← All guides

How to Redact Text in a PDF (Without Letting Information Leak)

pdfredactprivacysecurity

Redaction means permanently removing sensitive information from a document — not just hiding it. The common mistake: drawing black rectangles over text and saving. The text underneath is still there in the file, just hidden from view. Anyone with PDF analysis tools can extract it.

True redaction requires removing the underlying data, not just covering it visually.

The wrong way (don’t do this)

Drawing black boxes: in any PDF annotation tool, you can draw a rectangle over text. It looks redacted. The underlying text is still in the PDF file.

Black text on black background: change text color to black, fill it. Still in the file — copyable, searchable, extractable.

Highlighter color = black: covers text visually but doesn’t remove it.

Any approach that just “covers” instead of “removes” fails. The data is still there.

The right way: actual redaction

True redaction requires either:

1. Specialized redaction tools that mark areas for removal AND erase the underlying content when the file is saved.

2. Re-creation from scratch: convert PDF to images (lossy, but reliable), edit images to remove content, save back as PDF.

Method 1: Adobe Acrobat Pro (paid)

Acrobat Pro has a proper Redact tool:

  1. Open PDF in Acrobat Pro
  2. Tools → Redact (or Tools menu in newer versions)
  3. Mark for Redaction: drag over text to mark
  4. Apply Redactions: click to apply — text is actually removed
  5. Save

Acrobat Pro also offers:

  • Find and Redact: search for text patterns (SSN, phone numbers, etc.) and redact all matches
  • Sanitize Document: remove hidden metadata, comments, embedded files

For routine PDF redaction in business contexts, Acrobat Pro is the standard.

Method 2: Convert to images, edit, convert back (free)

A reliable free approach:

  1. Convert PDF pages to images: PDF to Images at 300 DPI
  2. Open each image in an editor (Preview, Photopea, GIMP, MS Paint)
  3. Paint over redacted areas with a solid color
  4. Save as new images
  5. Combine images back into PDF: JPG to PDF

The result: the redacted content truly doesn’t exist in the new PDF — only the visible “blacked out” image data.

This is the safest approach for sensitive material because:

  • Original text data is completely gone from the output file
  • The PDF only contains the image of redacted pages
  • No hidden text layer to extract

The trade-off: the PDF is image-based, so text isn’t selectable/searchable anywhere (not just the redacted parts).

Method 3: Free PDF tools with redaction

LibreOffice Draw (free): open PDF, draw filled rectangles over text — but this has the “cover not remove” problem like other annotation tools.

Free online services (Smallpdf, ilovepdf): some have redaction features. Upload-based. Privacy concern for sensitive content — you’re uploading the very document you want to redact to a third party.

For genuinely sensitive redaction: don’t use online services. Use Acrobat Pro or the convert-to-images method.

What gets exposed in failed redactions

When redaction is done incorrectly, the following can be recovered from the PDF file:

  • The original text under “blacked out” rectangles (just select and copy)
  • Earlier versions of the document (incremental PDF saves)
  • Hidden metadata (author, comments, revision history)
  • Embedded original files (in PDF/A-3 or some other formats)
  • Layer info revealing hidden layers
  • Form field data even when field is hidden

Famous cases: government documents released with sensitive info “redacted” by black rectangles that anyone could copy-paste through.

Sanitizing metadata too

True redaction includes removing all sensitive info, not just visible text:

  • Document metadata: author name, creation software, modification history
  • Hidden text in form fields, comments
  • Embedded files in the PDF
  • Hidden layers

Adobe Acrobat Pro has a “Sanitize Document” feature that handles this comprehensively.

For free alternatives: convert to images and rebuild (Method 2 above). The result has no PDF-level metadata from the original.

Verification: testing that redaction worked

After redacting:

  1. Open the “redacted” PDF
  2. Try to select the redacted areas with cursor
  3. Try to copy-paste the redacted content
  4. Open in a different PDF reader to verify
  5. Use a text extractor (PDF to Text) — confirms what text is actually in the file

If any of these reveal the supposedly-redacted content, the redaction failed.

Common redaction scenarios

Legal discovery: sharing documents with sensitive client info removed. Use Acrobat Pro — get the right tool for legal stakes.

Sharing reports externally: remove internal names, financial figures, contact info. Acrobat Pro or convert-to-images method.

FOIA responses: government documents. Strict redaction requirements; usually Acrobat Pro.

Personal documents: removing SSN or account numbers before sharing. Convert-to-images method is sufficient (and free).

Removing your name from a doc: same. Convert-to-images method.

Other approaches for specific scenarios

Whitespace replacement (in source, not PDF): if you have the source document (Word, etc.), edit there before exporting to PDF.

Crop instead of redact: if you only need to share part of a page, crop the PDF to that section instead of trying to redact other parts.

Print and re-scan with redaction in marker: low-tech but effective. Photocopy the document, redact with marker, scan the redacted copy.

TL;DR

  • Drawing black boxes IS NOT REDACTION — text is still in the file
  • True redaction requires removing the underlying data
  • Adobe Acrobat Pro has a proper redact tool — paid, the standard
  • Free reliable method: convert PDF to images → paint over content → save as new PDF (uses PDF to Images + image editor + JPG to PDF)
  • Verify redaction worked: try to select, copy, and extract text from “redacted” areas
  • Also sanitize metadata — not just visible content
  • For sensitive content: don’t use online redaction services (uploading to third parties)