Drawing a black box over text adds a black box. The text remains in the content stream, selectable and copyable by anyone who tries.
Test every redacted document before it leaves. Open it, select all, paste into a text editor. If the hidden words appear, the redaction was decorative.
Redaction failures are not rare and they are not the preserve of the careless. Court filings, regulatory submissions and published reports have all leaked this way, often reviewed by several people who each saw a page that looked correctly blacked out.
The reason it keeps happening is that the failure is invisible. A document with fake redactions and a document with real ones are pixel-identical on screen. The difference only shows up if you go looking, and nobody goes looking at something that already looks right.
Why a black box does nothing
A PDF page is a list of drawing instructions executed in order. Place text, place an image, fill a rectangle. The renderer follows them from first to last, so later instructions paint over earlier ones.
Adding a black rectangle appends one more instruction to the end of that list. The instruction that draws the text is still there, earlier in the same stream, unchanged. Anything reading the document rather than looking at it walks the whole list and finds the text exactly where it always was.
The instruction is deleted
- Text and image operators removed from the content stream
- Select-all and copy returns nothing from that area
- File size drops if the removed content was substantial
- Text extraction tools find nothing to extract
- Safe to publish
One more instruction on top
- The text operator is untouched, just painted over
- Select-all and copy retrieves it immediately
- File size unchanged or slightly larger
- Any extraction tool reads it in full
- Has caused repeated public disclosures
The five second test
There is one check that catches nearly every failed redaction, and it needs no special software.
Open the redacted file
In any reader. The one you redacted in is fine, though a different one is a slightly better test.
Select all, then copy
Ctrl+A or Cmd+A, then copy. This asks the document for its text rather than its appearance.
Paste into a plain text editor
Notepad, TextEdit, anything without formatting. If the words you redacted appear in that paste, the redaction did not happen.
Redacting properly
Real redaction removes the underlying content and then, ideally, rewrites the file so nothing is recoverable from an earlier revision. There are two reliable routes.
Use a tool that removes rather than draws
Dedicated redaction features delete the text and image operators inside the marked area and then flatten the result. The important detail is that applying the redaction is a separate, deliberate step from marking it. If a tool lets you save while the marks are still marks, you have a document with annotations rather than a redacted one.
Remove the page entirely
Blunt, completely reliable, and often the right answer. If a page is mostly sensitive, extracting the pages around it produces a document from which that content is genuinely absent, with no operators left behind to recover. The cost is that you lose everything else on the page, which is why this suits appendices and whole sections better than a single paragraph.
What redaction does not cover
Removing the words on the page is necessary and frequently not sufficient. Several other things in the file can give away what you just removed.
- Document metadataTitle and author
- Bookmarks and outlineOften name sections
- Comments and annotationsDiscuss the content
- Form field valuesStored separately
- Attached filesTravel inside the PDF
- Earlier saved revisionsRecoverable in the bytes
Redaction that leaks by implication
A technically perfect redaction can still disclose. The shape of what was removed carries information.
A redacted name whose box is narrow rules out long names. A paragraph reduced to two redacted words in a sentence that otherwise survives can often be reconstructed from context. Redacting one instance of a name while missing another elsewhere in the document defeats the whole exercise. And a table with one redacted cell in a row that otherwise totals correctly gives up the missing number to arithmetic.
Redact so the text is actually gone
Find it, mark it, and remove it from the content stream. All of it in your browser.
Common questions
Verifying that it worked.
01Why is a black box not real redaction?
Because a PDF page is a list of drawing instructions, and adding a rectangle appends one more instruction on top. The instruction that draws the text is still in the file, so anything that reads the document rather than viewing it retrieves the text unchanged.
02How do I check whether my redaction worked?
Open the file, select all, copy, and paste into a plain text editor. If the words you redacted appear in the paste, the content is still in the document. This takes about five seconds and catches nearly every failure.
03Does highlighting text in black redact it?
No. Highlighting adds a coloured annotation over the text and leaves the text itself untouched. The same is true of white boxes, opaque images and setting the text colour to match the background.
04Is deleting the whole page safer than redacting part of it?
It is more reliable, because nothing is left behind to recover. The trade-off is that everything else on that page goes too, so it suits whole sections and appendices better than a single sentence in the middle of a page you need.
05Does redaction remove metadata as well?
Usually not. Redaction operates on page content, while the title, author, timestamps and any annotations live elsewhere in the file. Strip the metadata as a separate step before sending anything sensitive.
06Can redacted content be recovered from an earlier version inside the file?
Yes, if the file was saved incrementally. PDFs can be updated by appending changes rather than rewriting, which leaves previous revisions present in the bytes. Save a fresh copy so only the current state exists in the file you send.