Guide · Redaction

How to check if a PDF redaction worked

A black box on the screen proves nothing. Here is how to find out in a minute whether the words underneath are really gone, by hand or all at once.

To check if a PDF redaction worked, try to get the hidden text back. Search the file for a word that sits under a black box, select everything and paste it into a plain text editor, and look at the document properties. If the words show up, the redaction failed. You can also drop the file into Privacy X-ray, which checks every page for you on your own device.

What a failed redaction looks like

It looks perfect. A solid black bar sits where a name, a number or a whole paragraph used to be. Print it, and the words are gone.

But a PDF stores text as text. When someone draws a black rectangle over a line, in Word, in a PDF editor or with a “redaction” mark that was never applied, the rectangle is a separate object lying on top. The words are still in the file underneath. Search finds them. Select-all and copy picks them up.

Box on top

A rectangle is painted over the words. The words are still in the file, so search, copy and paste can read them.

Text removed

The words are deleted from the file itself. There is nothing under the box to find, search or copy.

Both pages look the same on screen. Only one of them is safe to send.

This has happened on a very public stage. In December 2025, news outlets reported that some redactions in documents released by the US Department of Justice in the Jeffrey Epstein case could be undone by highlighting the text and pasting it into a word processor. The Guardian covered it. The same slip is easy to make in any office, and the check below takes about a minute.

Check it by hand in three steps

You need nothing but the PDF and any PDF viewer.

  1. Search for a word under a box. Open the file, press Ctrl+F (Cmd+F on a Mac) and type a word or name you know is behind a black box. If the viewer finds it, or highlights a match on the box, the text is still in the file. No match is a good sign, not proof: a page that is only a picture has nothing to search.
  2. Select everything and paste. Press Ctrl+A (Cmd+A), then Ctrl+C (Cmd+C), and paste into Notepad or TextEdit in plain text mode. Read what comes out. Any word that should be hidden, sitting in the pasted text, is a failed redaction. You can also drag across a single box and paste just that.
  3. Read the document properties. In your viewer, open File, then Properties. Title, Author, Subject and Keywords can carry the very name you just blacked out. KeptPDF’s metadata tool lists what a file carries.

That catches the common failures, one phrase at a time. It does not scale to a 200-page file where you do not know what to search for.

Or drop the file into X-ray

Privacy X-ray does the looking for you, across every page. Drop a PDF in and it reports:

  • Text hiding under black boxes. It finds boxes added as annotations, including redaction marks that were never applied, and boxes drawn straight into the page, such as a black rectangle added in Word or a PDF editor and then saved as a PDF. It shows you the text it can recover, so you see what a stranger would see.
  • Sensitive details nobody redacted yet. Names, ID numbers and similar details still sitting in the open text, flagged for you to review before you send.
  • Earlier saved versions. If the file keeps older saves inside it, X-ray says so.

It runs in your browser, so the file is not uploaded, and it never changes your file. A page with no readable text is listed as one it could not check, with a button to read it by OCR first.

A clean result is a strong sign, not a guarantee. X-ray does not look inside a black picture pasted over text, and it does not count white boxes as redactions. For anything that matters, look at the pages yourself too.

Questions, answered.

How do I know if a PDF redaction actually removed the text?
Try to get the text back. Search the file for a word that sits under a box, select everything and paste it into a plain text editor, and read the document properties. If the hidden words turn up in any of those, the redaction failed. If none does, that is a good sign, but it is not proof. Privacy X-ray checks every page at once and shows you the exact text it can recover.
Why can text still be there under a black box?
A PDF stores text as text. A black rectangle drawn over it is a separate object sitting on top, so the words are still in the file underneath. Real redaction deletes the text itself, not just the way it looks on screen.
Privacy X-ray found nothing. Is the file safe to send?
It is a strong sign, not a guarantee. X-ray reports pages that have no readable text and tells you it could not check them. It does not look inside a black picture pasted over text, and it does not judge white boxes. Look at the pages yourself before you send anything that matters.
Is my file uploaded when I scan it?
No. The scan runs in your browser, on your device, and the file is not sent to a server. You can check this yourself: open your browser’s developer tools, watch the Network tab while you scan, and your document never appears in a request.
What do I do if the check finds text under the boxes?
Do not send that file. Anyone who has it can read the same text. Open it in the Redact tool, which removes the text under each mark instead of covering it, and run X-ray on the new file before it goes out. X-ray has a button that carries the file straight into Redact.

See what is still hiding in your PDF before you send it.

Scan a PDF with X-ray