Blog

What is the password for my bank statement or Aadhaar PDF?

The published password formats for e-Aadhaar, HDFC, SBI, ICICI, Axis and Federal Bank statements, Form 16, 26AS and demat CAS, each checked against the issuer.

By Harish27 September 20264 min read

The password for a bank statement, e-Aadhaar or tax form PDF is almost always built from details the issuer already holds about you: part of your name, your date of birth, your PAN or a customer number. Each issuer publishes its own format. The table below gives the ones we could confirm on the issuer’s own website, with an example for each, and the rules that trip most people up.

If your issuer is not in the table, look at the email the statement came in. The format is nearly always written there, often in small print at the bottom.

Password formats, checked against the issuer

Every row here is stated on the issuer’s own site, which is linked in the further reading at the end. Formats do change, so if a row does not work, the covering email is the better source.

Document	Password format	Example
e-Aadhaar (UIDAI)	First 4 letters of your name in CAPITALS, then year of birth	SURESH KUMAR, born 1990: `SURE1990`
HDFC Bank account statement	Your numeric Customer ID, the same as your NetBanking user ID	`12345678`
SBI e-statement requested by SMS	The 4 digit code you chose in the SMS	whatever you sent
ICICI Bank credit card statement	First 4 letters of the name on the card in lowercase, then date and month of birth	RAHUL, born 5 August: `rahu0508`
Axis Bank credit card statement	First 4 letters of your name in CAPITALS, then 4 digits of your date of birth	RAHUL, born 5 August: `RAHU0508`
Federal Bank statement (FedMobile)	First 4 letters of your name in CAPITALS, then date and month of birth	Anu Thomas K, born 10 September: `ANUT1009`
Form 26AS (TRACES)	Date of birth as per PAN, DDMMYYYY	born 1 February 1980: `01021980`
Form 16 and 16A (TRACES)	The deductor’s TAN in capitals	`AAAA11111A`
Form 16B, 16C, 16D (TRACES)	Buyer’s or tenant’s date of birth, DDMMYYYY	`01021980`
Demat CAS from CDSL or NSDL	PAN of the first or sole holder in CAPITALS	`ABCDE1234F`
Mutual fund CAS from CAMS or KFintech	Whatever password you set when you requested it	your own

A few of these need a second look.

e-Aadhaar keeps punctuation but not spaces. UIDAI’s own examples: SAI KUMAR becomes SAIK1990, because the space is skipped. P. KUMAR becomes P.KU1990, because the full stop is part of the name as printed. A name shorter than four letters is used whole, so RIA becomes RIA1990.

Axis Bank does not say which four digits. Its page says four digits of the date of birth. Day then month, DDMM, is the usual reading and matches every other bank in the table, but try MMDD if that fails. Axis also accepts the same four letters followed by your nine digit Customer ID.

ICICI’s own pages disagree with each other. The credit card FAQ gives the name-and-birthday format above. A separate ICICI article says card statements use the last four digits of the card number. If one fails, try the other.

Form 16 uses your employer’s details, not yours. The TAN belongs to whoever deducted the tax. Many employers also send Form 16 through their own payroll software, with a different password, so check the covering email first.

Businesses use the date of incorporation wherever an individual would use a date of birth. Federal Bank says so explicitly, and it is the common rule.

The rules that cause most failures

When a password in the right format still does not work, it is usually one of these.

Case. Aadhaar, Axis, Federal Bank and demat CAS want capitals. ICICI wants lowercase. A PDF password is case sensitive, so RAHU0508 and rahu0508 are different passwords.
Leading zeros. The 5th of August is 0508, never 58.
Which name. It is the name as printed on the card, the statement or the Aadhaar, including an initial if that comes first. Not the name you use day to day.
No separators. Dates are written with no slashes, dashes or spaces.
A space you cannot see. If you copied the password out of an email, a trailing space often comes with it, and it counts as a character.
Joint accounts use the first holder’s details.

Banks we could not confirm

For some of the most searched banks, the format circulating online does not appear anywhere on the bank’s own website, and the unofficial sources disagree with each other. We have left them out of the table rather than repeat a guess.

SBI statements sent by email or downloaded from YONO. SBI documents only the SMS route above, where you choose the code yourself. Unofficial sources give several different formats for the rest.
SBI Card, HDFC credit cards, Bank of Baroda, PNB and Kotak. Each has two or three competing versions online. The statement email is the only reliable source.
Paytm and PhonePe statements. Paytm’s own help says the format is “as specified by Paytm in the email”. PhonePe publishes no format on its website.

If you find the format stated on one of these banks’ own sites, tell us and we will add it.

Type it once, not every month

A locked statement asks for its password every time you open it, and it cannot be searched or read by most other software. Accounting tools, tax software and AI tools often cannot read an encrypted file at all, which is usually when people start searching for how to remove the password.

Our unlock tool takes the password once and gives you back the same statement without it. Same pages, same selectable text, same layout. It is not a photocopy of the statement, and the numbers stay copyable, which matters if you are pasting them into a spreadsheet.

It runs entirely in your browser. A statement and its password are the two halves of something worth stealing, so neither is uploaded anywhere. Do keep the unlocked copy somewhere you would be comfortable keeping the statement itself, since anyone who has it can now read it without a password.

There is more on what the password does and does not protect in how PDF passwords work. And given how guessable a birthday is, is PDF password protection secure is worth a read before you rely on a statement lock for anything else.