How to Redact a PDF Properly (and Why Black Boxes Fail)

A black box drawn over text only hides it. Proper redaction permanently removes the text and data underneath. Always test the finished file by trying to select, search and copy the hidden words.

Every year, private information leaks from documents that were "blacked out". Court filings, company reports and personal letters have all been published with black boxes over names, numbers and addresses — and readers simply copied the hidden text out from underneath.

If you need to share a PDF without certain information, this guide explains how proper redaction works, the mistakes to avoid, and how to check your file before it goes anywhere.

What does it mean to redact a PDF?

Redaction means permanently removing information from a document so that it can't be recovered — not just hiding it. In a properly redacted PDF, the text, images or numbers in the marked area are deleted from the file, and usually replaced with a solid box to show something was removed.

That's very different from covering information, which only changes how the page looks.

Why don't black boxes work?

PDFs are built in layers. When you draw a black rectangle in a PDF editor, or highlight text in black, you add a new layer on top of the text. The text underneath is still in the file. That means anyone can often:

• select and copy the hidden text and paste it somewhere else,
• search for a word and find it inside the black box,
• move or delete the black shape in an editor,
• convert the PDF to Word and see everything.

The same problem happens when you black out text in Word or another program and then export to PDF — unless the original text is actually deleted first.

What else can leak private information?

Even when the visible text is removed, information can hide in other parts of a PDF:

Proper redaction removes or cleans all of these, not just the visible words.

How do you redact a PDF properly?

The process professionals follow looks like this:

1. Work on a copy. Keep the original safe and unchanged.
2. Find every instance. Search the whole document for names, numbers and terms — including headers, footers, tables and image captions.
3. Mark the areas with a real redaction tool (not a drawing or highlight tool).
4. Apply the redaction. This step permanently deletes the content under the marks.
5. Clean hidden data: remove metadata, comments, bookmarks, form data and attachments that could reveal information.
6. Save as a new file and test it before sharing.

Many free PDF editors only offer step 3 — they draw boxes but never actually delete anything. If you're not sure your tool truly redacts, assume it doesn't.

How do I check that my redaction worked?

Before you send a redacted PDF, test it like someone trying to undo it:

• Search for a few words you removed. They should not be found.
• Select all text on a redacted page and paste it into a text editor. Nothing hidden should appear.
• Click on the black boxes and try to move or delete them.
• Check the file properties for names or old titles.
• Look at the comments and bookmarks panels.

If any hidden information shows up, the redaction isn't complete.

Is deleting the whole page enough?

If an entire page is confidential, removing it completely can be the simplest solution — see how to remove pages from a PDF. But if only part of a page is sensitive, you need redaction so the rest of the page stays readable.

When to ask an expert

Redaction mistakes can be costly — legally, financially and personally. If you're sharing documents for court, a regulator, a client or the public, it's worth having it done properly. Our PDF experts permanently remove the information you specify, clean every hidden layer, test the final file, and can sign an NDA. You'll get a fixed quote before any work starts.

Also worth reading: is it safe to use online PDF tools?