Guides

What is PDF redaction?

If you are hiding sensitive information in a PDF, the method matters as much as the intention.

The short answer

PDF redaction means permanently removing or destroying sensitive information from a document so that it cannot be copied, searched, or extracted later. Simply drawing a black rectangle over text is not always the same thing.

How PDFs store content

A PDF file is not a flat image — it is a structured document with separate layers for text, graphics, fonts, and metadata. When you read a PDF, the text you see on screen is rendered from a text layer stored in the file, separate from any visual elements drawn on top of it.

This is why you can highlight and copy text from a PDF even though it looks like a static page. The text layer is always there, underneath whatever the page looks like visually.

Why black boxes can fail

When most people think of redacting a PDF, they imagine drawing a filled black rectangle over the text they want to hide. The problem is that in many PDF editors, that rectangle is simply placed on top of the text as a separate visual layer. The original text remains in the file, underneath the rectangle.

A recipient can sometimes reveal that hidden text by:

  • selecting all text in the document and copying it — the covered text may be included;
  • opening the file in a different PDF viewer that does not render the covering shape;
  • using a text extraction tool or script that reads the raw PDF text layer;
  • in some cases, simply moving or deleting the overlaid rectangle in an editor.

This is not a hypothetical concern. There are well-documented cases of government agencies and legal teams releasing documents where supposedly redacted text was easily accessible by simply copying from the PDF. The consequences in those cases ranged from embarrassing to legally significant.

What proper redaction does

Proper redaction removes or permanently replaces the underlying content, not just the visual representation of it. The standard approach is called flattening: the redacted pages are converted so that the original text layer is destroyed and replaced with a rendered image or opaque block. After flattening, there is no recoverable text beneath the redacted area.

A properly redacted file:

  • cannot have redacted content selected or copied;
  • shows no text when a text-extraction tool is run over the redacted areas;
  • cannot be reversed or "unredacted" with standard PDF editing software.

Other things that can expose redacted information

Text content is not the only thing in a PDF that can leak information. Be aware of:

  • Document metadata. PDF files often contain an author name, creation date, editing software, revision history, and other metadata in the file properties. This information is usually not visible on the page but can be read by anyone who opens the file properties.
  • Comments and annotations. Sticky notes, comments, and markup layers can contain text that does not appear in normal reading mode but is still in the file.
  • Embedded images. If the sensitive content is part of a scanned image rather than a text layer, the redaction method needs to account for that.

How to verify your redaction worked

After exporting a redacted PDF, check the output before sending it anywhere:

  • Try to select and copy text from the redacted areas. If you cannot select the original content, the flattening worked.
  • Try running a "select all" and paste into a text editor. Review what comes through.
  • Open the document properties or metadata panel in a PDF viewer and check whether any unexpected author names, comments, or version information is visible.
  • Consider opening the file in a second PDF application and confirming the redacted areas look correct.

For legal, medical, financial, or compliance-sensitive documents, this verification step is not optional.

Using the redaction tool on this site

On the Redact PDF page, you draw redaction boxes over the areas you want to remove. When you export, the marked pages are flattened — the content underneath the redaction areas is destroyed rather than merely hidden by a visual layer.

Processing happens in your browser, so the original document is not uploaded anywhere. However, you should still verify the output file before sending it, particularly for sensitive documents. No automated tool replaces a careful review.