Guides

How to convert a password-protected bank statement to Excel

Some banks send statements as password-protected PDFs, particularly when they arrive by email. It's a sensible precaution for the bank. It's an obstacle for anyone who needs the transactions in a spreadsheet, because most conversion tools either refuse the file or ask you to remove the protection first.

This guide covers what the protection is, how to work with it when you have the password, and how to avoid handing either the file or the password to a third party.

One rule first: everything here assumes you are entitled to open the statement and already know its password. If you don't know the password, ask the bank or the account holder. Don't use password-cracking tools on documents you're not authorised to open.

What the password is

A PDF can carry two kinds of password:

• An open password (sometimes called a user password). You can't view the document at all without it. This is what bank statements usually use.
• A permissions password (owner password). The document opens normally, but copying, printing or editing may be restricted.

Banks that protect statements often build the password from details the customer already knows, such as part of a date of birth, part of the account or card number, or part of the customer's name. The exact rule varies by bank. It's usually explained in the email that delivered the statement, or on the bank's website. Check there rather than guessing.

Method 1: open it, then remove protection by printing to PDF

If you have the password, you can make an unprotected copy.

1. Open the statement in a browser (Chrome, Edge, Firefox) or a PDF reader, and enter the password.
2. Choose Print.
3. Set the printer to Save as PDF (or Microsoft Print to PDF on Windows; on a Mac, use the PDF menu in the print dialog).
4. Save the new file.

The copy opens without a password and keeps the text layer, so you can then convert it with any method in the PDF bank statement to Excel guide.

Things to be aware of:

• If the document has a permissions password that blocks printing, this won't work. Bank statements rarely set that restriction, but some do.
• You now have an unprotected copy of a sensitive document. Store it with the same care as the original, and delete it when you're done.
• Some print-to-PDF drivers flatten text into images. Test the copy: if you can't select a word with your cursor, it's no longer text-based and conversion tools won't read it.

Method 2: remove the password in a PDF editor

Adobe Acrobat (the paid version) and several other PDF editors can remove security from a file you can open. In Acrobat, the setting is in the document's security or protection options: you open the file with the password and change the security method to "No Security". Other editors have equivalent settings. This produces a clean copy without the print step, with the same caveat about storing an unprotected file.

Method 3: Excel Power Query

Excel's Data → Get Data → From File → From PDF connector (available in Excel for Microsoft 365 on Windows) cannot reliably open password-protected PDFs. Remove the password first with Method 1 or 2, then import the unprotected copy.

Why not use an online unlock tool?

Online "unlock PDF" services ask you to upload the statement and type the password into their website. That sends both the document and the credential that protects it to a server you don't control. For your own budgeting statement that may be a risk you accept. For a client's statement, it may conflict with your confidentiality obligations or your firm's data-handling policy.

If you do use one, read its retention policy first. A tool that works entirely on your device avoids the question.

Where Rowsafe helps

Rowsafe opens password-protected statements directly, in your browser, without making an unprotected copy.

1. Open Rowsafe and drop the PDF in.
2. Rowsafe detects the protection and asks for the password.
3. Enter it. The PDF is decrypted in your browser's memory and the transactions appear in a preview grid.
4. Check the balance verification, fix any columns if needed, and export.

What that means in practice:

• The password stays on your device. It's used locally to open the file and isn't sent to us.
• The statement isn't uploaded. The PDF is read by JavaScript running on your computer. You can confirm in your browser's developer tools that no request carries your file.
• No unprotected copy is left on disk. You end up with the spreadsheet you need, not a second PDF to clean up.
• Every row is checked against the running balance, so you can see whether the conversion is complete.

Password-protected PDFs are supported on the free plan (3 statements a day, CSV export). Pro ($12/month) adds Excel (XLSX), QuickBooks (QBO), OFX, Xero CSV, JSON, unlimited statements and batch conversion. See pricing.

Limitations: Rowsafe needs the correct password; it doesn't bypass or recover passwords. It works on text-based PDFs; scanned statements are not supported yet. Unusual layouts may need a manual column fix in the preview.

Keeping things tidy afterwards

• Store the converted spreadsheet where you'd store the statement itself, with the same access controls.
• If you made an unprotected PDF copy, delete it once you no longer need it.
• If you're sharing results with a client or colleague, consider protecting the spreadsheet too. Excel supports file encryption (File → Info → Protect Workbook → Encrypt with Password).

FAQ

I entered the right password and the PDF still won't open. Check case sensitivity, and whether the bank's rule uses a specific date format (for example DDMMYYYY versus DDMMYY). If it still fails, the bank's support team can confirm the rule.

Can Rowsafe open a statement if I've forgotten the password? No. Rowsafe only opens files with the password you provide.

Does removing the password change the transactions? No. Printing to PDF or removing security only affects the protection. The text and numbers stay the same, as long as the copy remains text-based.

Is a password-protected PDF safe to email? It's safer than an unprotected one, but the protection is only as strong as the password. Passwords built from a date of birth are not hard to guess for someone who knows the account holder.