Skip to tool
Ledger

Private · on this device

Open a password-locked statement

Some banks email a PDF that opens only with a password. Type that password here. PDF.js uses it in this tab to read the text layer, then the same extract as the home tool writes Excel or CSV. The password is not put in the URL and is not written to localStorage. We do not download an unlocked PDF — that would be a different product.

Use the password your bank set when it exported the statement — often a customer number or a date of birth in the format they told you. If you no longer know it, only the bank can reset it. We cannot.

  • Password stays in this tab
  • No unlocked.pdf
  • Same Excel / CSV

1

Drop the locked PDF

The file your bank emailed with a password on open.

2

Type the password here

In this tab only. Not the URL. Not localStorage.

3

Download Excel

Same table as the home tool. No unlocked.pdf download.

Why this page exists

Many banks attach a password to the statement PDF they email. The file is still a real PDF with a text layer — PDF.js can read it — but Mozilla’s library throws a PasswordException if you call getDocument without that string. On the home tool Ledger used to stop there: “Unlock it in your bank app and drop it again.” That sent people away from a conversion they could have finished in this tab. This page is that conversion with the password typed next to the drop zone.

The password is a React state value on this screen. It is not written to localStorage, sessionStorage, cookies, or the address bar. After a successful extract the field is cleared. Reset clears it. Closing the tab clears it. We do not log it. We do not email it. There is no “remember this password” checkbox, because remembering it would be a vault, and Ledger is not a vault.

What this is not

This is not a PDF unlocker. We do not save an unprotected copy of your statement for download. A product that emitted “unlocked.pdf” would be a different threat model: it would give you a file that anyone with the download folder could open. Ledger’s product on this page is the same as on the home page — a table, then Excel or CSV. The original locked PDF stays the original locked PDF on your disk.

It is also not Folio, which merges and splits PDFs you already have, and not a cracker for files you do not own. Type the password the bank already told you. If the export used your date of birth in ddmmyyyy, that is the string. If you forgot it, only the bank can issue a new file. We cannot guess it, and we will not run a password list against your statement.

Same extract, same limits

Once PDF.js has the document, the rest of the pipeline is unchanged: glyphs clustered into rows, columns scored as dates and amounts, preview table, remap, Excel via SheetJS, CSV with a UTF-8 BOM. Scans still fail. Files over 30 MB still fail. Multi-year dumps still read a cap of pages. Parentheses-as-negative still exists. Ads still do not sit on Extract or Download. LIVE ads are off until Google marks the site Ready.

If you dropped an unlocked statement here by mistake, that is fine — leave the password field empty and you will be asked to type one, or go back to the home tool which does not show a password field on purpose. The home drop zone stays a drop zone. People converting an ordinary emailed PDF should not have to ignore a password box.

Home tool · How it works · FAQ · Privacy