Your bank emails the statement, you open it, and it asks for a password you don't remember setting. Then any tool you try to use on it — Excel, a converter, your accountant's software — either refuses the file or reports it as damaged. This is one of the most common reasons a perfectly ordinary statement becomes a twenty-minute problem, and it's entirely fixable.
Scope note: this is about opening your own statement, for which the bank has given you a password rule. There's no legitimate technique for opening a document you don't have the password for, and this guide doesn't offer one.
First: which kind of protection is it?
PDFs support two different things that both get called "password protected," and they behave completely differently:
| User (open) password | Owner (permissions) password | |
|---|---|---|
| What it does | Encrypts the content | Restricts printing, copying, editing |
| Opening it | Prompts for a password before anything displays | Opens normally |
| Can tools read it? | No — not a single word without the password | Usually yes; most libraries can read the content |
The practical test takes one second: does the file ask for a password before showing you anything? If yes, it's a user password and must be unlocked before any tool can touch it. If it opens fine but a converter still complains, it's permission restrictions — and the fix in step 3 below clears those too.
Step 1 — Find the password
You didn't set it; the bank derived it from something they know about you, and they state the rule in the email that delivered the statement. Read that email first — it's the fastest route by far.
Common patterns across banks:
- Date of birth, usually
DDMMYYYYorDDMMYY— the most common by a distance - Last 4, 6 or 8 digits of your account or card number
- Customer / client number from your banking profile
- A combination — for example the first letters of your surname (sometimes capitalised, sometimes not) followed by your birth date
- Registered mobile number, or a national ID number in some countries
Two things that trip people up: case sensitivity (try both), and separators (01011990 rather than 01/01/1990). If the delivery email is long gone, the rule is normally documented in your online banking help pages, and support will tell you if not.
Worth knowing: you can usually avoid the whole thing next time by downloading statements directly from online banking rather than using the emailed copy. Portal downloads are frequently unprotected, since you already authenticated to get them.
Step 2 — Open it
Enter the password in any PDF viewer. If it's rejected, before assuming the password is wrong: check your keyboard layout, check caps lock, and make sure you're using the statement's own password rather than one from a different product with the same bank — card and current-account statements sometimes use different rules.
Step 3 — Save an unlocked copy
Once it's open, you want a copy without the protection, so you only do this once per file. Two routes that need no extra software:
Chrome or Edge (any operating system)
- Drag the PDF into a browser tab and enter the password
- Press Ctrl+P (or Cmd+P)
- Set the destination to Save as PDF and save
macOS Preview
- Open the PDF and enter the password
- File → Export as PDF… (Export, not Export as PDF with encryption options set)
- Save under a new name
The result is an ordinary PDF you can convert, email to your accountant, or archive. One caveat worth knowing: the browser print route re-renders the document, which usually preserves the text layer but occasionally flattens it into an image — in which case your statement becomes a scan, and needs OCR-based conversion rather than text extraction. macOS Preview's export generally preserves text better, so prefer it if you have a Mac.
If you have Acrobat
Acrobat Pro can remove security directly (Tools → Protect → Advanced Options → Remove Security) with the password. Cleanest result, but only worth it if you already have it.
A word on "unlock PDF" websites
Search results are full of free online PDF unlockers. Think carefully before uploading a bank statement to one: you'd be handing your full account number, balance and transaction history to an unknown operator with no stated retention policy, to solve a problem your own browser solves in three clicks. If a bank statement ends up on a random server, that's a lasting exposure for a momentary convenience.
Whatever tool you use for anything involving statements, know what happens to the file. For what it's worth: Statement Mill processes documents in memory and never writes them to disk — there's nothing to delete because nothing is stored, which is a stronger guarantee than a retention policy. Our security page spells it out.
Then convert it
With an unlocked copy, everything works normally. Upload it to convert to Excel, CSV, QuickBooks or Xero formats — the export is reconciled against the statement's own opening and closing balances, so you'll know nothing was lost in the unlocking round-trip, which is exactly the kind of thing worth verifying after a file has been through a print-to-PDF step.
And if a statement still won't convert after unlocking, it's worth checking whether the print step turned it into an image; scanned statements convert too, just by a different route.
Summary
- ☐ Check the delivery email for the password rule — it's stated there
- ☐ Try DOB as
DDMMYYYYfirst; mind case and separators - ☐ Open it, then save an unlocked copy via browser print or Preview export
- ☐ Don't upload statements to unknown "unlock PDF" sites
- ☐ Next month, download from online banking instead — usually no password at all
Convert the unlocked statement free — 3 pages with no signup, 20 with an account, no credit card and no trial timer.