How to Remove or Add a Password on a PDF
Password-protected PDFs are everywhere in India: bank and credit card statements, e-Aadhaar, salary slips, insurance policies, Form 16 from some employers. Protection is a good idea for documents sent by email, but it becomes a nuisance when you need to upload the statement to a loan portal that rejects encrypted files, merge several statements, or open the file repeatedly. This guide explains how PDF passwords work, how to remove one you know, and how to add one properly.
Two kinds of PDF password
A PDF can carry two different passwords:
- Open password (also called user password or document open password). Without it, the file cannot be opened at all. The content is encrypted with it.
- Permissions password (owner password). The file opens freely, but restrictions are set on printing, copying text, editing or extracting pages. The password is needed to change those restrictions.
Permission restrictions depend on the PDF viewer respecting them. Most mainstream viewers do, but the content itself is readable by anyone who can open the file. Treat permissions as a request, not as security. Only an open password with modern encryption actually protects content.
Bank statement and e-document passwords
Banks and other institutions usually set the open password from details you already know, so you can open the file without receiving a separate password. Common patterns include:
- Part of your name combined with your date or year of birth.
- Your date of birth in a format like DDMMYYYY.
- Your customer ID, part of your PAN, or the last digits of your mobile or account number.
Formats differ between institutions and change from time to time, and getting upper or lower case wrong is a common reason a password fails. The email that brings the statement normally explains the format, so check it there. e-Aadhaar downloaded from UIDAI uses a documented format too, explained on the download page.
Is a protected PDF really safe?
An open password with modern encryption is strong protection for the file itself, as long as the password is not guessable. A statement protected with your date of birth is only as secret as your date of birth, which many people know. That is a reasonable trade-off for a bank sending millions of statements, but it is not something to copy when you protect your own files.
Removing a password you know
If you can open the file, you can save an unprotected copy.
- Open Unlock PDF and add the file.
- Enter the password in Password (if any). If the PDF has only permission restrictions and opens without a password, leave it empty.
- Click Unlock and download the copy.
The new file opens without a password and has no restrictions. Keep it somewhere private: you have removed its protection.
Alternatively, in most PDF viewers, including Chrome's built-in viewer, you can open the protected file with its password and use Print → "Save as PDF". That makes an unprotected copy, though it may lose links, bookmarks and form fields.
Unlocking is often needed before other tasks. Merging, compressing, signing and many portals cannot work with encrypted files, so unlock first and then use, for example, Merge PDF to combine six months of statements into one file for a loan application.
What no tool can (or should) do
If you do not know the open password, a legitimate tool cannot simply remove it. With modern AES encryption, the content is mathematically scrambled, and the only way in is the password. "Password recovery" programs try huge numbers of guesses, which works only for short or predictable passwords, and using them on documents that are not yours is illegal in many situations.
If you have lost the password for your own document:
- Check the email or SMS the document came with for the password format.
- Download a fresh copy from net banking or the issuing portal.
- Ask the sender to resend it unprotected, or with a password shared another way.
Adding a password before you send a file
Protect a PDF when you email or share sensitive documents: ID copies, financial statements, medical reports, contracts.
- Open Protect PDF and add the file.
- Enter a password and confirm it.
- Download the protected file.
The password you set is required to open the file. File Studio's Protect also sets restrictions: high-resolution printing and form filling stay allowed; copying content and modifying the document are disabled in viewers that respect permissions.
Choosing the password
- Use at least 12 characters. A short phrase of three or four unrelated words is easy to type and hard to guess.
- Avoid your date of birth, mobile number or name. Those are the first things anyone guesses, and they are exactly the pattern used by bank statements, so they offer little real protection.
- Use a different password for each recipient or document if the content is very sensitive.
Share the password separately
Sending the password in the same email as the attachment defeats the purpose: anyone who gets into the mailbox gets both. Send the file by email and the password by SMS, a phone call, or a different messaging app. For ongoing exchanges, agree on a password once by phone.
Common problems
- "Wrong password". Check capitalisation, date format (DDMMYYYY versus DDMMYY), and whether your name is spelled as on the bank account. Copy-pasting can add a trailing space.
- Portal says the file is corrupt or cannot be read. Most upload systems cannot open encrypted PDFs. Unlock it first.
- Unlocked file still asks for a password in another app. You may have opened the original rather than the downloaded copy. Check the file name.
- Compressed or merged file lost the protection. Expected. Add the password at the very end with Protect, after merging or compressing.
- The recipient cannot open a protected file on their phone. Most phone viewers support passwords; ask them to use an up-to-date PDF reader.
Good habits for protected documents
- Keep the original protected statement as it came from the bank. Some lenders and embassies prefer the original file, and it shows it was not altered.
- Store unlocked copies in one folder and delete them once the application is done.
- On shared or office computers, do not leave unlocked financial PDFs in Downloads.
- If a portal accepts protected files and asks for the password separately, that is fine too; you do not need to unlock.
Encryption strength depends on the tool. Modern tools use AES encryption; very old PDFs or tools may use weaker RC4-based encryption, which is easier to break. For genuinely sensitive material, a long password matters more than anything else you control.
Privacy
To unlock a file a tool must see your password and your unprotected document. Unlock and Protect in File Studio run in your browser, so neither the file nor the password is sent to a server. Whatever tool you use, think twice before typing the password of a bank statement into a website that uploads the file.