A secured PDF opens normally but carries permission flags that tell your reader to refuse copying, editing or printing. Getting a secured PDF to Excel is therefore a question of permission, not technique. The clean route is a fresh copy without the copy restriction, requested from whoever issued the file, which then converts like any other digital statement.
What does a secured PDF actually restrict?
A secured PDF restricts actions, not reading. The file stores a short list of permission flags, and each flag allows or blocks one kind of action, such as printing, changing the document, or extracting its text. A reader that respects the flags greys out the matching menu items, so you can see every number but cannot select it.
The flags are defined in the PDF format itself. The qpdf documentation on PDF encryption lists them as separate bits: printing at low resolution, printing at full resolution, modifying the document, extracting text and graphics, adding annotations and filling form fields, and assembling the document by inserting, rotating or deleting pages. A file can switch any of them off on its own.
The table below shows what each permission means for someone who wants the numbers in a spreadsheet.
| Permission | What switching it off blocks | Effect on getting the data into Excel |
|---|---|---|
| Extract text and graphics | Selecting and copying text, and export tools that read text | The main blocker: copy and paste fails, and many converters stop |
| Print (low or full resolution) | Printing, including printing to a new PDF | Removes one common workaround |
| Modify the document | Editing, adding pages, saving changes | Little effect on conversion itself |
| Annotate and fill forms | Comments, highlights and form entries | No effect on the transactions |
| Assemble the document | Rotating, inserting or deleting pages | Stops you fixing sideways pages inside the file |
Two rows in that table matter most. The extraction flag is the one that makes a statement feel locked when you try to copy it. The assembly flag catches people later. If a page is printed sideways, you may not be able to rotate it for good inside the file, and fixing sideways pages before conversion assumes you can.
One permission cannot be switched off any more. The same qpdf page notes that the current specification no longer lets a file restrict extraction for accessibility, so screen readers are meant to keep working on a secured file.
A secured PDF's open password versus its permissions password
A secured PDF can carry two different passwords. The open password, also called the user password, is needed to see the file at all. The permissions password, also called the owner password, is needed only to change or lift the restrictions. A file that opens without a prompt but refuses to copy has a permissions password and no open password.
That difference explains why a statement can open on a double-click, ask for nothing, and still grey out Copy or paste empty. The file is not broken: it was saved with permission flags and an owner password, and your reader is doing what the flags say. To confirm, open the document properties window in your reader and look at its security section, which lists for each action whether it is allowed.
How the two passwords differ, how to tell them apart and how to remove protection on your own file are covered in open versus permissions passwords on a protected PDF. If extraction still shows as not allowed after you enter an open password, the permissions lock still stands.
Why converters treat a secured PDF differently
Converters treat a secured PDF differently because the permission flags are a request, not a wall. The file's content is still readable once it opens. Whether a tool stops depends on whether its author chose to honour the extraction flag, so one converter refuses the file while another reads it without complaint.
The qpdf documentation is blunt about this. It says the restrictions on a PDF are enforced solely by the software, and that any open source reader could be modified to ignore them. The encryption protects the file from someone who lacks the open password. It does not stop software that has opened the file from reading the text.
This has three practical results:
- Excel's own import may refuse. Tools built by large software vendors tend to respect the flags and report that the document is protected.
- Some converters read it anyway. That does not make the conversion permitted. It only means the tool ignored the flag.
- Print-based workarounds depend on the print flag. If printing is allowed, printing to a new PDF produces a file with no restrictions. If printing is blocked, that route is gone too.
So when two tools give you two different answers on the same statement, neither is broken. They made different choices about the same flag. The question to settle is not which tool can get past it, but whether you should.
Is it fine to strip security from a secured PDF?
Stripping security from a secured PDF is fine only when you have the right to the content and the sender did not mean to stop you. Your own bank statement, locked by a default setting, is a strong case. A report someone shared with copying switched off on purpose is not. When in doubt, ask rather than remove.
Think about why the lock is there. A bank that sets permission flags on every statement is usually protecting the document's integrity, so that a statement cannot be edited and passed off as genuine. It is not trying to stop you from reading your own transactions, and many banks offer the same data as a CSV or spreadsheet download for that very reason. A consultant who sends a pricing model with copying blocked is making a different point: they do not want the numbers reused.
Some situations call for leaving the file alone:
- The file belongs to someone else. A statement a client sent for a loan review, or a supplier's report, came with terms. A permissions lock is a clear sign of them.
- You need the original as evidence. If the statement might back up a tax position, a dispute or an application, keep the issued file untouched. A copy with security removed is no longer the document the bank produced.
- Your workplace has rules. Many firms treat removing PDF security as a policy breach, whatever the file.
- There is a cleaner source. If the bank can give you a CSV export, removing a lock from the PDF is extra work for a worse result.
Where you do have the right, the honest route still beats a cracking tool. Downloaded "password remover" programs are a common way to hand a private financial document to an unknown service, and some of them do not delete what you upload.
Asking for an unrestricted copy of a secured PDF statement
An unrestricted copy is a version of the same statement saved without the extraction lock. For your own accounts you can usually get one yourself from online banking. For a file someone else sent, ask the sender for a copy with copying allowed, or for the data in CSV form, and say what you need it for.
Start with the source that issued the statement. Many bank portals offer the statement as a PDF and the transactions as a separate download, and the separate download is often the faster path to a spreadsheet. Card issuers behave the same way. If the file you have is a card statement, converting a credit card statement to Excel covers how card layouts differ from checking layouts once you have a file that converts.
Follow these steps when you have to ask another person or an institution:
- Name the document precisely. Give the account, the statement period and the file name you received.
- Say what is blocked. "Text copying is not allowed in the file properties" is clearer than "the PDF is locked".
- Say what you need. A copy with copying allowed, or a CSV or spreadsheet of the same transactions.
- Say why, briefly. Reconciliation, bookkeeping or a tax return are ordinary reasons and settle most requests.
- Offer the easy option. Many senders find it simpler to export a CSV than to resave a PDF.
Here is an example message. The names and dates are invented for illustration.
Hello, I received the March 2026 statement for the business checking account ending 2210 as Statement_2026-03.pdf. The file's security settings do not allow text copying, so I cannot move the transactions into our bookkeeping spreadsheet. Could you send a copy with copying allowed, or the same transactions as a CSV file? Thank you.
A short, specific request like this tends to get a fast answer, because the person on the other end knows exactly which export to run.
Checking the unrestricted statement copy before conversion
An unrestricted statement copy should be checked before you convert it, because a resaved file can change in ways that matter. Confirm the security section now allows text copying, that every page is present, and that the text is real text rather than a picture of it. Those three checks take two minutes and save a failed conversion.
Work through the new file in this order:
- Open the security section again. Text copying, or content extraction, should now show as allowed.
- Select a line of transactions. If the cursor highlights words, the text survived. If it draws a box around the whole page, the copy was printed to images and will need OCR.
- Search for a known amount. Pick one amount from the statement and search for it. A hit confirms the numbers are stored as text.
- Count the pages. Compare with the original. Resaving occasionally drops a summary page or the last page of transactions.
- Check page orientation. A copy made by printing can come out with wide pages turned sideways.
Wide statements deserve a second look at step five. Card statements and business statements with many columns are sometimes laid out in landscape, and a printed copy can squeeze or wrap them. Keeping wide landscape tables intact in Excel explains how to keep every column when the page is wider than it is tall.
Once the copy passes these checks, it is an ordinary digital statement. FastBankConvert is built to read a statement like that and put the date, description, amount and balance of each transaction in its own column, and it tells you before you download if the balances do not add up. You can get started with FastBankConvert and be told when trial conversions open.