How to Redact a PDF: Black Out Sensitive Text for Free

You are about to share a contract with a third party, but it contains your Social Security number on page three. Or you need to publish a government report, but it includes personal phone numbers and email addresses that must be removed first. Or maybe you are responding to a legal discovery request and need to black out privileged information before handing over documents.

Whatever the reason, you need to redact a PDF — permanently remove sensitive text so that no one can ever read it, copy it, or extract it. This is not optional. In many cases, it is a legal requirement. And doing it wrong can have serious consequences.

This guide explains what real PDF redaction means, why most people get it dangerously wrong, and how to do it properly using free tools — starting with the safest and most private method available.

Why PDF Redaction Matters

Redaction is the process of permanently removing sensitive information from a document before it is shared, published, or archived. It is not just about privacy — it is often a legal obligation. Here are the most common scenarios where redaction is required:

• GDPR and data privacy compliance. If you are sharing documents that contain personal data of EU citizens, GDPR requires you to remove or anonymize that data before disclosure. Failing to do so can result in fines of up to 4% of annual global revenue.
• Legal discovery and court filings. When producing documents in litigation, attorneys must redact privileged information, trade secrets, and irrelevant personal data. Courts take redaction failures seriously — they can lead to sanctions or mistrials.
• Public records and FOIA requests. Government agencies routinely redact classified information, personal identifiers, and law enforcement details before releasing documents to the public.
• Sharing contracts and agreements. Before sending a contract to a new partner or vendor, you may need to black out pricing terms, confidential clauses, or personal information from previous parties.
• Medical and financial documents. HIPAA-protected health information and financial account numbers must be removed before documents are shared outside their original context.
• Removing personal identifiers. Social Security numbers, tax IDs, phone numbers, email addresses, home addresses, and signatures should all be redacted before a document reaches anyone who does not need that information.

Redaction vs. Covering Up: The Critical Difference

This is the single most important thing you need to understand about PDF redaction, and the reason most people get it wrong: drawing a black rectangle over text is NOT redaction.

A PDF is not a flat image. It is a structured file format that stores text as discrete, selectable data objects — separate from what you see rendered on screen. When you use a PDF annotation tool to place a black box over a Social Security number, you are adding a visual layer on top of the text. The text itself is still there, sitting in the PDF file, fully intact.

Anyone can remove that black box. Anyone can select the text underneath and copy it. Anyone with a basic PDF reader can extract every word you thought you had hidden. The black rectangle is a costume, not a deletion.

Real-World Redaction Failures

This is not a theoretical risk. It has happened repeatedly, with serious consequences:

• The U.S. Department of Justice released court filings related to Paul Manafort in 2019 where "redacted" sections were simply black rectangles placed over text. Journalists copied and pasted the hidden text within minutes of the document being published, revealing sensitive details about alleged contacts with Russian intelligence. The information spread across every major news outlet within hours.
• The TSA published a redacted version of its airport screening procedures manual. The redaction was done using black highlight in a word processor before converting to PDF. The underlying text was fully readable by simply removing the highlighting, exposing detailed security protocols to the public.
• Multiple law firms have been sanctioned by courts for submitting "redacted" documents where the underlying text was recoverable. In some cases, this led to the inadvertent disclosure of client privileged information — a serious ethical violation.

The lesson is clear: if the original text data still exists in the PDF file, your redaction has failed. It does not matter how it looks on screen. What matters is what the file actually contains.

What True Redaction Requires

Genuine PDF redaction must do one of two things: either surgically remove the text objects from the PDF's internal data structure, or convert the page to a flat image so that no selectable text remains at all. The second approach — rendering to an image — is the most reliable because it eliminates any possibility of hidden text surviving in the file.

This is exactly the approach that AllPDF.tools uses. When you redact a PDF with our tool, each page is rendered to a high-resolution image with your redaction boxes applied, and then those images are assembled into a new PDF. The original text data is not carried over. There is nothing underneath the black boxes — because the text was never transferred to the new file in the first place.

Method 1: Redact with AllPDF.tools (Free, Private, Browser-Based)

The fastest and most private way to redact a PDF is with AllPDF.tools Redact. Your file never leaves your device — all processing happens locally in your browser. Here is how it works:

1. Open the Redact tool. Go to AllPDF.tools Redact and upload your PDF. You can drag and drop or click to browse. The file is loaded entirely in your browser — nothing is sent to any server.
2. Navigate to the page with sensitive content. Use the page navigation controls to find the pages that need redaction. Each page is rendered as a preview so you can see exactly what you are working with.
3. Draw black boxes over sensitive areas. Click and drag to draw redaction rectangles over any text, numbers, images, or other content you want to permanently remove. You can draw multiple boxes on each page and resize or reposition them as needed.
4. Review your redactions. Scroll through all pages and verify that every piece of sensitive information is covered. Take your time — once the PDF is generated, the redaction is permanent.
5. Download the redacted PDF. Click the download button. The tool renders each page as a high-resolution image with your redaction boxes burned in, then assembles those images into a clean new PDF. The original text data does not exist in the output file.

Because the tool converts pages to images before rebuilding the PDF, the text under your redaction boxes is permanently and irreversibly gone. There is no hidden layer, no recoverable data, and no way to undo the redaction. This is exactly how redaction should work.

Method 2: Adobe Acrobat Pro (Paid)

Adobe Acrobat Pro includes a dedicated redaction tool used widely in professional and legal workflows. Unlike simple annotation tools, Acrobat's redaction feature removes the underlying text data from the PDF — which is the correct approach, and the same approach our browser redact tool takes: the sensitive bytes are gone from the file, not just visually covered.

1. Open your PDF in Adobe Acrobat Pro (requires a paid subscription — currently around $22.99/month).
2. Go to Tools → Redact to activate the redaction toolbar.
3. Use "Mark for Redaction" to highlight text, areas, or entire pages you want to remove.
4. Click "Apply Redactions" to permanently delete the marked content from the file. Acrobat will warn you that this action is irreversible.
5. After applying, use "Sanitize Document" to also remove metadata, hidden layers, comments, and other embedded data that might contain sensitive information.

Acrobat Pro's redaction is thorough and legally defensible. However, it requires a paid subscription, it is a desktop application that must be installed, and the file is processed locally on your machine. If you need a free, browser-based alternative that achieves the same permanent result, AllPDF.tools is the better choice for most people.

Method 3: Print, Black Out with Marker, Scan Back (Old School)

This method sounds absurd in 2026, but it is actually one of the most foolproof redaction techniques — and it is still used by law enforcement, intelligence agencies, and legal departments when the stakes are high enough.

1. Print the PDF on paper at full quality.
2. Use a thick black permanent marker to physically black out every piece of sensitive information. Use multiple passes to ensure nothing is readable when held up to light.
3. Scan the redacted pages back into a new PDF using a scanner or a phone scanning app.

The result is a flat image-based PDF where the redacted content is physically destroyed. There is no digital text layer, no metadata from the original, and no way to recover what was under the marker. The downsides are obvious — it is slow, it degrades document quality, and it does not scale. But for a handful of highly sensitive pages, it works perfectly and requires zero technical knowledge.

What Should You Redact?

When reviewing a document before sharing, look for these categories of sensitive information:

• Full names of individuals who should not be identified in the shared context.
• Home and business addresses — street addresses, apartment numbers, postal codes.
• Social Security numbers and tax IDs — even partial numbers (last four digits) can be sensitive depending on context.
• Phone numbers — personal mobile, home lines, direct office extensions.
• Email addresses — especially personal email addresses that were not intended for the recipient.
• Financial information — bank account numbers, routing numbers, credit card numbers, salary figures, transaction amounts.
• Signatures — handwritten or digital signatures that could be forged or misused.
• Medical information — diagnoses, prescription details, patient identifiers, insurance policy numbers.
• Dates of birth — often used as identity verification; should be redacted when not needed by the recipient.
• Government-issued ID numbers — passport numbers, driver's license numbers, visa details.
• Internal reference numbers — case numbers, employee IDs, or internal codes that could reveal organizational information.

Best Practices for PDF Redaction

Redacting a PDF is not just about drawing black boxes. Follow these practices to ensure your redaction is complete and defensible:

• Always verify the redaction worked. After generating your redacted PDF, open it and try to select text in the redacted areas. If you can highlight or copy text behind a black box, the redaction failed. With AllPDF.tools, this will never happen because pages are converted to images — but always verify regardless of the tool you use.
• Flatten the PDF after redacting. Flattening merges all layers into a single flat image layer, eliminating any possibility of hidden content. AllPDF.tools does this automatically by rendering to images. If you use other tools, run the file through a flatten step afterward.
• Keep an unredacted copy privately. Always save the original, unredacted version in a secure location before you begin. You may need to reference the original information later, and you cannot undo a proper redaction.
• Remove metadata too. PDF files contain metadata — author name, creation software, timestamps, and sometimes revision history. After redacting visible content, consider also stripping metadata if the document will be shared publicly.
• Redact all instances, not just the first one. A name or number might appear on multiple pages — in headers, footers, signature blocks, or body text. Search the entire document to find every occurrence before finalizing.
• Do not rely on cropping. Cropping a PDF changes the visible area but usually does not delete the content outside the crop boundary. The hidden content can often be recovered by adjusting the crop settings. Cropping is not redaction.

Frequently Asked Questions

Is the redaction permanent?

When done correctly, yes. With AllPDF.tools, each page is rendered as a flat image with the redaction boxes applied before the new PDF is created. The original text is never written to the output file. There is no undo, no hidden layer, and no way to recover the redacted content. This is permanent and irreversible — which is exactly what you want.

Can someone undo my redaction?

Not if you used a proper redaction tool. If the tool converts pages to images (like AllPDF.tools does), there is no text data to recover. If the tool only placed a black rectangle as an annotation over existing text, then yes — anyone can remove the annotation and read the original text. This is why the method matters. Always verify by trying to select text in the redacted area of your output file.

Does redaction work on scanned PDFs?

Yes. Scanned PDFs are already image-based, so they typically do not contain selectable text in the first place. Drawing redaction boxes over a scanned PDF and rendering it to a new image-based PDF is perfectly effective. The visual content under the box is destroyed when the page is re-rendered. If the scanned PDF has an OCR text layer, the rendering process also removes that layer.

Should I flatten the PDF after redacting?

It is a good practice, yes. Flattening merges everything into a single image layer and removes any remaining interactive elements, annotations, or hidden text. AllPDF.tools automatically produces a flattened result because it renders pages to images. If you use another redaction tool, flattening afterward adds an extra layer of safety.

Is my file uploaded to a server when I use AllPDF.tools?

No. AllPDF.tools processes everything locally in your browser using JavaScript. Your PDF file never leaves your device, it is never transmitted over the internet, and no copy is stored anywhere. This makes it safe to use for confidential, legal, medical, and financial documents.

Can I redact just one page of a multi-page PDF?

Yes. With AllPDF.tools, you can navigate to any specific page, draw redaction boxes only on that page, and leave all other pages untouched. The output PDF will contain all pages — with redaction applied only where you drew boxes.