PDF won't upload to your bank or customer portal

The client portal will not take your PDF: it is usually the encryption

The scenario repeats down to the details. The bank emails a statement, the file opens once you type the password, you upload it into an insurer's portal or a form on a government site, and you get a refusal. The file looks perfectly normal.

The reason is that you and the form are looking at two different files. You opened yours with a password, and the form cannot type one.

Two passwords that are easy to confuse

A PDF provides for two independent passwords, and the confusion between them accounts for most of the inexplicable refusals.

The first is what a bank puts on a statement. The content is encrypted, and without the password neither text nor images can be pulled out of the file. Any automated check answers such a file with a refusal.

The second turns up in documents that open without any question but refuse to be printed or to have their text copied. It does not stop anyone reading, but it does stop systems that need to extract text for verification: they honour the formal copy restriction.

Hence a practical tell. If the file opens on your machine with a double click and no password prompt, yet the portal still refuses, the document carries an owner password rather than an open one.

How to remove the protection

unlock-pdf removes both kinds, but it works differently for each.

For an open password you have to know the password and type it. The service does not guess it and cannot: encryption is encryption. The sender chose it, and the rule is usually stated in the same message that carried the file.

For an owner password the password field is left empty. Such a file technically opens with an empty password, and that is enough to lift the printing and copying restrictions. There is no separate mode for this: just upload the file and run the job, typing nothing.

There is also a second field, a fallback password. It exists for when you are not sure which of two passwords applies: the service tries the first and, failing that, the second. It saves a round trip when working through a batch of statements from different months.

When the password is right and the file still will not open

There is a separate class of refusals where the password is beside the point. Some corporate document systems encrypt files with schemes an ordinary PDF reader does not support: a non-standard security handler, an exotic version of the algorithm.

In that case the message differs in meaning: it speaks of unsupported encryption rather than of a wrong password. Trying more passwords is pointless, because the check never reaches the password.

There is one way out: ask the sender to issue the document normally. Sometimes opening the file in a program that does understand it and printing it back to PDF also works.

If the password is lost

There is no way around this one, and it is better to know that immediately than to lose an evening searching.

An open password is not a lock on a door, it is encryption of the content. The file physically consists of encrypted data, and without the key that data is a pile of bytes. Modern PDFs use AES-256, the same algorithm that protects banking channels. Brute force is meaningless here not in the sense of "slow" but in the sense of "longer than the equipment will exist".

So there is one route: obtain the document again from whoever issued it. A bank reissues a statement inside its own portal in a minute, and so do phone operators and insurers. Asking for a reissue is usually faster than digging the password out of old correspondence.

A separate case is when you know the password but forget which of your usual ones it is. That is what the tool's two fields are for: the main and fallback passwords are tried in turn within one run.

How to unlock and upload

1. Open the message the file arrived in and find the password rule. 2. Upload the document to unlock-pdf and enter the password. If the file opens without one, leave the field empty. 3. Download the decrypted file and confirm it opens with no prompt. 4. Check the weight: bank statements with scanned receipts get heavy, and removing the password did nothing to the form's limit. 5. Upload the file to the portal.

What survives in the file after the protection comes off

The decrypted document keeps everything else: the text layer, the bookmarks and the document properties, including the title and the author.

The properties are worth a separate thought. Bank statements regularly carry an internal system name there, a print job number, sometimes a customer identifier. If the file is going to a private individual rather than to an organisation, those fields deserve a look.

The page count and the content do not change: the tool only removes the encryption and rewrites nothing.

The other reasons a portal refuses

Once the password is off and the form still refuses, few causes remain.

Weight. Client portals keep tighter limits than email, and ten megabytes is more common there than twenty. Compression through compress-pdf settles most cases and shrinks scans noticeably.

One field for several documents. A form is often built for a single file, while you hold a certificate, a contract and an annex. Assemble them into one PDF with merge-pdf, in the order they will be read.

A photograph instead of a PDF. A picture of a document named `.pdf` does not become a PDF: the format is determined from the file's content. Assemble the shots into a real PDF with jpg-to-pdf.

A file that did not download completely. A document from an email or a cloud folder that never finished downloading starts out correct and breaks off halfway. Such a file is refused by the integrity check. Download it again, and if it is genuinely damaged, try repair-pdf.

A particular flavour of that trouble is a file opened straight from a mail app. Some apps display an attachment without saving it to disk in full, and picking that file in a form sends only what had loaded. Save the attachment to a folder, confirm it opens locally, and only then upload.

The check before uploading

Open the finished file and do two things.

Confirm it opens with no password prompt. That is exactly what the form is going to do.

Try selecting a line of text with the mouse. If it selects, the text layer is in place and text extraction is available to the system. If not, the document is an image, and some portals will not accept that.