Strip the password from bank statements, payslips, and reports you already have access to. Enter the password, the tool decrypts the PDF in your browser, and saves a clean unencrypted copy ready for data extraction or archiving.
01 — What you create
Provide the password you already know. The tool decrypts the PDF in your browser using pdfjs, then saves a fresh copy with the security removed — ready for data extraction, archive, or further editing.
HDFC bank statement.pdf
May 2026 · 14 pages
Was: encrypted
Now: open
SOURCE
Locked
PASSWORD
Accepted
OUTPUT
Unlocked
SECURITY
Output is unencrypted, ready to feed into the Bank Statement → Excel extractor or archive in plain form.
Scanned invoices, multi-page batches, multi-currency stacks, and direct push into your accounting system. Free for 30 days, no card required.
Try Premium FreeFree 30 days · no credit card · cancel anytime
02 — How it works
Banks email statements password-protected so a stray inbox forward doesn’t leak account numbers. That’s great until you need to extract transactions, run them through the PDF → Excel tool, or just archive the file without re-typing the password every six months. Strip the security on the copy you keep; the original email stays locked.
Drag a password-protected bank statement, payslip, or report into the picker. The tool detects whether the file needs a password in the browser — nothing uploads.
Type the password you already know. The tool re-probes after each keystroke so you find out immediately whether the password is right (no need to wait until "Unlock").
Click Unlock. The PDF decrypts locally, every page rasterises, and a fresh PDF saves with no password and no permission restrictions.
03 — Built for owned PDFs
The tool re-probes the PDF as you type — green check the moment the password is right, red warning the moment it isn’t. Saves clicking Unlock to find out.
Most banks use combos like PAN-number + date-of-birth (DDMM) or account-number + name. Common formats fail with a clear error pointing you to check the bank’s email template.
If the PDF doesn’t actually have a password set (some banks email unprotected statements), the tool skips the password prompt and goes straight to a clean re-emit.
No-print, no-copy, no-modify flags all get cleared along with the password. The output is fully open — print it, copy text, edit, sign — same as any unencrypted PDF.
The tool requires you to supply the password — it doesn’t crack or guess. Built for unlocking your own statements, not bypassing security on someone else’s.
Source PDF, password, and unlocked output never touch the network. Decryption runs locally via pdfjs. Nothing is logged or transmitted, ever.
Bulk OCR, batch invoicing, multi-party e-signing, redaction, audit logs — pdfFiller picks up where Sonchoy ends. Free for 30 days, no credit card.
Run 100+ invoices, statements, or conversions in one go.
Turn paper invoices into searchable, exportable data.
Multi-party signatures with full audit trails.
Mask sensitive ledger lines before sending to auditors.
04 — Common questions
No. This is a decrypt tool, not a cracker — you must supply the correct password yourself. The tool will tell you if the password is wrong, but it has no brute-force or dictionary mode. If you’ve genuinely lost the password to your own PDF, you’ll need a specialist tool (and patience), or contact the original issuer for a re-send.
Bank passwords usually follow one of: the first 4 letters of the account holder’s name + last 4 of account number; PAN number (uppercase, no spaces); customer ID + date of birth (DDMM); or registered mobile number. Check the bank’s email that delivered the statement — they almost always describe the format somewhere in the body or footnote.
Visually yes, but the text isn’t selectable in the output — every page is rasterised to a JPEG (same approach as the Merge / Compress tools) and then placed on a fresh page. The numbers, transactions, dates all look identical; what you lose is the underlying text layer. For text-searchable output, OCR the unlocked PDF after.
Preserving the original requires a different PDF library that can rewrite encrypted streams directly — adding ~400 KB to the page bundle. Rasterising uses the same toolchain as every other PDF utility on Sonchoy and works uniformly across every PDF the browser can read, including ones with unusual fonts, encryption variants, or content streams. The trade-off is text-layer loss.
It depends on jurisdiction and on whether you have the right to access the underlying content. For your own bank statements (delivered to you, with the password you were given), unlocking is normal. For documents shared with you with explicit restrictions on copying or extraction, stripping those restrictions may violate the implicit agreement under which you received them. When in doubt, ask the sender.
Never. The PDF, the password, and the unlocked output all stay on your machine. The decryption is performed by pdfjs (a Mozilla project) running in your browser tab; the password lives in JavaScript memory only and is discarded the moment the tab closes. No upload, no third-party API, no logging.
05 — Related tools