To redact a PDF properly, the underlying text must be deleted from the file, not just covered with a black rectangle. Drawing a black box on top hides the words visually, but they usually remain in the PDF and can be copied, searched, or extracted by anyone. A proper redaction removes the text from the content stream so it is gone. You can verify a redaction worked by trying to select and copy the “hidden” area, or by extracting the PDF’s text — if the redacted words appear, the redaction failed.
Redaction failures are a recurring source of leaks: a court filing, a contract, or a report is published with sensitive names or numbers “blacked out,” and someone copies the text straight out from under the boxes. The cause is almost always the same mistake. This guide explains it and shows you how to redact so the text is actually removed — and how to prove it.
The most common way people “redact” is to draw a filled black rectangle over the sensitive text, or to highlight it in black. Visually the text disappears. But in the PDF, the original characters are still there in the content stream, sitting underneath the box. Anyone can select that region and copy the text, run a search, or extract the page’s text with a free tool — and the “redacted” words come right out.
The same is true of a black highlight, a white box over text, or flattening the page to an image at the very end without removing the text first: unless the text itself is deleted, it is recoverable.
Use a text extractor to test a file:
Proper redaction removes the underlying text, then paints the visible mark. In a browser-based editor that does true redaction, the workflow is:
TrulyFreePDF’s editor redacts this way — the text under a redaction is deleted from the file, not merely covered — and because it runs in your browser, the document is never uploaded while you do it.
Text is the usual culprit, but two other places can leak: document metadata (author, title, and other properties) and text baked into images. Redacting the visible text does not touch either. If a document is highly sensitive, also clear its metadata, and remember that words inside a scanned image are part of the picture — covering them means painting over the pixels, and any separate searchable text layer must be removed too.
Redact in your browser, then verify: