The email from your bank says your statement is attached. You tap the file, and instead of your transactions you get a box asking for a password. Nobody told you one. Or they did, in a line of small print you deleted months ago.
This is normal. Banks, card companies, payroll services and phone companies lock statements with a password so that a statement sent to the wrong inbox, or forwarded by mistake, can’t be read. This guide explains where that password usually comes from, why the one you type keeps failing, and how to save a copy that opens without it when you need to upload it somewhere.
Where the password comes from
You almost never choose this password. It is built from details the sender already knows about you, and the rule is usually written in the email that brought the file, often near the bottom. Typical ingredients:
- part of your date of birth, for example the day and month, or the full date in a set order;
- the last few digits of your account, card, customer or phone number;
- the first letters of your name, spelled the way the bank has it, sometimes in capitals;
- your national ID or passport number, or part of it.
Every sender has its own rule, and the same bank can use different rules for statements, card bills and tax certificates. So the most reliable source is always the email itself, then the sender’s website or app (search for “e-statement password”), then their customer service.
Why the password doesn’t work
If the rule seems clear and the file still refuses, check these, most common first:
- Capital letters. “AHMED” and “ahmed” are different passwords. If the rule says “the first four letters of your name”, try it the way your name appears on the account, often in capitals.
- The keyboard language. If your phone or computer is set to Arabic or another language, the letters you type may not be the ones you think. Switch to an English keyboard for the password.
- The date format. Is it day then month (
0703) or month then day (0307)? Two digits for the year or four? The email usually shows an example; follow it exactly, including leading zeros. - Which number. “Last four digits of your account” can mean a different number from the one on your card. Check which one the rule names.
- Spaces. A space copied at the end of a password from an email is enough to make it fail. Type it by hand.
If none of this works, ask the sender. Nobody, including us, can recover or guess the password for you, and a website that claims to break bank PDF passwords is not one to give your statement to.
Save a copy that opens without the password
Typing the password every time is fine for reading. It becomes a problem when you have to upload the statement to a visa application, a rental agency or a loan form: many upload forms reject a locked file, or the person receiving it can’t open it.
With the password, you can save a plain copy:
- Open Unlock PDF and choose the statement.
- The tool shows which kind of lock the file has. For a statement it is almost always “This PDF needs a password to open”.
- Type the password in the Password box. Use Show to check what you typed.
- Press Unlock PDF, then download the copy.
The copy opens anywhere without a password. Your statement and your password stay on your device the whole time: nothing is uploaded, so the unlocking happens in your browser, not on our server.
When the file opens but won’t print
Some documents open without a password but have printing or copying switched off. That is a different lock, set with a second password called the owner password. Unlock PDF shows this case plainly, and it can lift those limits only if you have that owner password. If you don’t, ask the sender for a copy you can print. We never guess passwords.
Keep the unlocked copy safe
An unlocked statement is a readable list of your income, spending and account details. Before you send it anywhere:
- Send it only where it is asked for, and prefer the organisation’s own upload form over email.
- Share only what is needed. If the reader needs your income but not your account or card numbers, Redact PDF removes them for good under black boxes, and checks the file before you download it.
- Delete it from your downloads once it has been sent, and keep the original locked file from the bank as your record.
- If you have to email it, put a new password on it with Protect PDF and send that password separately, by phone or a different chat.
Several months in one file
Visa and loan applications often ask for three or six months of statements as a single PDF. Unlock each statement first, then join them in order with Merge PDF. If the result is bigger than the form allows, Compress PDF makes it smaller and shows the real size before you download. Statements are mostly text, so they usually shrink less than scans; if the limit is tight, check the size before you merge.
What this can’t do
- It can’t find a password you don’t have. The only way into a locked statement is the password the sender set.
- It doesn’t change the statement. The copy has the same pages, text and numbers as the original. It is still your bank’s document.
- A digital signature may not survive. Some official documents carry a digital signature that proves they haven’t been changed. Removing the password rewrites the file, and that signature can show as no longer valid. If the person receiving it needs the signature, send them the original locked file and the password instead.
Quick answers
Is it safe to type my statement password on a website? Only where the file and password never leave your device. Unlock PDF works entirely in your browser: the statement is opened and saved on your phone or computer, and neither it nor the password is sent to us.
Does it work on a phone? Yes, in Safari or Chrome on iPhone and Android. Choose the statement from your downloads or from the Files app.
Is it free? Yes, with no sign-up and no limit on how many statements you unlock.
Can I put the password back later? You can add a new password with Protect PDF at any time, and choose it yourself.