How to redact a PDF so the text is actually gone (not just hidden)
A black rectangle over a word is not redaction. The text underneath is still in the file. Here is how to remove it for good, and how to confirm it worked before you send anything.
The most common way sensitive documents leak is not a hack. It is a black box drawn over text that was never actually removed.
The mistake that leaks the most documents
You open a PDF, draw a filled black rectangle over a name or a number, and save. It looks redacted. The problem is that a rectangle is a shape sitting on top of the page. The text underneath is still there, in the file, fully intact.
Recovering it is trivial. Select all and copy, then paste into a text editor, and the "hidden" words come straight out. Or open the file in a different viewer. Or pull the text layer out with a one-line script. The same is true of highlighter tools, white boxes, and most word-processor "black out" tricks.
This is not a rare edge case. Courts, agencies, and large companies have all published documents with "redacted" passages that anyone could recover by copy and paste. If the content is still in the file, it is not redacted.
What real redaction actually does
Real redaction removes the underlying content instead of covering it. Two things have to be true:
- The text and image data under the mark is deleted from the file, not painted over.
- The result cannot be reversed by switching viewers, selecting text, or inspecting the file.
The reliable way to guarantee the second point is to flatten each redacted page, so the output is an image of the page with the sensitive content already gone. There is no separate text layer left to leak. This is a claim about what the tool does to the file, which you can check by re-reading the output, not a promise about any legal outcome.
How to redact a PDF so the text is gone, step by step
- Open your PDF. Drop it onto the redact tool. It loads in your browser, and nothing is uploaded.
- Mark what to remove. Use Auto-detect to find names, Social Security numbers, emails, phone numbers, and dates, then confirm what it found. Draw boxes by hand over anything else you want gone.
- Apply and download. KeptPDF removes the underlying content and flattens each affected page, so the marked text is gone from the file, not hidden behind a box.
How to check that it actually worked
Never take a redaction on faith. After you export, verify it:
- Open the redacted PDF in a different viewer and try to select and copy the area where a redaction was. Nothing sensitive should come out.
- Search (Ctrl+F or Cmd+F) for a name or number you removed. It should not be found.
KeptPDF goes a step further: it re-reads its own output and can show you that zero recoverable characters remain under the marks. On Pro it also exports an audit certificate that records the input and output file hashes and which categories were removed, so you have a record to keep. Tooling reduces what you can miss, but it does not replace your judgment, so always review the result yourself before sharing.