How to Redact a PDF Properly (and Avoid Common Mistakes)

Learning how to redact a PDF properly matters because the most common approach — drawing a black box over sensitive text — often leaves the original words fully intact underneath. Real redaction removes the information so it cannot be copied, searched, or recovered. This guide explains the difference and shows you a safe way to do it right in your browser.

Why a black box is not redaction

When you place a black rectangle over a name, account number, or address, you are only covering the pixels on screen. The underlying text is still stored in the PDF. Anyone can select and copy the "hidden" text, open the file in another viewer, or run text extraction and read every word. Even a colored highlight or an image pasted on top behaves the same way — the data is layered over, not deleted.

This is how well-known redaction failures happen. Someone hides a paragraph with a shape, sends the file off, and the recipient copies the text straight out of it. The visual looks clean, but the content leaks.

Two things have to be true for redaction to actually work:

1. The sensitive content must be permanently removed or made unreadable, not just visually masked.
2. The file must be flattened so the masking becomes part of the page image and the original text no longer exists as selectable data.

The safe way to redact

The reliable approach is to cover the sensitive area with an opaque mark and then flatten the document so that mark is baked in and the text beneath it is gone. Flattening merges your edits into the page itself, which is what stops the original words from being recoverable.

You can do this with the whiteout tool. It lets you paint solid blocks over anything you want to hide, and when you export, the result is a fresh PDF where the covered content is no longer part of the text layer.

Here is the step-by-step process:

1. Open your document in the whiteout tool. Your file is processed entirely in your browser and is never uploaded to any server, which matters a great deal when the whole point is to protect sensitive information.
2. Zoom in on the first item you need to hide so you can see its exact edges.
3. Draw a solid block that fully covers the text. Extend it slightly past every edge — a redaction that clips a letter can still reveal part of the word.
4. Repeat for every instance across every page. Sensitive details often repeat in headers, footers, and later references, so scan the whole document, not just the obvious spot.
5. Double-check margins, watermarks, and metadata-heavy areas where identifiers sometimes hide.
6. Export the flattened PDF. The download is your redacted copy.
7. Reopen the exported file and try to select and copy the covered areas. If nothing selectable comes out, the redaction held.

That last verification step is the one people skip, and it is the only way to be sure. Test before you send anything.

Extra precautions worth taking

A few habits make redaction far safer:

• Work on a copy. Keep your untouched original somewhere separate so a mistake never destroys the source.
• Mind the metadata. Names, authors, and edit history can live in a PDF's properties even after the visible text is gone. If that concerns you, check the document details before sharing.
• Watch for images and scans. If a name appears inside a photo or a scanned page, you still need to cover it as part of the image, because there may be no text layer to remove — only pixels.
• Do not rely on font color tricks. Making text white or matching it to the background hides nothing; it is trivially reversible.

If your goal is broader cleanup rather than strict privacy — say, removing a stray note before you print — you might just want to add text to a PDF or make edits in the full editor. Redaction is specifically for information that must never be recovered, so treat it with more care than ordinary editing.

Quick recap

Proper redaction is not about hiding text on screen — it is about removing it. Cover each sensitive item with an opaque block, flatten the file so the original data is gone, and always verify by trying to copy the "hidden" text out of the exported version. Because the whiteout tool runs completely in your browser, your document never leaves your device while you work, which is exactly the assurance you want when the stakes are confidential information.

Take the extra minute to test your result. A redaction you have checked is worth far more than one you only hope is working.