How to Redact Sensitive Information in a PDF (and Why a Black Box Isn’t Enough)

You need to send a contract, an invoice or a report, but it contains data the recipient shouldn’t see: account numbers, addresses, salaries, client names. The usual reaction is to draw a black rectangle over it. The problem is that, in many cases, the text is still underneath and anyone can copy it. To truly hide information you need to redact the PDF.

Covering Isn’t the Same as Redacting

When you draw a black shape over text in a regular editor, you only add a visual layer. The original text stays in the file: it can be selected, copied, searched or recovered by moving the shape. There have been well-known cases of official documents leaking because of this mistake.

True redaction removes the selected content from the file and replaces it with an opaque block. What was underneath no longer exists.

How to Redact a PDF With PDFcrea

1. Open the Redact PDF tool.
2. Upload your document.
3. Select the areas or text you want to remove with your mouse.
4. Review every page so you don’t miss any occurrence of the data.
5. Click Apply redaction and download the PDF.

Tip: after redacting, open the file and try searching (Ctrl+F) for the removed data. If it doesn’t show up, the redaction worked.

What Information to Redact

Data type	Examples
Personal data	ID or passport numbers, date of birth, address, phone
Financial data	Account numbers, IBAN, cards, salaries
Health data	Diagnoses, treatments, medical reports
Business information	Prices for other clients, margins, supplier names
Signatures	Handwritten signatures on documents to be published

Don’t Forget Hidden Information

A PDF may contain data you can’t see at a glance:

• Metadata: author name, company, software used and dates.
• Comments and annotations left over from a review.
• Hidden layers or white text on a white background.
• Cropped areas: cropping a page doesn’t remove the content outside it.
• Embedded file attachments.

Check these elements before sharing documents with sensitive information.

Best Practices

• Redact a copy and keep the original somewhere safe.
• Find every occurrence of a piece of data: a name may appear in the header, the body and a table.
• Check images too: a scanned ID inside the PDF is an image, not text.
• Combine measures: redact what the recipient doesn’t need and password-protect what they should see.
• Share only what’s needed with Extract pages.

When Redaction Is Essential

• Publishing documents online or on a transparency portal.
• Responding to information requests or audits.
• Sharing sample contracts or invoices as templates.
• Sending legal or administrative documents containing third-party data.

Frequently Asked Questions

Can redaction be undone?

Not in the redacted file. That’s why it’s essential to keep the original and review carefully before applying it.

Does it work on scanned PDFs?

Yes. In a scan, the selected area of the image is replaced with an opaque block.

Does the rest of the document change?

No. Only the areas you selected are modified; the rest of the content stays the same.

Conclusion

A black rectangle doesn’t protect your data—true redaction does. Permanently remove sensitive information, check hidden data and verify the result before sharing. Protect your privacy with PDFcrea Redact PDF.