PDF Password Formats: Payslip, Form 16 and Tax Documents

You downloaded your Form 16 and it wants a password. Nobody told you what it is. The HR email doesn't say. You try your date of birth, your PAN, your employee ID, and none of them work.

This happens because there is no single password rule in Indian tax and payroll. Different documents come from different systems, and each one picked its own convention. Here is every format you are likely to hit, and what to do when the format doesn't work.

The short answer, by document

Note the two different PAN conventions. TRACES documents use the first five characters only, and those five characters are letters. Income tax portal documents use the full PAN in lowercase. Getting these two mixed up is the single most common reason a password fails.

Form 16 and Form 16A

Both come from TRACES, the TDS reconciliation portal, and both use the same rule: the first five characters of the PAN, followed by the date of birth in DDMMYYYY.

For PAN `ABCDE1234F` and a date of birth of 1 January 1990, that is `ABCDE01011990`.

Two things trip people up here.

Whose PAN and whose date of birth? For Form 16, it is yours, the employee. For Form 16A, it is the deductee's, which is usually also you. But if you are opening a Form 16A issued to a business or HUF, the "date of birth" is the date of incorporation or formation.

Case. The PAN portion is conventionally uppercase, since PAN itself is uppercase. Some readers report lowercase working too. If uppercase fails, try lowercase before assuming the password is wrong.

The part every other guide skips

The Form 16 password format is set by the deductor, not fixed by law.

The PAN-plus-DOB rule is what TRACES applies to the Part A file it generates. But your employer may hand you a merged Part A and Part B, or a file re-exported from their own payroll system, and at that point the password is whatever their software set it to.

Common employer variations:

• Employee ID + date of birth
• Date of birth alone, sometimes DDMMYYYY, sometimes DDMMYY
• PAN in full, uppercase
• First four characters of your name + date of birth
• No password at all on Part B

If the TRACES format fails on a Form 16 that came from your employer rather than from your own TRACES login, stop guessing. The format is documented somewhere your employer controls: the covering email, the HRMS download page, the payroll portal's help section, or the finance team. Ask them for the format rather than the password, because they usually cannot see your password either, only the rule that generated it.

Payslips

There is no standard here at all, and any article that gives you one is guessing.

Payslip PDFs are generated by whatever payroll product your employer runs, and each one ships its own default which the employer can override. In practice the formats that show up most often are:

• Employee ID
• Date of birth as DDMMYYYY or DDMMYY
• PAN, full, either case
• Employee ID + date of birth joined together
• First name in lowercase + last four digits of employee ID

If you need to open payslips regularly, it is worth asking HR once and writing the answer down. If you only need it once, most payroll portals let you view the payslip in the browser without the download, which sidesteps the password entirely.

Income tax portal documents

These follow a different convention from TRACES: full PAN in lowercase, then date of birth in DDMMYYYY.

For PAN `ABCDE1234F` and 1 January 1990, that is `abcde1234f01011990`.

This covers the intimation under section 143(1) you receive after your return is processed, and generally AIS and TIS downloads. Note the lowercase. The income tax portal is strict about it in a way TRACES is not.

Form 26AS is the odd one out. When it is delivered as a PDF, the password is usually just the date of birth as DDMMYYYY, with no PAN at all. If you view 26AS inside the portal or export it as HTML or text, there is no password.

When nothing works

Work through these in order.

Check the date format. DDMMYYYY means 1 January 1990 is `01011990`, not `1011990` and not `19900101`. Leading zeros matter.

Check which date of birth the system has. The password uses the date of birth as recorded against your PAN, not the one you believe is correct. If your PAN record has a typo, the password uses the typo. You can see the date of birth on record by logging into the income tax portal and opening your profile.

Check you have the right PAN. On a Form 16A this is easy to get wrong, because the file may be issued against a business PAN rather than yours.

Check the document actually belongs to you. A Form 16 forwarded by a colleague will not open with your PAN, for obvious reasons.

Stop after five attempts on official portals. Repeated failures on the income tax portal will not lock the PDF, but they will waste your afternoon. The PDF password is set at generation time and cannot be reset. If the format genuinely does not work, re-download the document; a fresh generation sometimes carries a corrected password when your profile data has since been fixed.

Removing the password

Once a PDF is open, you can save an unprotected copy. In most browsers, open the PDF, print it, and choose "Save as PDF" as the destination. The re-saved file has no password.

Do this only for your own records, and think about where the unprotected copy ends up. A Form 16 contains your PAN, your full salary and your employer's TAN. That is enough for a convincing impersonation attempt. An unprotected copy sitting in a shared Downloads folder or an email thread is a real exposure, and the password was there for a reason.