A Black Box Over Text Is Not Redaction
Drawing a black rectangle over PDF text does not remove it. Learn why covered text can still be copied, and what true redaction does instead.
↑↓ to navigate · Enter to open · Esc to close
Remove sensitive content for real — marked pages are rebuilt as images, in your browser.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
Drop a PDF here or click to browse. One PDF at a time, up to 50 MB. Everything is processed on this device only — no file is uploaded.
There is a wrong way to redact a PDF, and it is the way most people first try: draw a black rectangle over the sensitive words. The page looks safe. It is not. The text is still sitting in the file underneath the rectangle — selectable, copyable, searchable, and recoverable by anyone who deletes the shape or simply copies the page's text into another document. Real incidents, including court filings released with readable "redacted" passages, have come from exactly this mistake. This tool redacts the other way: it removes the content itself.
The method is blunt and provable. Any page where you have drawn a redaction region is rendered to a picture at the resolution you choose (150 DPI, or 200 for print), your regions are painted solid black onto that picture, and the page is rebuilt in the output as that single full-page image. The original page — its text, its fonts, its content stream — never reaches the output file at all, so there is nothing underneath the black to recover, for anyone, with any tool. Pages where you drew nothing are copied across untouched, so their text stays real text. The output document is also built from scratch, which means the source file's title, author and other metadata are not carried into it. Everything runs in your browser; a document sensitive enough to redact is the last file that should be uploaded to a stranger's server, and here it never is.
Take a two-page A4 letter (595 × 842 points) whose first page carries a reference number at the top: the words occupy the area from 40 to 230 points across and 750 to 795 points up from the bottom-left corner. Draw one region over exactly that area on page 1 and nothing on page 2, and apply at the default 150 DPI. The tool's plan is then: rasterise page 1, copy page 2. Page 1 is rendered at 150 DPI — a 1,240 × 1,755 pixel image — the region is painted black on it, and the page is rebuilt as that image. In the output, extracting page 1's text returns nothing at all: the whole page is a picture, so the reference number is not merely covered but absent from the file. Page 2, copied untouched, still yields its full text. A pixel read from the middle of the black region is (near) (0, 0, 0) — JPEG encoding keeps it within a few points of pure black — while a pixel in an unmarked corner of the same page stays white, above 240 on every channel. Each figure in this walkthrough is asserted by the tool's automated test suite, so the example cannot quietly drift away from the code.
A drawn rectangle is a shape sitting above text that remains in the file, selectable and recoverable. Here, a marked page is rendered to an image, painted, and rebuilt as that image alone — the original text never enters the output, so there is nothing underneath the black for anyone to recover.
No. On a marked page the output contains only a JPEG image of the page as it looked with the regions painted black. The original content stream was discarded, not covered. (Unmarked pages keep their real text by design, so mark every page that carries the sensitive content.)
That is the mechanism that makes the redaction real. Converting the page to a picture is what destroys the text layer on that page. Pages you did not mark are copied as ordinary pages and keep selectable text.
No. The output document is built from scratch, so source metadata such as title and author is not carried into it.
No. Your browser does the rendering, the painting and the rebuilding, and you take the result away as a download. Nothing is transmitted anywhere, and once the page has loaded, the tool runs with no connection at all.
150 DPI, the default, is clear on screen and keeps the file smaller. Choose 200 DPI when the rebuilt pages will be printed, or when the original page carries small print you need to stay legible — accepting a larger file in exchange.
Overlay text, rectangles, lines and images onto any page of a PDF, placed by clicking a live preview — processed in your browser.
LivePassword-protect a PDF with AES encryption and set print, copy and edit permissions — all in your browser.
LiveRemove password protection from a PDF you own — enter a password that opens it, get a clean unprotected copy.
LiveDiff two PDFs page by page at word level: counts of added, removed and unchanged words, similarity scores and highlighted changes.
LivePrefer everything on one page? The original PDF Toolkit merges, splits and rearranges with one shared file list. The full suite is indexed on the PDF Tools hub.
Open the Redact PDF page and choose a PDF from your device. Everything runs in your browser — the file never leaves your device. You mark the regions that contain sensitive content, such as names, account numbers, or addresses, and the tool removes that content for real. Pages with marked regions are rebuilt as images, so the covered text is genuinely gone from the output file rather than hidden underneath a black rectangle that could be peeled away. You choose a rendering resolution of 150 or 200 DPI for the rebuilt pages: higher resolution keeps small print more legible, while lower resolution keeps the file smaller. The result downloads as a new PDF, and your original file is left untouched so you can redo the job if you mark the wrong region.
Jordan, a fictional HR assistant, must share a meeting report that contains one employee's private phone number and home address. Jordan opens the tool, selects the report, and marks the two regions containing those details. The tool rebuilds that page as an image with the marked areas removed, while the rest of the report stays readable. Before sending anything, Jordan opens the downloaded file, searches it for the phone number, and confirms nothing comes up. Only then does Jordan email the redacted copy to the wider team, keeping the original in a restricted folder.
Redaction must be permanent removal, not a black box: this tool rebuilds marked pages as images precisely because a drawn rectangle over live text can be removed by anyone with a PDF editor. That rebuild has a cost — text on a rebuilt page becomes an image, so it can no longer be selected, searched, or copied. Redaction also only covers what you mark, so a detail repeated elsewhere in the document, in a header, or in a second copy of the file will still be visible unless you catch it. Always search the output for the sensitive strings before sending, and remember that copies you already shared cannot be recalled by redacting a new one.
Because the page was rebuilt as an image to make removal permanent. Searchable text and removable text are the same thing here — keeping one would keep the other.
Choose 200 DPI when the page has small print you need to stay legible, and 150 DPI when the document is mostly large text and you want a smaller file.
Yes. Mark exactly the regions that hold sensitive content, and only pages with marked regions are rebuilt; the rest of the document is left as it was.
Open the output, search it for every sensitive name, number, and address you meant to remove, and glance at each rebuilt page. A two-minute check is the whole point of the exercise.
Drawing a black rectangle over PDF text does not remove it. Learn why covered text can still be copied, and what true redaction does instead.
Preparing a PDF for disclosure? Remove names, addresses, and account numbers for real with a careful redaction workflow, then verify before sending.
Never send a redacted PDF on trust. Run these select, copy, search, and extraction checks on the exact file you intend to share.