Banks often lock statement PDFs using predictable customer details such as date of birth, account number fragments, PAN, phone number or postcode. This reference explains common password formats and what to try before converting the unlocked PDF to Excel or CSV.
Last updated 2026-06-12
Almost every PDF conversion failure for paying users starts with the wrong password. The PDF opens to a password prompt, three wrong tries later the bank locks the file, and there's no recovery. Knowing the format up front saves the lockout.
| Bank | Password format |
|---|---|
| HDFC Bank (savings/salary) | First 4 letters of name (UPPER) + DDMM of birth, e.g. RAJE0512 |
| HDFC Credit Card | DDMM of birth + first 4 letters of name (UPPER), e.g. 0512RAJE |
| ICICI Bank | First 4 letters of name (lower) + DDMM of birth, e.g. raje0512 |
| Axis Bank | First 4 letters of name (UPPER) + DDMM of birth |
| SBI | DDMMYY of birth (e.g. 051298) |
| SBI Card | DDMM of birth + last 4 of card number |
| Kotak Mahindra | Customer Relationship Number (CRN) |
| IndusInd | Customer ID |
| IDFC First | PAN in lowercase |
| Yes Bank | DDMMYYYY of birth |
| Bank of Baroda | First 4 letters of name (UPPER) + DDMM of birth |
| PNB | Customer ID |
| Canara Bank | DDMMYYYY of birth |
| Federal Bank | Customer ID |
| RBL Bank | DDMMYYYY of birth |
| Standard Chartered IN | DDMMYYYY of birth |
| American Express IN | DDMM of birth + last 5 of card |
| Citi (India) | Date of birth DDMMYYYY |
| Chase (US) | Statements are typically unprotected |
| Bank of America (US) | Statements are typically unprotected |
| Wells Fargo | Typically unprotected; secure portal download |
| Capital One | Typically unprotected |
| Barclays (UK) | Membership number or DOB DDMMYY depending on document |
| HSBC (UK) | Date of birth DDMMYYYY for some statement types |
| NatWest | Typically unprotected when downloaded from online banking |
| Lloyds | Typically unprotected |
| Santander UK | Date of birth DDMMYY for some statement types |
| ANZ (AU/NZ) | Typically unprotected from online banking |
| CommBank | Typically unprotected |
| Westpac | Typically unprotected |
| NAB | Typically unprotected |
| Emirates NBD | Date of birth DDMMYYYY |
| ADCB | Account number or DOB depending on statement |
| Mashreq | Date of birth DDMMYYYY |
| RAKBANK | Date of birth DDMMYYYY |
| Maybank | IC number / passport number |
| CIMB | IC number (Malaysia) |
| DBS / POSB (SG) | NRIC + DOB DDMM in some formats |
| OCBC | Last 4 of NRIC + DOB DDMM |
| UOB | Last 4 of NRIC + DOB DDMM |
Banks sometimes change formats by statement type (savings vs salary vs credit card) and occasionally by region. Try these in order:
You enter the password once when prompted. It's used to unlock the PDF in memory, then immediately discarded — never stored, never logged, never re-used. The file itself is deleted the moment conversion finishes. Full posture on the security and privacy page.
HDFC alone accounts for a large share of password questions because the format flips between savings and credit card statements. We wrote a dedicated post: HDFC bank statement password: how to open & convert.
Credit card PDFs often use a different formula than the same bank's current account statements (DDMM + last-4-of-card is common). If you're converting a credit card statement, read credit card statement PDF to Excel for the column layout you should expect once it's unlocked.
ClearlyLedger asks for the password once and unlocks the PDF in memory. No file, no password is ever stored.
Loading interactive converter… Try ClearlyLedger free