How to Redact a PDF Securely (and Mistakes to Avoid)
Black boxes aren't enough. Learn how to remove sensitive information from a PDF so it truly can't be recovered — and the common mistakes that leak data.
The one rule: Redaction must remove information, not just cover it. A black box drawn over text hides nothing — the words are still in the file.
Redaction failures make headlines regularly: a court filing, a contract, or a report is published with "blacked-out" names that anyone can select and copy. The visual looked safe; the data was never gone.
Why a black box fails
A PDF has layers. When you draw a filled rectangle over a name, you add a shape on top of the text. The text underneath is untouched. Anyone can:
- select the area and copy the hidden text,
- delete the rectangle in an editor,
- or extract the raw text stream from the file.
The same applies to changing text color to white or highlighting — the characters are still there.
What real redaction does
Proper redaction finds the target content and deletes it from the document, then covers the area. The information is no longer in the file, so it can't be selected, copied, or extracted.
How to redact a PDF the right way
- Use a tool that removes content — like the Redact tool — not just a drawing tool.
- Specify the words or areas to remove.
- Download the redacted PDF and verify: try to select text where the redaction is. Nothing should be selectable.
Common redaction mistakes
| Mistake | Why it leaks |
|---|---|
| Black rectangle over text | Text stays underneath and is copyable |
| White text on white background | Still selectable and searchable |
| Blurring an image of text | Sometimes reversible; risky for small fonts |
| Forgetting metadata | Author, comments and hidden fields can reveal info |
Verify before you share
After redacting, open the file and try to select and search the removed content. If nothing comes up, the redaction worked. When in doubt, export a fresh flattened copy before distributing.