Redacting PDFs Safely: What Most Online Tools Get Wrong

2026-05-12 · 7 min read

Black rectangles aren't enough. Here's how true PDF redaction works — and why it has to happen on your device.

Every few months a major news story breaks because someone "redacted" a PDF by drawing black rectangles over the sensitive text and shipped it as-is. The text is still in the file. Anyone can select it, copy it, paste it into a notepad, and read it. Redaction is not annotation. It is destruction.

The two failure modes

The first failure is the black-rectangle annotation — a visual overlay that hides the text on screen but leaves the underlying text stream untouched. The second is the "flatten and re-render" approach used by some online tools, which destroys searchable text everywhere in the document, not just the redacted regions.

How real redaction works

A correct redaction does three things: (1) removes the underlying text operator from the PDF content stream, (2) overlays an opaque shape so the visual gap is filled, and (3) strips any matching entries from optional metadata streams like text-extraction layers and accessibility tags.

Why it has to happen on your device

A redacted PDF is by definition a confidential document. Uploading it to a third-party server to redact it defeats the entire purpose — you've already exposed the unredacted version to whoever runs the server.

Verification checklist

• Open the redacted PDF in a different reader and try to select the black bars — if text highlights, redaction failed
• Copy the page text into a notepad — the redacted content should be missing, not just hidden
• Search the document for a unique word you redacted — zero hits is the only acceptable result

← Back to all articles