How to Redact a PDF Properly (So the Text Is Actually Gone)

Redaction failures are a genre of news story: a court filing, a government report, or a corporate document is published with sensitive text "blacked out" — except anyone can select, copy, or simply delete the black box to reveal what's underneath. The lesson is simple and important: drawing a black rectangle over text does not remove the text.

Here's how PDF redaction actually works, why so many tools get it wrong, and how to redact a document properly — and privately.

The most common (and dangerous) mistake

Many "redaction" tools — and plenty of people using a PDF editor — just draw a filled black rectangle on top of the text. It looks redacted. It is not. The original text still exists in the PDF's content stream beneath the shape. That means:

The text can be selected and copied straight out from under the box.
It can be extracted by any PDF parser in seconds.
The box can sometimes be moved or deleted entirely.

If the information matters enough to hide, a black box on top is not enough.

What real redaction means

Proper redaction removes the underlying content, not just covers it. After true redaction:

The text and images inside the marked areas are permanently deleted from the file.
Only the visible black bar remains; there is nothing to select, copy, or recover.
The rest of the page stays intact — ideally still real, selectable text and crisp vectors.

pdfnoupload's Redact PDF tool does exactly this. You drag boxes over what you want to hide, and the marked areas are genuinely removed from the document (powered by a WebAssembly engine), while the rest of each page stays as live text. And because it runs entirely in your browser, the sensitive document is never uploaded in the first place — which matters a lot, since you're handling it precisely because parts of it are secret.

How to redact a PDF properly, step by step

Open the Redact PDF tool.
Drop in your PDF (read locally, never uploaded).
Drag a box over each piece of text or image you want to remove, on any page.
Apply — the marked content is permanently removed and a black bar is drawn over it.
Download the redacted file.

Always verify your redaction

Never trust redaction blindly. After you redact, do these checks on the output:

Copy test: try to select and copy text where the black bars are. You should get nothing.
Search test: use Ctrl+F to search for a word you redacted. It should not be found.
Re-open test: open the file in a different PDF reader and confirm the content is gone.

Don't forget the hidden data

Redaction handles visible content, but PDFs also carry hidden metadata — author name, software, timestamps — and sometimes layers or comments. Before sharing a sensitive document, also remove its metadata. If you need to restrict who can open it at all, add a password.

FAQ

Why does the redacted output sometimes look like an image? To guarantee removal, some tools flatten the page. The best approach removes only the marked content while keeping the rest as selectable text — verify with the copy test either way.

Is my document uploaded when I redact it? With pdfnoupload, no. Redaction happens in your browser via WebAssembly. Confirm with DevTools → Network — zero uploads.

Can redacted text ever be recovered? Not if it was truly removed (not just covered). Always run the copy and search tests on the final file to be sure.

Protect your sensitive documents the right way: redact a PDF privately, in your browser.