How to Redact a PDF: Remove Sensitive Information Safely
Jen · · 9 min read
Redaction is the process of permanently removing sensitive information from a document before sharing it. Social security numbers, bank account details, medical record numbers, home addresses, and confidential business data all need to be redacted before a document is distributed publicly or sent to unauthorized parties.
This guide explains the right way to redact a PDF — and, critically, the wrong ways that look redacted but actually aren't.
Why Proper Redaction Matters
Improper redaction has caused significant data breaches. In high-profile cases, government agencies and law firms have released PDFs where sensitive text appeared blacked out visually — but the underlying text remained in the file, selectable and copy-pasteable.
This happens when people use the wrong method: drawing a black rectangle over text using the drawing tools in a PDF editor. The black box hides the text visually but doesn't remove it from the PDF's underlying data structure. Anyone can remove the box, change its color, or simply select the text underneath and paste it elsewhere.
True redaction permanently destroys the underlying text or image data. The information is gone — not just hidden.
How to Properly Redact a PDF
Method 1: Use a Dedicated Redaction Tool
The safest approach is a tool with a true redaction feature that removes the underlying data:
- Open EditPDFs.app and upload your PDF.
- Select the redaction tool — Look for "Redact" in the editing toolbar. This is different from the drawing/annotation tools.
- Mark areas to redact — Click and drag to select text passages, numbers, or image regions you want to permanently remove. The tool highlights them in red to show what will be redacted.
- Apply the redaction — Click "Apply" or "Confirm Redaction." This step is irreversible — the marked content is permanently deleted from the PDF's underlying data.
- Download the redacted PDF — The output PDF shows black bars where the content was, and the original data is completely gone.
Important: Only apply redaction after you've marked all the areas you want removed. Once you apply, you cannot undo the redaction without going back to the original document.
Method 2: Redact by Converting to Image
A reliable low-tech redaction method that anyone can use:
- Convert the PDF to images (one image per page)
- Use an image editor (even MS Paint) to paint black rectangles over the sensitive information
- Flatten or merge the edited images
- Convert the images back to PDF
Because the text was converted to an image before editing, there's no underlying text data to expose. This method is more cumbersome for long documents but is genuinely secure because text data was never present in the output.
What NOT to Do: Common Redaction Mistakes
❌ Drawing a black box over text
As mentioned above, using the drawing tools to cover text with a black rectangle does NOT redact the text. The underlying text remains in the PDF. Anyone who receives the document can remove or move the box to reveal the original content.
❌ Using low-opacity highlights
Highlighting text in black or dark gray doesn't redact it either — it just colors it. The text is still there and can be selected and copied.
❌ Assuming white text = redacted
Changing text color to white makes it invisible on a white background but the text is still in the document. Selecting all text on the page will reveal it instantly.
❌ Not checking redaction before distribution
After redacting, always verify: open the PDF in a fresh viewer, try to select text in the redacted areas, and search for a word that should have been removed. If the text is truly redacted, searching for it should return zero results.
What Information Typically Needs Redacting?
Common categories of information that require redaction before sharing documents:
- Personal identifiers — Social security numbers, passport numbers, driver's license numbers
- Financial data — Bank account numbers, credit card numbers, routing numbers
- Medical information — Diagnoses, medications, treatment details (especially under HIPAA)
- Contact information — Home addresses, personal phone numbers, personal email addresses
- Legal matters — Names of minors, victim information in court documents
- Business confidential — Trade secrets, proprietary pricing, internal strategy documents
- Authentication credentials — Passwords, PINs, security question answers
Redacting Images and Signatures in PDFs
Text isn't the only sensitive information in PDFs. You may also need to redact:
- Photos — Faces, ID photos, or contextual images that identify individuals
- Signatures — Handwritten or digital signatures that could be forged
- Stamps and seals — Official stamps in sensitive contexts
- Embedded metadata — Author names, GPS coordinates in embedded images, revision history
Good redaction tools handle image regions the same way as text — drawing a selection box over an image area and applying redaction removes that portion of the image data permanently.
Redacting Metadata
PDFs often contain hidden metadata that isn't visible in the document itself: author name, creation date, organization, revision history, and sometimes comments or tracked changes. Before sharing a sensitive document, consider removing this metadata as well.
In Adobe Acrobat, this is called "Sanitizing" a document. In other tools, look for options like "Remove Hidden Information," "Clean Document," or "Remove Metadata." This is a separate step from visual redaction but equally important for truly private documents.
Frequently Asked Questions
Can redaction be reversed?
True redaction cannot be reversed — the underlying data is permanently deleted. This is why you should always work from a copy of the original document, keeping the unredacted version safely stored if you need to reference it later.
Does redacting a PDF change its file size?
Slightly. Removing content typically reduces file size marginally, though the black redaction bars add a small amount of data. The change is usually negligible.
Can I redact a scanned PDF?
Yes. For scanned PDFs (which are image-based), redaction removes the image pixels in the marked areas. The process is the same — use the redaction tool to mark and apply.
How do I redact multiple occurrences of the same information?
Some redaction tools let you search for text and redact all instances simultaneously — for example, finding and redacting every occurrence of a specific social security number across a multi-page document. This is much faster than manually finding each occurrence.
Is it legal to share a document after redaction?
Redaction makes sensitive information invisible, but the legality of sharing a document depends on applicable laws and agreements, not just the technical redaction. Consult a lawyer if you're unsure about what must be redacted and whether a document can be shared after redaction.
Conclusion
Redacting a PDF correctly is a critical skill for anyone who handles sensitive documents — whether that's legal records, financial statements, medical files, or business contracts. The key takeaway: visual concealment is not the same as actual removal. Use a dedicated redaction tool that permanently deletes the underlying data, verify the redaction after applying, and work from a copy so your original is preserved.
Need to redact a PDF right now? Use the free PDF editor at EditPDFs.app — no account, no software, completely private.