PDF Tips Security & Passwords Redact a PDF

How to Redact a PDF: Permanently Black Out Sensitive Text

A black box drawn over text isn't redaction. Here's what real PDF redaction means, why it matters, and how to do it correctly.

December 4, 2025 Security & Passwords 8 min read
Back to All Posts

In 2008, the U.S. Army published a report on Iran's nuclear capabilities. The document had been "redacted" — sensitive sections blacked out with rectangles. But the text beneath those rectangles was still in the file. Anyone who copied and pasted the blacked-out areas into a text editor could read exactly what the Army had tried to hide. That embarrassing data exposure illustrated something every PDF user needs to understand: covering text is not the same as removing it.

What Real PDF Redaction Actually Does

True PDF redaction is a two-step process. First, the content to be removed — text, images, or entire regions of a page — is marked for redaction. Then, when you apply the redaction, the underlying data is permanently deleted from the file. What remains is a black (or white, or colored) rectangle with nothing underneath it. The file's underlying content stream no longer contains the removed text.

This is fundamentally different from:

  • Drawing a black rectangle on top — the text is still in the PDF's content layer, just visually covered
  • Cropping the page — the content outside the crop box still exists in the file; see our cropping guide for details
  • Adding a black annotation — annotations are a separate layer; remove the annotation and the text reappears
  • Covering with a white text box — same problem; the original text is still underneath in the content stream
The test: Open your "redacted" PDF in a text editor or copy the blacked-out area and paste into Notepad. If you can read the text, the redaction failed. Real redaction makes this impossible because the text data is gone.

When Redaction Matters

PDF redaction is a legal and compliance requirement in many professional contexts, not just a nice-to-have. Common scenarios where proper redaction is essential:

ContextWhat Gets RedactedWhy It Matters
Legal discovery Privileged communications, third-party names, confidential business information Courts require proper redaction; improper redaction can result in sanctions
FOIA / public records Personal information, law enforcement details, national security content Government agencies are legally obligated to redact before release
Healthcare (HIPAA) Patient names, dates of birth, SSNs, diagnosis information HIPAA violations carry fines up to $1.9M per violation category per year
Financial documents Account numbers, routing numbers, SSNs on tax documents Prevents identity theft; required by many financial institutions
HR / employment Salary details, performance reviews, personal addresses Privacy regulations (GDPR, CCPA) require limiting exposure of personal data
Contracts & NDAs Pricing terms, third-party names, proprietary specifications Sharing contracts with redacted terms is standard business practice

Method 1: Redact a PDF with UPDF (Windows & Mac)

For anyone who needs to redact PDFs regularly — or who handles sensitive documents professionally — a dedicated PDF editor with proper redaction support is the right tool. UPDF includes a full redaction tool that permanently removes content from the PDF's underlying data, not just visually covers it.

  1. Open your PDF in UPDF.
  2. Go to the Protect tab and select Redact.
  3. Drag to select any text, image, or region you want to permanently remove. Selected areas are highlighted.
  4. You can mark multiple regions across multiple pages before applying.
  5. Click Apply Redactions. UPDF permanently deletes the marked content from the file.
  6. Save the file. The redacted content is gone — it cannot be recovered.

UPDF also supports Search & Redact — you can search for a specific word, phrase, or pattern (like Social Security numbers matching a specific format) and redact every instance across the entire document in one step. This is a significant time-saver for large documents with many instances of the same sensitive term.

Best for: Legal professionals, HR teams, healthcare workers, or anyone who redacts PDFs as part of a regular workflow. UPDF's AI features also let you summarize or analyze the document content before deciding what to redact.

Method 2: Redact a PDF with Adobe Acrobat Pro

Adobe Acrobat Pro has included redaction tools since version 8. If you already have an Acrobat Pro subscription, the workflow is:

  1. Go to Tools → Redact.
  2. Use Mark for Redaction to select text or regions.
  3. Optionally use Find Text to search and mark all instances of a term.
  4. Click Apply Redactions to permanently remove the marked content.
  5. Acrobat will also offer to sanitize the document — removing metadata, hidden layers, and other data that could contain sensitive information.

Acrobat's sanitize function is worth using alongside redaction when sharing documents externally. It strips embedded content that could inadvertently expose information beyond what you've explicitly redacted.

Method 3: Free Redaction Options

Proper redaction tools are almost exclusively found in paid software, because the underlying operation — permanently rewriting the PDF's content stream — requires deep file-level access that browser-based tools and free readers typically don't offer. That said, there are a few legitimate free paths:

LibreOffice Draw (Free, Desktop)

LibreOffice Draw can open PDFs and let you draw filled black rectangles over content. Crucially, if you then export back to PDF, the result can permanently rasterize the page — turning it into an image — which effectively redacts the text since it's no longer a selectable content stream. However, this approach also destroys text searchability for the entire page and significantly increases file size. It's a blunt instrument, suitable only when you don't need the remaining text to be searchable or copyable.

Print to Image, Then Back to PDF

A more reliable free method: cover the sensitive content with a black shape in any tool, then convert the PDF to images (using our PDF to JPG tool), and convert those images back to PDF (using our JPG to PDF tool). The result is an image-based PDF — the original text content is gone because the file is now just pictures of pages. Downsides: no text search, larger file size, and lower visual quality. But for a one-off personal document where professional quality isn't required, it works.

What to Do After Redacting

A few additional steps are worth taking after applying redactions, especially before sharing externally:

Check the Metadata

PDF metadata can contain the document's original title, author name, creation software, and revision history — none of which is affected by content redaction. Use our metadata editor or see our guide on editing PDF metadata to scrub this information before sharing.

Flatten the PDF

After redacting, flattening the PDF merges all layers into a single permanent layer, eliminating any remaining annotation layers or form fields that could contain residual data. Think of it as a final cleanup step.

Password Protect the Final Document

If the redacted document still contains sensitive content that requires controlled distribution, consider adding a password to restrict who can open it. Redaction removes specific content; a password controls access to everything else.

Common Redaction Mistakes to Avoid

  • Using annotation tools instead of redaction tools — black highlight annotations look identical to redactions but are trivially removable
  • Redacting a copy while sharing the original — always verify you're working with and sharing the redacted version
  • Forgetting metadata and hidden layers — the visible content may be clean while document properties still contain names or revision history
  • Not testing the result — always try to select, copy, and paste from redacted areas before distributing
  • Redacting scanned PDFs without OCR — if a PDF is image-based (scanned), redaction tools may not find the text to remove it. Run OCR first, then redact, or use the image-conversion method described above
Key Takeaways
  • Drawing a black box over text is not redaction — the text remains in the file and can be recovered
  • True redaction permanently deletes content from the PDF's underlying data
  • Cropping, annotating, and covering with shapes all fail the copy-paste test
  • UPDF and Adobe Acrobat Pro both offer proper redaction with search-and-redact for bulk operations
  • Free workarounds exist but sacrifice text searchability and file quality
  • After redacting, clean metadata, flatten the PDF, and verify by trying to copy the redacted text
  • For scanned PDFs, run OCR before redacting so the tool can find the text to remove

Need to protect a PDF before sharing?

Password-protect any PDF in your browser — free, no account, no upload to external servers.

Protect PDF Free