The dangerous myth of the 'black highlighter'
If you've ever redacted a PDF by drawing a black rectangle over sensitive text — congratulations, you've created one of the most common security failures in document handling. The text underneath the black box is still there. Anyone who opens the PDF in a text editor, copies text with Ctrl+A Ctrl+C, or runs it through any PDF text-extraction tool can read what you thought you hid.
This isn't a hypothetical. There are documented cases of US government agencies, law firms, and Fortune 500 companies accidentally releasing 'redacted' PDFs where the redaction was just visual overlay — not data removal. Journalists and researchers routinely scan published redacted documents for exactly this kind of leak.
Real redaction is a two-step process: (1) remove the text from the PDF's content stream entirely, and (2) optionally draw a visual marker (black box, 'REDACTED' label) in its place so readers know something was removed. Both steps are required for true redaction. Step 1 alone is invisible; step 2 alone is fake.
Step-by-step: Permanently redact a PDF with PrivacyScanPDF
PrivacyScanPDF's redaction tool does both steps in one operation. The text is removed from the PDF's content stream (so no copy-paste, no text extraction, no search can find it), and a black rectangle is drawn over the area so readers see that something was redacted. The output is a new PDF — your original is unchanged in case you need to redo the redaction.
- 1Open the Redact PDF tool at /?mode=redact-pdf.
- 2Drop in your PDF. The tool reads the file locally and renders it page-by-page.
- 3For each piece of sensitive content: click and drag a rectangle over the text. The tool highlights the area in red while you're selecting — it'll appear as solid black in the final PDF.
- 4Review all your redaction rectangles. You can delete one by clicking it and pressing Delete.
- 5Click 'Apply Redaction'. The tool removes the underlying text from the PDF content stream, draws black rectangles in their place, and downloads the new PDF.
What gets removed vs. what doesn't
Text redaction removes the actual character data from the PDF — the bytes that spell out 'John Smith 555-1234' are deleted from the file. After redaction, no text-search tool, copy-paste operation, or PDF-to-Word conversion will recover that content. It's gone.
Image redaction (blacking out a photo or screenshot embedded in the PDF) works differently. The image is replaced with a solid black rectangle of the same dimensions — the original image data is removed. This works for photos, signatures, and screenshots.
What redaction does NOT remove: PDF metadata (author, creation date, modification history, embedded comments). For full sanitization, run the redacted PDF through the Remove Metadata tool afterward. That strips everything except the visible page content.
OCR'd scanned PDFs are a special case. If the PDF was originally a scanned image with an invisible OCR text layer, redacting the visible text removes the OCR layer but not the underlying scan image — which may still show the text visually. For scanned PDFs, use the redact-image mode to black out the visible text in the scan itself.
Verifying your redaction worked
After applying redactions, always verify. Three quick checks: (1) Open the redacted PDF in any reader, select all text on the redacted page (Ctrl+A), copy, paste into a text editor — does the redacted content appear? It should not. (2) Search the PDF (Ctrl+F) for a distinctive word from the redacted content — it should not be found. (3) Open the PDF in a different reader than the one you used to redact (e.g., redact in PrivacyScanPDF in Chrome, then open the result in Firefox or Adobe Reader) — the redaction should hold across all readers.
If any of these checks reveal the redacted content, your redaction failed. Re-do it with a different tool. Do NOT share the PDF until all three checks pass.
For high-stakes redactions (legal documents, government records, anything that could cause real harm if leaked), consider hiring a professional redaction service. They use specialized tools that perform byte-level verification of redaction success. Browser-based tools like PrivacyScanPDF are excellent for everyday use but not a substitute for professional redaction of legally sensitive material.
When to redact vs. when to remove the content entirely
Redaction is the right choice when you need to share a document but hide specific pieces of information — a contract with the price blacked out, a court filing with witness names removed, a research dataset with participant identifiers stripped. The reader sees that something was removed and trusts you didn't alter the surrounding context.
Removing content entirely (deleting pages, deleting paragraphs without a marker) is appropriate when you don't need to signal that something was removed — for example, removing a draft section before sharing a final report, or deleting an appendix that wasn't supposed to be in the document. Use the Split PDF or Delete Pages tools for this.
The advantage of redaction over removal: it preserves the document's structural integrity. Page numbers stay the same, references to 'paragraph 3 on page 4' still work, the document looks the same to the reader except for the blacked-out bits. Removal changes the pagination and breaks references.