How to Redact a PDF Properly (Why Drawing Black Boxes Fails)
Oct 17, 2026
The most expensive mistake in document security is also the easiest to make: covering sensitive text with a black rectangle in a PDF editor and calling it redacted. The text is still in the file — anyone can drag-select it, copy it, or simply open the PDF in a different viewer that ignores the box. It has happened to courts, to government agencies, to major corporations, always with embarrassing headlines attached.
Here is how redaction actually works, and how to do it right.
The quick answer
Open the free PDF redaction tool, upload the document, mark the text that must disappear, and download a genuinely redacted PDF — the underlying text is removed, not covered. Free, no signup, files deleted after processing.
Why black boxes are not redaction
A PDF stores content and appearance separately. The sentence "Client's annual salary is $182,000" is stored as characters; a black box drawn over it is just another graphical object sitting on top. Nothing about the characters changed. Consequences:
- Copy-paste: select around the box, paste into any editor, and the "hidden" text reappears.
- Search: Ctrl+F finds the "redacted" word instantly.
- Screen readers and conversion tools: they read the text layer, box or no box.
- Some viewers: render annotations differently or not at all, exposing everything.
Real redaction removes the characters from the document itself. After true redaction, Ctrl+F finds nothing, selection grabs nothing, and no viewer can reconstruct what was removed.
Step-by-step: redacting sensitive content
Step 1 — Work on a copy
Keep the original intact. Redaction is destructive by design — that is its purpose — so never redact your only version of a document.
Step 2 — Identify everything sensitive
Redact more than you think you need to. The usual suspects: names and addresses, account and ID numbers, salaries, medical details, internal pricing, email addresses, and anything in headers, footers, or page margins — metadata hides there too.
Step 3 — Mark and apply redaction
Mark the text ranges in the redaction tool and apply. The tool searches the text layer and removes the actual characters — which is also why OCR matters for scans: a scanned page has no text layer, so run the OCR tool first, then redact.
Step 4 — Verify the result
Open the redacted file and do the checks a hostile reader would do: Ctrl+F a redacted term (should find nothing), try to select and copy over the redacted area (should grab nothing). This ten-second check is what the careless skip and the careful never regret.
Redaction checklist before sharing
| Check | Why |
|---|---|
| Ctrl+F finds no redacted terms | Proves text removal, not covering |
| Copied text contains no redacted content | Selection layer is clean |
| Document properties reviewed | Author and title metadata can leak names |
| Attachments and embedded files removed | PDFs can carry hidden cargo |
Redaction in context: the layered approach
- Before sharing internally: redact, then optionally password-protect the file.
- Public releases: redact, then consider the flatten tool to bake the document into plain pages.
- Marked versions: combine with the watermark tool ("REDACTED COPY") so versions cannot be confused.
Frequently asked questions
Can redacted text be recovered?
Not from a properly redacted file — the characters are gone. This is exactly why proper redaction exists: recovery is the failure mode of fake redaction.
Does redaction work on scanned PDFs?
Only after OCR creates a text layer. Without text, the tool cannot find and remove characters — run the OCR tool first.
What about images of sensitive content (signatures, stamps)?
Graphics need to be removed too, not just text. Redact the regions containing them; the tool removes what it can and flags what needs manual attention.
Is redaction the same as deleting pages?
Different operations. Whole pages that should not exist go away with the remove pages tool; redaction removes content within pages.
The bottom line
If a document leaves your hands, assume a motivated reader will try everything a PDF can do. Make sure there is nothing left to find: real redaction via the redaction tool, verify with Ctrl+F, and never trust a black box.