How to Redact a PDF Properly (and Prove It Worked)

Redacting a PDF sounds simple: put black boxes over the parts nobody should see. Yet badly redacted PDFs are one of the most common ways confidential information escapes. This guide explains what proper redaction is, how to do it step by step, and — most importantly — how to check it worked.

Covering is not removing

A PDF page is built from layers of instructions: draw this text here, place this image there, draw a black rectangle on top. When you add a black box in most PDF editors or annotation tools, you’re adding one more instruction on top of the others. The text underneath is still in the file. Anyone can:

• drag to select the “hidden” area and paste it into a text editor,
• use the search function and find the hidden words,
• delete the box with an editor, or
• run the file through a text extraction tool.

True redaction removes the underlying content. There are two ways to do that: specialised software that deletes the specific text and image objects under each box, or flattening — turning the page into an image with the boxes burned in so no text layer remains. Our free redaction tool uses flattening for the pages you redact, because it’s simple and very hard to get wrong.

Step-by-step: redacting a PDF

1. Work on a copy. Keep the original somewhere safe and never send it by mistake.
2. Decide what must go. Make a list before you start: names, addresses, account numbers, signatures, photos, case numbers. Include indirect identifiers such as job titles or unique dates that could reveal someone’s identity.
3. Search for each item. Use Search & redact to find every occurrence of a name or number, including in headers and footers. Repeat for variations — “J. Smith”, “Smith’s”, “JS”.
4. Run automatic detection for patterns like emails, phone numbers, card numbers and ID numbers, and review each suggestion.
5. Read every page. Automatic tools don’t understand context. Look for handwriting, stamps, images and tables.
6. Apply the redactions. Export the file. In our tool, each page with a box is flattened to a high-resolution image.
7. Verify. Open the new file and try to select, search and copy the redacted areas. Our tool does this automatically and shows a Verified badge.
8. Check the file properties. Document metadata — the author, the original title, editing software — can reveal more than you expect. A properly redacted export should have none.

The checks that catch most mistakes

Search for the redacted words in the exported file. If your PDF reader finds them, they’re still there.

Select all the text on a redacted page (Ctrl+A or Cmd+A) and paste it somewhere. Nothing from under the boxes should appear.

Zoom in on the boxes. They should be solid black with no faint text showing through and no gaps at the edges.

Look at the document properties (File → Properties in most readers). Title, author, subject and keywords should be blank or harmless.

Check page count and order match the original, especially for court and regulatory filings where page numbers are referenced.

Common redaction mistakes

• Using highlight, a black font colour or a shape annotation. All of these leave the text in place.
• Redacting a scanned page without OCR. If a scanned PDF has an invisible OCR text layer, the words are searchable even though you only “see” an image. Flattening removes it; drawing a box doesn’t.
• Forgetting comments, bookmarks and attachments. Comments and bookmarks can contain the very text you redacted. Exporting a new, flattened file removes them.
• Under-sized boxes. Box edges that don’t fully cover the tops of capitals or the tails of letters like g and y can leave a word readable.
• Inconsistency. Redacting a name on page 2 but not page 14 defeats the purpose. Search is your friend.

Is flattening always the right approach?

Flattening makes redacted pages into images, so their text can’t be searched or copied afterwards. For most sharing purposes that’s an advantage. If you need the rest of a redacted page to stay searchable — for example, in a large e-discovery production — you’ll need professional software that removes specific text objects and re-applies OCR, along with a process to check it. For everyday redaction of statements, letters, contracts and forms, flattening the affected pages is the safest choice.

Summary

Proper redaction removes information instead of hiding it, and good redaction is checked, not assumed. Mark everything, flatten or remove, verify, and strip metadata. You can do all of this privately in your browser with the free Redact PDF tool — your document never leaves your device.