Many banks — particularly in India (HDFC, ICICI, SBI, Axis), the Middle East, and Southeast Asia — automatically encrypt e-statement PDFs with a password. This protects the document if it's intercepted in email. The password is typically something you already know: your date of birth, PAN number, account number, or a combination.
Password protection in a PDF works at the file level (AES-128 or AES-256 encryption). The PDF reader decrypts on-the-fly when you type the correct password, which is why you can view the document but can't extract the data without the password.
| Bank | Default password format | Example |
|---|---|---|
| HDFC Bank | Customer ID (8 digits) | 12345678 |
| ICICI Bank | First 4 letters of name + DOB (DDMMYYYY) | JOHN01011990 |
| SBI | Account number | 32XXXXXXXXXX |
| Axis Bank | Registered mobile last 4 digits + DOB (DDMMYYYY) | 567801011990 |
| Kotak Mahindra | DOB (DDMMYYYY) | 15031985 |
| Yes Bank | PAN (uppercase) | ABCDE1234F |
| IndusInd Bank | DOB (DDMMYYYY) | 22071988 |
| Federal Bank | Customer ID | XXXXXXXXXX |
If none of the above work, check the email from your bank that delivered the statement — it usually contains the password hint in the same message or in a separate follow-up email.
Note: Password formats change periodically. Always check your bank's official website or the email that delivered the statement for the current format.
Drag and drop or click to upload your statement at bankstatementengine.com. The converter detects the encryption automatically.
A password field appears on screen. Type your statement password. The password is used only to decrypt the file for this session — it is never logged or stored.
Once decrypted, conversion proceeds the same as any PDF. Check the transaction preview and click Download Excel or Download CSV.
Your statement password is transmitted over HTTPS (encrypted in transit) and is used only to decrypt your file for the duration of processing. It is never written to disk, logged in any database, or associated with your session after processing completes. The decrypted PDF is held in memory only.
Bank Statement Engine does not store files longer than 24 hours and does not share data with third parties. The password you enter is the PDF's own password — it does not give access to your bank account and cannot be used to log in anywhere.
If you cannot open the PDF yourself (i.e., you don't know the password), you'll need to contact your bank to get the password reset or to request an unencrypted copy. We cannot bypass or brute-force PDF encryption — and you shouldn't trust any tool that claims to do so, as this is typically a data-theft vector.
Most banks will resend an e-statement or provide the password format on their support page or through their app's chat. HDFC and ICICI both let you change your statement password through NetBanking.
Free, secure, no signup. Password is never stored.
Convert Free →Some banks use "owner" vs "user" password levels. An owner password restricts copying and printing but not viewing; the converter needs the user (open) password. Try leaving the password field blank first — some PDFs have printing restrictions but no open password.
Yes. Open the PDF in Adobe Acrobat Reader, enter your password, then go to File → Save As and save a copy. Many PDF readers save a decrypted copy when you "print to PDF" after opening with the correct password. You can then upload the decrypted version.
HDFC changed their statement password to the first four letters of the customer's name followed by the DOB in DDMMYYYY format for some account types. Try: first 4 letters of your registered name (uppercase) + your date of birth. Example: RAJE15031988.
Yes — as long as you have the correct password. Corporate account statements often use the company's CIN or registered account number as the password.
Related guides: Convert PDF bank statement to Excel · HDFC Statement to Excel · ICICI Statement to Excel