What is the password for my bank statement PDF?
By the PdfDady team · Updated · 7 min read
There is no single bank statement password in India. Every bank sets its own rule, and the same bank can use different rules for different kinds of statement. The reliable place to find yours is the email the statement came in, or the page you downloaded it from. It is almost always written there in plain words.
That may sound like a non-answer, but it is the honest one. Lists of "password formats for all banks" on the internet are often out of date or simply wrong, and typing guesses into a file gets you nowhere. Below is how to find the real rule quickly, what to check when it is refused, and how to save a copy that opens without a password once you are in.
Where the password rule is written
Look in these places, in this order.
- The email body. Scroll past the greeting. Most statement emails have a line such as "To open the attachment, enter..." followed by the rule and an example.
- The download page. When you download a statement from net banking or the app, a note near the download button or in the success message often states the password.
- The bank's own help pages. Search the bank's official site for "statement password". Make sure you are on the bank's real domain, not a blog that looks like it.
- Customer care or the branch. If none of the above helps, ask. They can tell you the rule. They do not need your password or PIN to do that.
The rule is usually built from details the bank already holds about you, such as part of your name, your date of birth, your customer ID or a number you chose. That is why the bank can tell you the rule openly: knowing the rule is useless without knowing your details.
Two examples from banks' own pages
These show how much the rules differ. Both come from the banks' official sites, and both apply only to the specific kind of statement mentioned.
| Bank and statement | Password, as stated by the bank |
|---|---|
| HDFC Bank, PDF statement downloaded from NetBanking | Your Customer ID |
| SBI, statement requested by SMS through SBI Quick | The 4-digit code you chose and sent in the request SMS |
HDFC Bank's NetBanking FAQ says the downloaded PDF statement is password protected and "the password is your Customer ID", with the same note shown on the download page when you pick PDF.
SBI Quick works differently. You request the statement by SMS and include any 4-digit number of your choice. SBI says that code is used to encrypt the PDF, which is then sent to your registered email ID. If you can't open one of these, the answer is in your own sent messages.
We are not listing other banks here because we could not confirm their rules on their own sites at the time of writing. For any bank not in the table, your bank's email explains the format.
Why the right password is refused
If you are sure of the rule and the file still won't open, it is nearly always one of these.
- Capital and small letters. Passwords are case-sensitive. If the rule says capital letters, lowercase won't work, and the reverse.
- Date format. DDMM, DDMMYY and DDMMYYYY are three different passwords. So are 0501 and 51. Follow the example in the email exactly.
- Which name. Rules that use your name mean the name on the bank's records. That might include an initial, or be in a different order from how you write it.
- Which holder. For a joint account, the rule normally refers to one holder's details. The email says which.
- Which product. A credit card statement, a loan statement and a savings account statement from the same bank may each have their own rule.
- An old rule. Banks change formats from time to time. A statement from three years ago may follow the rule from three years ago, so read the email that came with that particular file.
- Phone keyboard habits. Auto-capitalisation and a stray space after a word are common culprits.
None of the official rules we found use your net-banking login password, ATM PIN or an OTP. If an attachment or a page asks for any of those to "open your statement", stop and check with the bank through its official number or app.
If you can't work it out
Don't hand the file to a "password remover" that claims to open it without the password. A real password can't be removed without knowing it, and a locked statement is exactly the sort of file you shouldn't be uploading to strangers.
The quick fix is to get a fresh statement. Download it again from net banking or the mobile app, where the rule is shown next to the download, or ask the branch for a copy. It takes a few minutes and you will have the current rule in front of you.
Saving a copy that opens without the password
Once you can open the statement, you may want a password-free copy. Common reasons:
- A loan, visa or scholarship portal rejects protected PDFs.
- You need to merge six months of statements into one file, or compress them under a size limit. Most PDF tools, including our own Compress PDF, refuse encrypted files.
- Your CA needs the statements, and you would prefer not to tell them a password built from your date of birth or customer ID.
That last point deserves a second look. When you forward the original with its password, you are also handing over the personal details the password is made of. Sending an unlocked copy, or one protected with a new password you made up, gives away less.
To make the copy, use our Unlock PDF tool:
- Add the statement PDF (up to 100 MB).
- Type its password.
- Download
unlocked.pdf.
The unlocking happens in your browser. The statement and the password are not uploaded, and PdfDady does not store either. The pages are not altered, so the text stays selectable and the figures remain sharp. One thing does change: if the bank digitally signed the PDF, the signature will show as invalid in the unlocked copy, because the file has been rewritten. Keep the original in case someone asks for the signed version.
Keep the unlocked copy safe
A bank statement shows your account number, address, salary, EMIs and where you spend. Without a password, anyone who gets the file can read all of it.
- Delete the unlocked copy once the upload or the email is done. The protected original is still in your inbox if you need it again.
- Never leave it on a shared computer. At a cyber café, delete it from Downloads and empty the recycle bin before you leave.
- If you need only one month or a few pages, send only those. You can save the pages you need with Extract PDF Pages.
- If someone needs the statement but not every detail, such as a landlord who only needs proof of salary credits, black out the rest with Redact PDF.
- To keep a copy for your records, set your own password with Protect PDF.
More on this in our guide to sending documents safely.
Questions people ask
Is the statement password the same every month?
For rules based on your details, such as a customer ID, it stays the same until the bank changes its format. For statements where you pick a code each time, it is whatever you picked for that request.
Can PdfDady open my statement if I forgot the password?
No. We never guess or recover passwords. Find the rule in the bank's email, or download the statement again.
Is it allowed to remove the password from my own statement?
It is your statement, and the password exists to protect it on the way to you. Removing it for your own use is your choice. Just treat the unlocked copy with the care the password was providing.
Why do banks protect statements at all?
Email can be forwarded, misdirected or read on a shared device. HDFC Bank's FAQ puts it this way: the statement is protected to keep your financial information confidential and prevent unauthorised access.
Does this work for credit card statements too?
Yes, the unlocking steps are the same for any PDF whose password you know. The password rule for a card statement may differ from your savings account, so check the card statement email.