CAS PDF password: the pattern, by registrar, and what to do when it fails
Every CAS arrives locked. That's expected — the file contains your complete mutual fund holdings. Here's the general pattern each registrar uses, and a checklist for the specific moment the password you're sure is correct still doesn't open the file.
Why it's locked in the first place
A CAS lists every mutual fund folio tied to your PAN, across every fund house, along with the full transaction history behind each one. That's sent by email as a matter of routine, so CAMS, KFintech, and the joint MF Central portal all password-protect the PDF itself rather than relying on the inbox being secure — the file is locked independent of whatever protection your email provider offers.
The general pattern, by registrar
Across CAMS, KFintech, and MF Central, the password almost always resolves to some combination of two things you already know — your PAN and your date of birth — rather than anything you need to set up in advance. Commonly, that's the first few characters of your PAN in capital letters, followed by your date of birth in DDMMYYYY format, with no spaces or slashes. But the exact combination, character count, and case sensitivity vary by portal and, on occasion, change over time.
Typical shape: [first 4 letters of PAN, uppercase] + [DDMMYYYY]
Treat that as a starting guess, not a guarantee. The email or download page delivering your specific statement always states the exact rule for that request — that instruction is the authoritative one, not a fixed formula remembered from a previous statement or a different registrar.
Troubleshooting a failed attempt
Before requesting a fresh statement, work through these in order:
- Confirm the case. Most formats expect the PAN portion in uppercase — a lowercase entry is the single most common reason a correct password gets rejected.
- Re-check the date format. Try DDMMYYYY without separators first; if that fails, some portals expect a two-digit year or a different field order — the instructions in the delivery email will say which.
- Confirm whose PAN and date of birth apply. If the CAS was requested against a joint holding or a family member's folios, the password is built from the primary/first holder's details, not necessarily the person who made the request.
- Make sure you're opening the actual attachment, not a preview generated by your email client or phone's PDF viewer — some strip or mishandle the password prompt.
- Request a fresh statement if none of the above works. Statement-generation requests occasionally expire, and a new request resets whatever the current rule is for that portal.
Once it's open
Keep the password handy rather than discarding it once the PDF opens — you'll need it again anywhere the file itself gets uploaded, including into Earmark's CAS import. Earmark discards the original file after parsing, so re-uploading a fresh CAS later means unlocking it again.
With the file open, the next useful step is usually turning the transaction history into an actual return figure via the XIRR calculator, or mapping the holdings inside it to the goals they're meant to fund.
Common questions about CAS passwords
Keep exploring
See what your own mutual funds are actually funding.
Earmark reads your CAS and maps every fund you already own to a goal — free to start.
Get started free