Redacting a PDF means permanently removing sensitive text, names, account numbers, addresses, so no one can ever recover it. Here’s the critical fact most people get wrong: drawing black rectangles over text does not redact it. The text is still in the file, still selectable, still copy pasteable. Proper redaction deletes the underlying text layer. Browse the PDF tools hub for other document tasks, and read on to learn how to redact the right way.
A PDF page has layers: the visible rendering on top and the actual text data underneath. When you draw a black rectangle over a paragraph in a PDF editor or an image tool, you’re only adding a new visual layer on top, the original text remains fully intact in the file. Anyone can select the “hidden” text with their cursor, copy it, or simply delete the rectangle in an editor to reveal everything underneath.
This isn’t theoretical. There have been real, embarrassing public incidents where “redacted” court filings and government documents were un redacted in seconds by copying the text or removing the overlay. If the information matters, a black box is not redaction, it’s decoration.
Real redaction is a two step operation performed by proper redaction tools (built into Adobe Acrobat Pro and similar professional PDF software):
Professional redaction tools also scrub hidden data: metadata (author names, edit history), embedded comments, and OCR text layers in scanned documents. A thorough redaction covers the whole file, not just the visible page.
Never trust a redaction you haven’t tested. Open the redacted file and try these checks:
If any check reveals the hidden text, go back and apply a real redaction, do not just add another black box on top.
A landlord asks for a recent bank statement as proof of income. Your statement is six pages, and it contains far more than the landlord needs: your full account number printed in the header of every page, a partial card number in the account summary, and dozens of personal transactions. The salary credits are the only part that proves income. Here is how to share it safely:
Two finishing touches are worth considering. If you are emailing the file, you can password protect the redacted PDF and send the password separately, so the statement is not readable by anyone who intercepts the message. And if the landlord only needs the page showing your salary credits, do not send all six pages at all split the PDF, redact that single page properly, and send only it. The safest information is the information you never shared.
| Method | Removes the text underneath? | Can the hidden content be recovered? | Verdict |
|---|---|---|---|
| Black rectangle drawn in an editor | No, it is a separate layer on top | Yes, select, copy, or delete the rectangle | Not redaction at all; never use for real data |
| Black highlighter or annotation | No, annotations sit above the content | Yes, annotations can be removed in an editor | Same failure as the rectangle, better disguised |
| Print it, use a marker, re scan | Effectively yes, the result is a flat image | No, if the marker coverage is fully opaque | Works, but slow, ugly, and the scan can still carry an OCR text layer to check |
| A true redaction tool (mark, then apply) | Yes, the characters are deleted from the file | No | The correct method; still verify afterwards |
Scanned documents deserve their own walkthrough, because a scan is a photograph of a page, not text, and that changes where the danger hides. Many scanners and office printers quietly run OCR when they save, embedding an invisible text layer over the image so the file becomes searchable. That invisible layer contains every word on the page, including the ones you are about to cover.
Whichever route you take, finish with the same habit as for digital documents: keep one secure original, share only the verified redacted copy, and check the attachment name before the email leaves. Scanned paperwork tends to be the most sensitive paperwork, IDs, statements, medical letters, so it earns the extra two minutes of verification.
True redaction, deleting the text layer, is a professional feature found in paid tools like Adobe Acrobat Pro. Free PDF editors generally only offer drawing tools, which produce fake redaction (black boxes over live text). For genuinely sensitive material, this distinction matters more than the price: a free black box that leaks the data is worse than useless.
No, and this is the most dangerous misconception about redaction. Highlighting or drawing over text adds a visual cover while the text underneath stays fully present and extractable. Real redaction removes the underlying text data from the file. If someone can select, copy, or search the “hidden” text, it was never redacted.
Yes, scanned PDFs are images, so there’s no text layer to delete unless OCR has been run. If OCR text exists invisibly behind the image, a proper redaction tool must remove both the image region and the OCR text. The safest approach for scans is to redact the image itself and strip any OCR layer, then verify by running fresh OCR on the result and confirming nothing sensitive is recognized.
If redaction was done properly, the text deleted from the file, metadata sanitized, saved as a new file, no, it cannot be recovered from that file. Recovery is only possible when the redaction was fake (overlays) or when an unredacted copy leaks separately. Always keep exactly one unredacted original in a secure location and share only the verified redacted copy.
It depends on the document’s purpose. If the sensitive content spans whole pages and those pages aren’t needed, deleting the pages is simpler and safer. Redaction is for when the document must remain complete and readable except for specific passages, like a court filing where most of the text stays public.