ToolsTuna
    Sign InSign Up
    PDF Tools

    How to Redact a PDF Properly (Without Leaking the Content You Meant to Hide)

    May 23, 20266 min read

    The mistake that keeps leaking confidential documents

    Every few months a high-profile organisation accidentally releases a "redacted" PDF where the redactions can be removed with a single keyboard shortcut. Court filings, intelligence reports, corporate emails — the same mistake keeps happening, and the cause is always the same: somebody used a **highlight** instead of a **redaction**.

    Here's the difference:

  1. A **highlight** is a coloured overlay drawn on top of the page. The text underneath is still selectable, copyable, and searchable. If you select the highlighted area and paste it into a text editor, the "hidden" content reappears.
  2. A **redaction** removes (or at least permanently covers) the underlying content so nothing can be selected, copied, or extracted from that area — in any PDF viewer, on any platform.

    3. If you've ever opened a PDF, clicked the highlighter, picked black, and emailed it off — that file is not redacted. Anyone can recover the text in five seconds.

    What proper redaction actually does

    A correctly redacted PDF passes three tests:

  3. Visual test: the redacted area shows a solid black (or white) box. No leakage at the edges, no hint of letters underneath.
  4. Selection test: clicking and dragging across the redaction selects nothing. Copy-paste returns empty.
  5. Forensic test: opening the PDF in a hex editor or extracting it with a text-extraction library returns no trace of the hidden content.

    6. The first two are non-negotiable for any "I want to share this safely" workflow. The third matters when adversaries are sophisticated — journalists, lawyers, intelligence analysts.

    How to redact a PDF in three steps

  6. Open the [Redact PDF](/redact-pdf) tool.
  7. Drop your PDF: on the upload zone. Every page renders right in the browser as an interactive editor.
  8. Click and drag: to draw a black box over each piece of sensitive content. Switch pages with the arrows — your boxes stay saved. Hit *Apply Redactions* and download the redacted PDF.

    9. The boxes are drawn directly into the page content stream. They're not overlays, not annotations — they're part of the page itself. Open the file in Acrobat, Preview, Foxit, a browser, or print it: the redacted areas are solid black everywhere, in every viewer, on every device.

    When to redact in black vs white

    Both options matter:

  9. Black: is the legal and government standard. Use black for FOIA-style document releases, court filings, contracts, internal reports being made public. Black says "something was here and we removed it" — which is itself important information in a legal context.
  10. White: is for when you want the area to look like blank space, not a redacted box. Use white when removing an outdated address from a template, blanking a placeholder logo, or cleaning up a marketing PDF for re-use.

    11. The legal/forensic protection is identical either way; the only difference is what the reader perceives.

    Going from "good" to "forensic-grade" redaction

    For 99% of redaction tasks — sharing a redacted contract with a client, releasing a document to a regulator, anonymising a CV — drawing solid filled rectangles into the page content stream is enough. No PDF viewer will select or extract the covered text, and the rectangles can't be moved or deleted.

    For the 1% where you're worried about a sophisticated adversary trying to forensically recover the underlying text bytes, add one more step: run the redacted PDF through our [OCR PDF](/ocr-pdf) tool. That rasterises each page into pixels and rebuilds a fresh PDF where every page is an image. There's no underlying text layer left to recover — only what's visible on screen.

    Use this for: leaked-document journalism, intelligence reports, anything where the cost of a leak is catastrophic.

    What *not* to do

  11. Don't use a highlighter.: It's not a redaction, it's a coloured overlay. The text underneath is fully recoverable.
  12. Don't draw filled shapes in PowerPoint and "save as PDF".: Many converters keep the original text behind the shapes.
  13. Don't rely on a password.: Passwords stop opening, not extraction once opened. They're complementary, not a substitute. Use both: [Redact PDF](/redact-pdf) for the content, [Protect PDF](/protect-pdf) for access control.
  14. Don't redact a digitally signed PDF.: Saving over a signed PDF invalidates the cryptographic signature. Redact first, then sign — never the other way around.

    15. Real-world use cases

  15. Legal:: Redact opposing party names, witness identities, or trade secrets before producing discovery documents.
  16. HR:: Redact salary numbers and SSNs before sharing offer letters with reference checkers.
  17. Healthcare:: Remove PHI (names, dates of birth, MRN) from scanned charts before sending to a researcher.
  18. Journalism:: Hide source names, email signatures, and metadata stamps in leaked PDFs before publication.
  19. Finance:: Redact account numbers and balances on a statement before sending it to a third party.
  20. Real estate:: Black out a previous tenant's information on a copy of a lease used as a sample.

    21. Privacy

    Your PDF is rendered locally in your browser for the visual editor. It's only sent to our server when you click *Apply Redactions* — at which point it's processed in memory in our serverless function and discarded the moment your redacted PDF is returned. Nothing is stored, nothing is logged, nothing is watermarked.

    Conclusion

    Redaction is one of those tasks that *looks* trivial — "just draw a black box, right?" — and gets people in serious trouble when done wrong. Use a tool that actually bakes the redaction into the page, not an annotation that can be peeled off. Drop your file into the [Redact PDF](/redact-pdf) tool, drag a box over every piece of sensitive content, click apply, and ship a PDF that's actually safe to share.

    Ready to try it?

    Use our free tool — no signup, no watermarks, no limits.

    Related Articles

    Get in Touch

    Questions, feedback, or partnership ideas? Send us a note.