How to Redact a PDF: Permanently Hiding Sensitive Information
Redacting a PDF means permanently removing sensitive information from a document before sharing it. This sounds simple, but the history of botched redactions — leaked classified documents, exposed personal data in court filings — shows that it is easy to do incorrectly and the consequences of getting it wrong can be serious.
This guide explains what proper PDF redaction means, what common mistakes to avoid, and how to redact a document correctly before it leaves your hands.
What Redaction Actually Means
Redaction is the permanent removal or obscuring of information from a document so that it cannot be recovered. When done correctly, the sensitive content is gone — not hidden underneath a visual overlay, but absent from the file entirely.
The word “permanent” is the key. A redaction that can be undone is not a redaction — it is a cosmetic change.
Why Most “Redaction” Methods Are Insecure
This is where many people make a critical mistake. Here are approaches that look like redaction but are not:
Drawing a black rectangle over the text
If you use a PDF editor’s drawing tool to place a black rectangle over sensitive text, the text is still in the document — it is just covered by a shape. Anyone who removes or moves the shape, or who copies and pastes from the “redacted” area in some PDF readers, can access the original text.
This is not redaction. This is concealment, and it fails.
Applying a black highlight
A highlight annotation sits on top of the text layer. The text remains in the document. In many PDF readers, the text is still selectable under the highlight. This also fails.
Changing the text color to white or matching the background
The text is still in the document’s data. Search tools, screen readers, and text extraction tools will find it. This also fails.
Printing and scanning
This approach actually works — a scan of a printed page does not contain the original text layer — but it introduces significant quality loss, loses all document structure, and is impractical for multi-page documents.
What Real PDF Redaction Does
Proper redaction tools work differently from drawing tools. When you redact an area in a PDF correctly:
- The tool identifies the underlying content in the selected area — text characters, images, or both
- It removes that content from the document structure
- It replaces the removed area with a solid fill (typically black, though other colors are sometimes used)
- The solid fill is baked into the page, not an overlay
After proper redaction, there is no underlying content to recover. The text characters are gone. Copying from the redacted area yields nothing. Text search will not find the redacted words.
What You Can Redact
Depending on the tool:
- Text: Specific words, names, numbers, addresses, or any selectable text content
- Images: Photographs, signatures, faces, logos, or any image content in a defined area
- Areas by region: Draw a rectangle over any part of the page to redact everything in that region — useful when the content is a mix of text and images or when the text is not selectable (as in a scanned PDF)
When to Redact vs. Other Privacy Approaches
Redaction is the right tool when you need to share a version of a document with specific content permanently removed:
| Situation | Recommended Approach |
|---|---|
| Share a contract with financial terms removed | Redact the financial sections |
| Share a report with names and addresses removed | Redact personal identifiers |
| Protect a scan containing personal information | Redact the sensitive regions |
| Prevent a recipient from opening a document at all | Password protect the PDF instead |
| Remove interactive form data | Flatten the PDF instead |
Using PDFolio’s Redact PDF Tool
PDFolio’s Redact PDF tool processes your document locally in your browser:
- Add your PDF. Drop the file into the workspace.
- Select the areas to redact. Mark the regions on each page that contain the information to remove.
- Process. The redaction runs locally — the document never leaves your device.
- Download the redacted copy. The download is a new PDF with the selected content permanently removed.
- Verify the result. Open the downloaded file. Attempt to select text in the redacted areas. Confirm that copy-paste from those areas returns nothing and that the content is visually replaced with solid fills.
Important: Keep the original document separately if you need it. The redacted version is a new file — but be cautious about where you store the original if the document contains sensitive information.
Verifying That Redaction Worked
After downloading the redacted PDF, verify it:
- Try to select text in the redacted areas. If your PDF viewer lets you select characters under a redaction mark, the redaction failed (this would indicate the tool used an overlay rather than true content removal).
- Try copy and paste. Paste into a text editor. If you get the supposedly-removed text, the redaction failed.
- Search for a redacted term. If the search finds it in the redacted version, the redaction failed.
- Check file size. A properly redacted PDF may be slightly smaller than the original if text was removed, or similar in size if image content was replaced.
If any of these checks fail, do not send the document. Return to the original and redact again using a tool that removes content rather than covering it.
Redacting Scanned PDFs
A scanned PDF is a document where each page is an image rather than selectable text. There is no text layer to redact — the entire page is a rasterised image.
For scanned PDFs, redaction works by replacing a selected image region with a solid fill. Since the “text” in a scan is really just pixels in an image, the approach is to overwrite those pixels with opaque black pixels.
After redacting a scan, verify by attempting to zoom in on the redacted area. The content should be a uniform solid rectangle with no hint of underlying text.
Common Redaction Errors That Led to Real Incidents
To illustrate why this matters: there have been several high-profile cases where public documents were released with “redactions” that failed:
- The Mueller Report incident: Sections that appeared redacted could be accessed by copying and pasting text in the original PDF release (this was corrected in subsequent releases).
- Court filing exposures: Multiple cases involving scanned documents where a drawn overlay was used instead of proper redaction, allowing recovery of personal information.
In these cases, the failure mode was the same: an overlay or annotation was applied over the text, but the text itself was not removed from the document structure.
Summary
- Proper redaction permanently removes content from a document — it does not just cover it
- Drawing black rectangles, applying highlights, or changing text color are not redaction
- After redacting, verify the result by attempting to select, copy, and search for the removed content
- For scanned PDFs, redaction replaces image regions with solid fills
- Keep the original document separate from the redacted version