How to redact a PDF properly — and why black boxes don’t work

Every few months a court filing, a government report or a company document leaks the very details it was meant to hide. Nobody hacked anything. Someone drew black boxes over the names, saved the PDF, and sent it out — and the names were still in the file, one copy and paste away. This guide explains why that happens, where hidden text survives, and how to redact a PDF so the words are actually gone.

Why a black box is not redaction

A PDF page is built in layers. The text is stored as real characters, and anything you draw on top — a black rectangle, a black highlight, a shape added in Word before exporting — is a separate object sitting above them. It hides the words from your eyes, but not from the file. Anyone who opens it can:

• select the text under the box and paste it somewhere else;
• search the document with Ctrl+F and land on the “hidden” word;
• delete or move the rectangle in any PDF editor;
• run the file through a text extractor, which ignores the box completely.

Turning the text white, shrinking it or covering it with an image fails for the same reason: the characters are still stored in the page.

Where else the text hides

Removing the visible words is only part of the job. Before you send a redacted document, think about these places too:

• Other pages. A name you blacked out on page 1 may appear again in a header, a signature block or an appendix.
• Scanned pages with OCR. A scan that has been made searchable carries an invisible text layer behind the picture. Blacking out the picture leaves that layer intact.
• Comments and form fields. Sticky notes, review comments and the values typed into fillable fields are stored separately from the page text.
• Document properties. The title, author and subject fields often contain a client name or a case number.
• Earlier versions inside the file. Many editors save changes by appending them to the end of the PDF, so the previous version can still be recovered from the same file.
• The file name. “Smith-divorce-settlement-final.pdf” gives away what the redactions were hiding.

How to redact a PDF properly, step by step

Proper redaction removes the content itself rather than covering it. The Redact PDF tool does this by rebuilding each page you mark: it renders the page to a picture, paints the marked areas solid black on that picture, and puts the picture in place of the original page. The characters under your marks are never written into the new file, so there is nothing left to select or copy. It runs in your browser, so the document is not uploaded anywhere.

1. Find every occurrence first. Open the original and search it with Ctrl+F for each name, number or phrase you need to remove, and note the pages. For a long document, the PDF to Text tool gives you the full text to search through.
2. Flatten fillable forms. If the document has form fields, run it through Flatten PDF Form first, so the typed values become part of the page and are redacted along with it.
3. Mark the areas. Add the file to Redact PDF, pick a page, and drag across everything that must go. Repeat for every page on your list; the page list shows how many areas each page has.
4. Apply and download. Press Apply redactions. You get a new file, and the original on your computer is left unchanged.
5. Give it a neutral file name before you send it.

If whole pages should not be shared at all, remove them with Delete PDF Pages instead of blacking out every line.

How to check the redaction worked

Never send a redacted file without testing it. Open the new copy — not the original — and:

1. Search it with Ctrl+F for each word you removed. There should be no matches.
2. Try to select text on a redacted page. A properly redacted page is a picture, so nothing highlights.
3. Run it through PDF to Text and search the result. This catches text that a viewer might not show you.
4. Open the document properties — or the PDF Metadata Editor — and make sure the title, author and subject fields give nothing away.

What proper redaction costs

Because each marked page becomes a picture, you cannot search or select text on those pages any more, and they take up more space than text does. Pages you did not mark are copied across unchanged and stay searchable, so the cost is limited to the pages that needed it. If the finished file is too large to email, Compress PDF can bring it down.

Desktop software can do the same job. Adobe Acrobat Pro, for example, has a dedicated Redact tool that removes the marked content rather than covering it. Whatever you use, the test is the same: search the finished file for the words you removed, and trust the result of that search rather than what the page looks like.

A quick checklist

• Every occurrence found — on every page, including headers and appendices.
• Form fields flattened before redacting.
• Redactions applied with a tool that removes content, not one that draws boxes.
• Finished file searched with Ctrl+F and run through a text extractor.
• Document properties checked.
• File renamed to something neutral.