In 2008, the U.S. Army published a report on Iran's nuclear capabilities. The document had been "redacted" — sensitive sections blacked out with rectangles. But the text beneath those rectangles was still in the file. Anyone who copied and pasted the blacked-out areas into a text editor could read exactly what the Army had tried to hide. That embarrassing data exposure illustrated something every PDF user needs to understand: covering text is not the same as removing it.
What Real PDF Redaction Actually Does
True PDF redaction is a two-step process. First, the content to be removed — text, images, or entire regions of a page — is marked for redaction. Then, when you apply the redaction, the underlying data is permanently deleted from the file. What remains is a black (or white, or colored) rectangle with nothing underneath it. The file's underlying content stream no longer contains the removed text.
This is fundamentally different from:
- Drawing a black rectangle on top — the text is still in the PDF's content layer, just visually covered
- Cropping the page — the content outside the crop box still exists in the file; see our cropping guide for details
- Adding a black annotation — annotations are a separate layer; remove the annotation and the text reappears
- Covering with a white text box — same problem; the original text is still underneath in the content stream
When Redaction Matters
PDF redaction is a legal and compliance requirement in many professional contexts, not just a nice-to-have. Common scenarios where proper redaction is essential:
| Context | What Gets Redacted | Why It Matters |
|---|---|---|
| Legal discovery | Privileged communications, third-party names, confidential business information | Courts require proper redaction; improper redaction can result in sanctions |
| FOIA / public records | Personal information, law enforcement details, national security content | Government agencies are legally obligated to redact before release |
| Healthcare (HIPAA) | Patient names, dates of birth, SSNs, diagnosis information | HIPAA violations carry fines up to $1.9M per violation category per year |
| Financial documents | Account numbers, routing numbers, SSNs on tax documents | Prevents identity theft; required by many financial institutions |
| HR / employment | Salary details, performance reviews, personal addresses | Privacy regulations (GDPR, CCPA) require limiting exposure of personal data |
| Contracts & NDAs | Pricing terms, third-party names, proprietary specifications | Sharing contracts with redacted terms is standard business practice |
Method 1: Redact a PDF with UPDF (Windows & Mac)
For anyone who needs to redact PDFs regularly — or who handles sensitive documents professionally — a dedicated PDF editor with proper redaction support is the right tool. UPDF includes a full redaction tool that permanently removes content from the PDF's underlying data, not just visually covers it.
- Open your PDF in UPDF.
- Go to the Protect tab and select Redact.
- Drag to select any text, image, or region you want to permanently remove. Selected areas are highlighted.
- You can mark multiple regions across multiple pages before applying.
- Click Apply Redactions. UPDF permanently deletes the marked content from the file.
- Save the file. The redacted content is gone — it cannot be recovered.
UPDF also supports Search & Redact — you can search for a specific word, phrase, or pattern (like Social Security numbers matching a specific format) and redact every instance across the entire document in one step. This is a significant time-saver for large documents with many instances of the same sensitive term.
Best for: Legal professionals, HR teams, healthcare workers, or anyone who redacts PDFs as part of a regular workflow. UPDF's AI features also let you summarize or analyze the document content before deciding what to redact.
Method 2: Redact a PDF with Adobe Acrobat Pro
Adobe Acrobat Pro has included redaction tools since version 8. If you already have an Acrobat Pro subscription, the workflow is:
- Go to Tools → Redact.
- Use Mark for Redaction to select text or regions.
- Optionally use Find Text to search and mark all instances of a term.
- Click Apply Redactions to permanently remove the marked content.
- Acrobat will also offer to sanitize the document — removing metadata, hidden layers, and other data that could contain sensitive information.
Acrobat's sanitize function is worth using alongside redaction when sharing documents externally. It strips embedded content that could inadvertently expose information beyond what you've explicitly redacted.
Method 3: Free Redaction Options
Proper redaction tools are almost exclusively found in paid software, because the underlying operation — permanently rewriting the PDF's content stream — requires deep file-level access that browser-based tools and free readers typically don't offer. That said, there are a few legitimate free paths:
LibreOffice Draw (Free, Desktop)
LibreOffice Draw can open PDFs and let you draw filled black rectangles over content. Crucially, if you then export back to PDF, the result can permanently rasterize the page — turning it into an image — which effectively redacts the text since it's no longer a selectable content stream. However, this approach also destroys text searchability for the entire page and significantly increases file size. It's a blunt instrument, suitable only when you don't need the remaining text to be searchable or copyable.
Print to Image, Then Back to PDF
A more reliable free method: cover the sensitive content with a black shape in any tool, then convert the PDF to images (using our PDF to JPG tool), and convert those images back to PDF (using our JPG to PDF tool). The result is an image-based PDF — the original text content is gone because the file is now just pictures of pages. Downsides: no text search, larger file size, and lower visual quality. But for a one-off personal document where professional quality isn't required, it works.
What to Do After Redacting
A few additional steps are worth taking after applying redactions, especially before sharing externally:
Check the Metadata
PDF metadata can contain the document's original title, author name, creation software, and revision history — none of which is affected by content redaction. Use our metadata editor or see our guide on editing PDF metadata to scrub this information before sharing.
Flatten the PDF
After redacting, flattening the PDF merges all layers into a single permanent layer, eliminating any remaining annotation layers or form fields that could contain residual data. Think of it as a final cleanup step.
Password Protect the Final Document
If the redacted document still contains sensitive content that requires controlled distribution, consider adding a password to restrict who can open it. Redaction removes specific content; a password controls access to everything else.
Common Redaction Mistakes to Avoid
- Using annotation tools instead of redaction tools — black highlight annotations look identical to redactions but are trivially removable
- Redacting a copy while sharing the original — always verify you're working with and sharing the redacted version
- Forgetting metadata and hidden layers — the visible content may be clean while document properties still contain names or revision history
- Not testing the result — always try to select, copy, and paste from redacted areas before distributing
- Redacting scanned PDFs without OCR — if a PDF is image-based (scanned), redaction tools may not find the text to remove it. Run OCR first, then redact, or use the image-conversion method described above
- Drawing a black box over text is not redaction — the text remains in the file and can be recovered
- True redaction permanently deletes content from the PDF's underlying data
- Cropping, annotating, and covering with shapes all fail the copy-paste test
- UPDF and Adobe Acrobat Pro both offer proper redaction with search-and-redact for bulk operations
- Free workarounds exist but sacrifice text searchability and file quality
- After redacting, clean metadata, flatten the PDF, and verify by trying to copy the redacted text
- For scanned PDFs, run OCR before redacting so the tool can find the text to remove
Need to protect a PDF before sharing?
Password-protect any PDF in your browser — free, no account, no upload to external servers.