Your bank emails a statement and your inbox prompts for a password. Your last few digits? Your date of birth? Some random thing the bank set? Password-locked PDFs are common but confusing. Here's the lay of the land.
What the password protects
PDFs can have two passwords: an open password (you can't even see the file without it) and a permissions password (you can read but not edit, copy, or print). Banks usually use open passwords tied to predictable data — last four digits of your account, postcode, date of birth — so you don't have to remember anything new. Read the email; the hint is usually in there.
When you set your own password
If you're sending sensitive info (medical records, contracts, payslips) over email, password-protect the PDF first. Use password-protect PDF in Flint, set a strong password, and send the password by a different channel (text, phone call) — never in the same email as the attachment. Same-email passwords give a false sense of security; anyone reading the email gets both halves.
When you've lost the password
If it's your own file and you've genuinely lost the password, unlock PDF can lift permissions locks. Open passwords are harder — if cryptographically strong, the file is effectively gone, and the only recovery is to ask the original sender for a fresh copy. Don't trust 'PDF password recovery' tools that promise to crack arbitrary files; most are scams or malware.
FAQ
Can I share my bank PDF without the password?
Re-save a copy without protection first. Open the file, enter the password, save a new copy without the lock, then share that. Never email the password and the file together.
How strong is PDF password protection?
Modern PDF encryption (AES-256) is genuinely strong if the password is. A weak password (your dog's name) is crackable in minutes; a long random password isn't. Use a password manager to generate and store them.
Why do banks use such guessable passwords?
Because the alternative — customers losing access and calling support — is worse. The password is just a thin layer of 'not the wrong person'. The actual security relies on you receiving the email in the first place.
Passwords are usually friction, not fortress. If you need to lift one on your own file, Flint's unlock tool handles permissions locks in seconds.