Security and privacy

How to Redact a PDF So the Text Is Really Gone

Updated 2026-09-17 · 2 min read

The most common data breach involving a PDF is not a hack. It is someone drawing a black box over a name in a markup tool and sending the file. The text is still there, underneath, and copy-paste reveals it in one second.

Real redaction removes the content from the file. Here is the difference and how to do it correctly.

PDFfont edits PDF text in the document's own embedded font — no white cover boxes.

Edit a PDF

Why black boxes fail

A rectangle is just another object drawn on the page. The original text object stays in the content stream, fully intact and fully selectable. Select-all and paste into a text editor, or run any extraction tool, and the redacted content appears in plain view.

How proper redaction works

The text objects inside the marked area are deleted from the content stream before the file is written. Then, and only then, is the black mark drawn. Nothing remains to copy because nothing remains.

Before you send

Open the redacted file, try to select the area, and search for the redacted word. Zero results means the job is done. Also check metadata and attachments — sensitive text hides in document properties surprisingly often.

Frequently asked

Can redacted text be recovered?

Not when the text is removed from the content stream rather than covered. There is nothing to recover.

Can I redact a scan?

Yes — for image-only pages the pixels in the marked area are removed.

Does redaction work on whole pages?

Yes, you can mark any region on any page, and delete pages entirely.

Try it on your own document

$1 for 7 days of unlimited editing and downloads, then $5 a month or $29.99 a year. Cancel anytime.

See pricing