doing so.
Why Indian Banks Password-Protect Statements
The practice of password-protecting bank statement PDFs is nearly universal among Indian banks. The stated rationale is security: if a statement email is intercepted or if someone gains access to your email account, the PDF itself cannot be opened without the password. The password adds an additional authentication layer beyond the email delivery channel.
There is a certain irony here: the password is typically based on personal information like your date of birth or PAN number — information that a determined attacker could obtain from other sources. Nevertheless, the password does protect against casual snooping and accidental disclosure, which covers the vast majority of real-world risk scenarios.
The protection applied is typically an open-password (also called user-password in the PDF specification), which means the PDF cannot be viewed without entering the password. Some banks also apply restrictions on printing, copying, and editing even after the password is entered, though these permissions-based restrictions are weaker and can be bypassed by some tools.
What Is the Password for My Bank Statement?
Indian banks use predictable password formats, almost always based on a combination of the account holder’s date of birth and/or PAN card number. The specific format varies by bank and sometimes by the type of account or statement.
The most common pattern across Indian banks is the first four letters of your name in uppercase followed by your date of birth in DDMMYYYY format. For example, if your name is Rajesh Kumar and your date of birth is 15 March 1985, the password would be RAJE15031985. But this varies significantly — read the bank-specific table below.
Password Formats for Major Indian Banks
| Bank | Password Format | Example |
|---|---|---|
| HDFC Bank | First 4 letters of name (uppercase) + DOB in DDMMYYYY | RAJE15031985 |
| SBI | Account number + DOB in DDMMYYYY (some accounts: PAN + DOB) | Varies by account |
| ICICI Bank | First 4 letters of name (lowercase) + DOB in DDMMYYYY | raje15031985 |
| Axis Bank | Customer ID + DOB in DDMMYYYY | Check net banking for Customer ID |
| Kotak Mahindra | Date of birth in DDMMYYYY format only | 15031985 |
| PNB | Account number (last 4 digits) + DOB in DDMMYYYY | 1234 + DDMMYYYY |
| Bank of Baroda | Customer ID + DOB in DDMMYYYY | Check passbook or net banking |
| Canara Bank | DOB in DDMMYYYY format | 15031985 |
| Union Bank | Customer ID + DOB in DDMMYYYY | Check net banking portal |
| IndusInd Bank | Date of birth in DDMMYYYY | 15031985 |
Tip: If the password above does not work, check the email that delivered the statement — banks usually include a note explaining the password format for that specific statement.
How to Convert a Password-Protected PDF
The simplest approach is to use a converter that accepts password-protected PDFs directly. StatementHub handles password-protected PDFs natively. When you upload a protected PDF, a password field appears. Enter your bank statement password, and the converter decrypts the PDF in your browser before extracting the transactions. The password is used only in your browser — it is never transmitted anywhere.
- Go to statementhub.in.
- Click Choose PDF File and select your password-protected bank statement.
- A password field will appear automatically. Enter your bank password (see the table above for your bank’s format).
- Click Convert to Excel. The browser decrypts the PDF and processes it locally.
- Download the resulting Excel file.
This is the recommended approach because you never need to store an unlocked copy of your statement. The password protects the PDF at rest, and the conversion happens in memory without creating an unprotected intermediate file.
How to Remove the Password (and When It Is Safe To)
Sometimes you may need an unlocked copy of your statement — for example, to share with your CA who cannot figure out the password, or to print the statement for physical submission. Removing the password from a PDF is straightforward once you know it.
Using Adobe Acrobat
Open the PDF in Adobe Acrobat (not just Adobe Reader). Enter the password when prompted. Go to File > Properties > Security. In the Security Method dropdown, choose No Security. Click OK and save the file. The saved copy will have no password.
Using a Browser
Open the password-protected PDF in Chrome or Edge (both have built-in PDF viewers). Enter the password when prompted. Use Ctrl+P (Print) and select Save as PDF as the destination. Click Save. The resulting PDF file is not password protected. This method works on any operating system without any additional software.
Never use online tools to remove passwords from bank statement PDFs. These services require uploading your unprotected financial data to their servers. Use the browser print-to-PDF method instead — it is free, safe, and keeps your data on your device.
When deciding whether to remove the password, consider: where will this unlocked file be stored? If it is in a cloud-synced folder like Google Drive or Dropbox, and your cloud account is ever compromised, the statement is fully exposed. Consider keeping unlocked copies only temporarily, and storing the password-protected originals for long-term archival.
Tools That Handle Password Protection Natively
Not all PDF-to-Excel converters can handle password-protected files. Here is how the major options fare:
- StatementHub: Handles password-protected PDFs natively. Password decryption happens in the browser.
- Adobe Acrobat Pro: Handles passwords natively — open the file, enter the password, then export.
- Smallpdf: Requires you to first remove the password before uploading for conversion.
- iLovePDF: Has a separate “Unlock PDF” tool, but this uploads the unlocked file to their servers.
- Google Drive: Can open password-protected PDFs for OCR, but you need to enter the password during upload.
Security Risks of Sharing Unlocked Statements
Bank statements contain far more sensitive information than most people realise. Beyond the obvious account balance and transaction amounts, they reveal your spending patterns, income sources, regular obligations (EMIs, rent, insurance), UPI payment IDs, and potentially your employer details. An unlocked bank statement in the wrong hands is a detailed financial dossier.
When sharing statements with professionals — your CA, a loan officer, or an HR department verifying income — prefer sharing password-protected PDFs and communicating the password separately (by phone or a different message channel). This way, even if your email is intercepted, the statement remains protected. If the recipient insists on an unlocked copy, understand why they need it and ensure they have appropriate data handling practices.
Best Practices for Managing Protected Statements
- Store passwords in a password manager, not in a plain text file or sticky note. Use a dedicated entry for each bank account.
- Keep original password-protected PDFs for at least 7 years, in line with income tax record-keeping requirements in India.
- Never email unlocked statements unless absolutely necessary. Share the password through a separate, more secure channel.
- For conversion purposes, use tools like StatementHub that accept the password without requiring you to unlock the file first.
- After conversion, treat the resulting Excel file as sensitive data. Store it with the same care as the original PDF.
- If you forget your bank statement password, you will need to generate a new statement from your bank’s net banking portal. Banks do not provide password recovery for statement PDFs — the password is derived from your personal data, so a new statement will have the same password.
