Bank statement PDF password — every bank's format, and how to remove it
Almost every Indian bank emails statements as encrypted PDFs, and almost every portal that asks for a statement — home-loan underwriting, visa applications, GST and ITR filings, rental verification, broker KYC — rejects an encrypted upload. The password itself is never secret: banks derive it from your name and date of birth and print the rule in the covering email. This hub lists the documented format for the four banks most people search for, then hands you a browser-only way to strip the password so the file is portable. Nothing is uploaded, which matters more here than anywhere else on CrispPDF: a statement exposes every transaction you have made.
- HDFC / Axis / ICICI: first 4 letters of name in CAPS + DDMM of birth
- SBI e-statement: date of birth as DDMMYYYY (net-banking downloads use your profile password)
- Credit-card statements often use DDMMYYYY or DDMMYY instead
- Unlock, trim to the required months, and compress — all in your browser
Next steps & related guides
// FAQ
Frequently asked
+How do I remove the password from a bank statement PDF?
Open the statement with the bank's documented password (name + DDMM, or DDMMYYYY), then drop it into CrispPDF's Unlock PDF tool and download the result. The downloaded copy opens with no password. The whole process happens in your browser.
+What is the general format of an Indian bank statement password?
Two formats cover most banks: the first four letters of your registered name in capitals followed by your date of birth as DDMM (HDFC, Axis, ICICI, Kotak), or your date of birth as DDMMYYYY (SBI e-statements, many credit cards).
+Can I open a password-protected statement without the password?
No, and you should distrust any site that claims otherwise. You need the password; the formats above reconstruct it from details you already know.
+Why do banks and portals disagree about password protection?
Banks encrypt statements so an intercepted email is useless. Upload portals reject encrypted PDFs because their parsers cannot read them. Removing the password locally satisfies both — the emailed copy stays encrypted, and only the copy you upload is open.
+My loan portal caps the upload at 500 KB. What do I do?
Unlock the statement, keep only the required months with Extract PDF Pages, then run Compress PDF to 500 KB. All three tools run in the browser.
+Do you ever see my statement or my netbanking login?
Never. CrispPDF has no upload step for this workflow and never asks for bank credentials. If a website asks for your netbanking login to 'fetch' a statement, leave it.