How to Properly Redact Sensitive Information from PDFs

Every few months, another news story breaks about a government agency, law firm, or corporation that accidentally exposed sensitive information in a "redacted" document. Social security numbers visible to anyone who copies and pastes. Classified information recoverable with a simple click. Names of protected witnesses revealed by selecting the black rectangles meant to hide them.

These failures share a common cause: the people preparing these documents didn't understand what redaction actually means in the context of PDF files. They assumed that covering text with a black box removed it from the document. It doesn't.

The Difference Between Hiding and Removing

When you open a PDF in most editing applications and draw a black rectangle over text, you're creating a new visual layer that sits on top of the existing content. The original text remains in the file, fully intact and searchable. Anyone can access it by selecting the area and copying to their clipboard, by using accessibility tools that read the underlying text, or simply by deleting the rectangle you drew.

This isn't a bug or a security flaw—it's just how PDF layering works. A PDF is essentially a stack of objects: text, images, shapes, and annotations, each with their own position and properties. Adding a black rectangle adds a new object to the stack. It doesn't modify or remove anything beneath it.

True redaction is fundamentally different. When you properly redact a PDF, you're not adding a visual cover-up. You're permanently removing the underlying content from the file and replacing it with a non-transparent mark. The original text or image no longer exists in any form. There's nothing to copy, nothing to select, nothing to recover.

Why This Mistake Keeps Happening

The confusion persists because "redaction" in the physical world works exactly like covering things up. If you take a paper document and run a thick black marker over a paragraph, you've effectively redacted it. The ink obscures the text beneath, and short of chemical analysis or exotic imaging techniques, that information is gone.

People naturally apply this mental model to digital documents. Black rectangle covers text, text is hidden, job done. The intuition is perfectly reasonable—it's just wrong in the digital context. PDFs don't work like paper, and covering something visually doesn't remove it structurally.

Software design hasn't helped. Many PDF editors make it trivially easy to draw shapes and change their fill color, but proper redaction tools are often buried in menus or reserved for premium versions. Users reach for the obvious tool rather than searching for the correct one.

High-Profile Failures

The consequences of improper redaction have played out publicly many times. Court documents have exposed the identities of confidential informants when attorneys used highlighting instead of redaction. Government reports have revealed classified information that was merely covered rather than removed. Corporate filings have disclosed trade secrets that appeared hidden but weren't.

In one notable case, a legal filing in a major antitrust case contained "redacted" pricing information that anyone could read simply by copying the text from the PDF. The black boxes were purely decorative. In another, a government report on intelligence failures exposed the names of CIA officers because the redaction was applied only to the visible layer.

These aren't isolated incidents from technically unsophisticated organizations. They happen repeatedly, across sectors, to people who should know better. The fundamental problem is that improper redaction looks identical to proper redaction. You can't tell the difference by looking at the document. You have to know how it was created.

How to Redact Properly

Proper redaction requires a tool that actually removes content rather than covering it. Our redact text tool performs true redaction: it permanently deletes the selected content from your PDF and replaces it with a solid mark. Once redacted, the original information cannot be recovered because it no longer exists in the file.

The process involves selecting the areas you want to redact, reviewing your selections to ensure you haven't missed anything or marked too much, and then applying the redaction. This final step is irreversible—the content is gone. That permanence is exactly what makes it secure.

After redacting, you should also consider running your document through our sanitize metadata tool. Even with the visible content properly redacted, your PDF might contain metadata that reveals information about the original document, including when it was created, who created it, and what software was used.

Verifying Your Redaction

Never trust that redaction worked without verifying. After processing a document, try to select the redacted areas. If you can highlight text or copy content from behind the redaction marks, the redaction failed. Proper redaction leaves nothing to select.

Search the document for terms you know should be redacted. If searching for "confidential" still finds hits in the areas you marked, something went wrong. The search function looks at the actual text in the file, not what's visually displayed.

Open the document in a different PDF reader. Sometimes one application will display a document differently than another. If the redacted content appears anywhere, in any viewer, your redaction isn't complete.

For highly sensitive documents, consider having someone else verify your work. Fresh eyes might catch areas you missed, and a second person attempting to recover the information provides additional assurance that the redaction is thorough.

When Redaction Isn't Enough

Sometimes the best approach isn't redaction at all. If you're removing so much content that the document becomes incomprehensible, consider whether you should be sharing it in the first place. Redaction is for removing specific pieces of sensitive information while preserving the document's overall utility.

Consider also whether the context around redacted information might reveal what was removed. If every instance of a person's name is redacted but the document otherwise describes their unique situation in detail, the redaction provides little practical protection. Thoughtful redaction considers not just what to remove but what the remaining content implies.

For documents containing extensive sensitive information, it might be more appropriate to create a new summary document rather than attempting to redact the original. Starting fresh ensures no hidden data persists and gives you complete control over what information appears in the final version.

Building Good Habits

Make redaction review a standard part of your workflow for sensitive documents. Before sharing any PDF that contains or once contained confidential information, verify that the content is truly removed rather than merely hidden. The few minutes this takes is trivial compared to the potential consequences of exposure.

When you receive a redacted document, especially in legal or regulatory contexts, verify that the redaction was done properly. If you can recover the hidden content, notify the sender before that information spreads further. This isn't just good practice—in some contexts, accessing improperly redacted information might create legal complications of its own.

Above all, remember that digital documents don't work like paper. The intuitions we've developed from decades of physical document handling don't transfer directly to PDF files. True redaction requires understanding this difference and using tools designed for the digital context.