PDFbolt — Free online PDF tools
How to redact sensitive information in a PDF
Permanently hide sensitive details in a PDF before sharing, and avoid the common mistake that leaves redacted text recoverable.
Before sharing a document you often need to hide parts of it — an account number, an address, a name, a salary figure. Redaction blacks out that sensitive content so it cannot be read. Done properly it is permanent and safe; done carelessly it can leave the supposedly hidden text fully recoverable, which is the single most important thing to understand about it.
This guide explains how redaction works, the critical mistake to avoid, and how to redact a document safely.
Redaction is the act of permanently removing specific information from a document while leaving the rest intact, so you can share a document that originally contained things the recipient must not see. It is used constantly with legal filings, financial documents, medical records, and any file being released publicly or to a third party.
The goal is selective disclosure: keep the document useful and complete except for the precise details that need to stay private, which are removed beyond recovery.
The most important thing to know about redaction is also the most common error: simply drawing a black box or coloured highlight over text does not remove it. In many cases the original words survive underneath the box and can be copied, selected, or revealed by anyone who knows to try — a mistake that has caused real and serious information leaks.
True redaction removes the underlying content itself, not just its appearance, so there is nothing beneath the black mark to recover. When you redact, you must be confident the tool is deleting the content rather than merely covering it. This distinction is the whole point of doing redaction properly.
Work methodically through the document and mark every piece of information that must be hidden — not just the obvious ones, but repeated instances and details that appear in headers, footers, or footnotes. A single missed occurrence can defeat the entire effort.
Pay attention to less obvious places where sensitive data hides: a name in a page header, an account number in a reference line, or details inside an image. Redaction needs to cover every appearance of the information, not just the first one you noticed.
After redacting, review every page of the document before sharing it. Confirm that each redaction is in place, that nothing sensitive remains visible, and that you have not missed an instance. This final check is essential, because once a document is shared, any oversight is out of your hands.
It is also worth checking that the redactions have not accidentally removed content you needed to keep. The aim is a document that is complete and useful except for precisely the details that had to go — no more and no less.
Redaction often works alongside other tools. You might redact sensitive details and then extract only the relevant pages to share, so the recipient sees a focused, cleaned document. For a document containing private information that should also stay confidential as a whole, you might redact specific details and protect the file with a password.
Keep the original, unredacted document securely for your own records, since redaction is permanent in the shared copy. The redacted version is what you release; the original remains your complete reference, stored where only you can access it.