How to Redact a PDF: Remove Sensitive Information Permanently

The Dangerous Misconception About PDF Redaction

Many people redact a PDF by drawing a black rectangle over sensitive text. This hides the text visually, but the original text remains in the PDF's underlying data. Anyone can:

• Remove the black box annotation in any PDF editor
• Select all text (Ctrl+A) and copy — the hidden text copies to clipboard
• Search for the supposedly hidden text with Ctrl+F
• Inspect the raw PDF data to read the original content

High-profile data leaks have occurred exactly this way, including leaked government documents where journalists simply selected and copied text beneath "redacted" black boxes.

True redaction permanently deletes the content from the file. The area is replaced with a static black bar in the page image — there is no underlying text to recover.

Method 1: Adobe Acrobat Pro (Industry Standard)

Step 1: Mark for redaction

1. Open PDF in Acrobat Pro
2. Tools → Redact → Mark for Redaction
3. Click and drag to select text or image areas
4. Selected areas show a red highlight (not yet applied)
5. Right-click a marked area → Redaction Properties to customise colour or overlay text ("REDACTED")

Step 2: Apply redactions

1. Click Apply Redactions
2. Confirm the warning — this cannot be undone
3. Click OK

The marked content is now permanently deleted.

Step 3: Sanitize After redacting, also sanitize to remove hidden metadata that might reference the original text:

1. Tools → Redact → Sanitize Document
2. Save

Method 2: Preview on Mac (macOS Monterey+)

1. Open PDF in Preview
2. Show Markup Toolbar (pencil icon)
3. Click the Redact tool
4. Drag over text to redact
5. Save

For legally sensitive documents, prefer Adobe Acrobat Pro which is certified for legal redaction use.

Method 3: Batch Redaction (Acrobat Pro)

For repeated text (name, account number) across many pages:

1. Tools → Redact → Find Text & Redact
2. Search for the text string (supports patterns: phone numbers, credit card numbers, SSNs)
3. Review all matches
4. Apply redaction to all instances at once

Far faster than marking each occurrence manually.

Verifying Your Redaction Worked

1. Select the redacted area: Drag over it — you should not be able to highlight or copy text
2. Search for the text: Ctrl+F → search for a word you redacted → zero results means success
3. Check with a text extractor: Extract all text from the PDF and verify the removed content is absent

What to Redact Before Sharing Documents

Personal identifying information (PII):

• Full name + address combinations
• National ID, passport, or social security numbers
• Date of birth, phone numbers, personal email
• Bank account and credit card numbers
• Medical record numbers

Legal and commercial:

• Trade secrets and proprietary formulas
• Settlement amounts
• Attorney-client privileged communications

Technical documents:

• Internal IP addresses, server names, credentials
• API keys visible in screenshots
• Internal code paths and configuration values

Redaction vs Sanitization vs Deletion

Best practice: redact specific content, then sanitize to clean residual references in metadata and thumbnails.

Frequently Asked Questions

Can redacted content ever be recovered? When done correctly using proper redaction tools, no. True redaction permanently deletes content from the PDF file structure.

Do I need special software? For legal and regulatory use, yes — Acrobat Pro is the standard. For less critical uses, verify results with any method you use.

Can I redact images? Yes — the rectangle selection tool works on images. The selected area is permanently deleted.

Summary

Never cover text with a black annotation box and call it redacted — the original remains readable. True redaction permanently deletes content. Use Adobe Acrobat Pro: Mark → Apply → Sanitize. Verify by searching for the removed text and attempting to select the redacted areas. For repeated text across many pages, use Search and Redact for efficient batch processing.