How to redact a PDF so the text can't be recovered

The most common redaction mistake is also the most dangerous: drawing a black box over text instead of removing it. The words are still there underneath, and anyone can get them back.

Covering text is not redacting it

When you place a black rectangle over a name or a number in a PDF, you usually add a shape on top of the page. The original text stays in the file. A reader can select and copy it, delete the box, or extract it with a script in seconds. The same is true of highlighter tools set to black, and of "flattening" that doesn't rebuild the page.

True redaction removes the underlying content so there is nothing left to recover, then rewrites the page around the gap.

Don't forget the hidden copies

Sensitive details often live in more than one place in a PDF:

• the visible text on the page;
• the document metadata (author, title, keywords, edit history);
• form fields, comments and annotations;
• attachments embedded in the file.

Proper redaction has to clear all of these, not just the words you can see. (For metadata specifically, see our guide on removing metadata from a PDF.)

A safe redaction checklist

1. Find every occurrence. A name or account number usually appears more than once. Search the whole document, every page.
2. Remove, don't cover. Use a tool that deletes the underlying text rather than drawing over it.
3. Strip the metadata and any attachments or form data.
4. Review the result. Open the exported file, try to select text where the redactions are, and confirm nothing comes back.
5. Keep your original. Export a separate clean copy so the source stays intact.

How Anonyma does it

Anonyma reads your document on your own computer, highlights the personal information it finds, and lets you review every page. When you export, it removes the underlying text and scrubs the metadata, then produces a clean copy while leaving your original untouched. Automatic detection is never perfect, which is why the review step is built in: you confirm what gets removed before anything is exported.

Redaction reduces the risk of sharing a document, but it is one control, not a guarantee: always review the final file before you send it.