PDF Security
How to Permanently Redact a PDF
April 2026 · 6 min read
Why most redactions fail
The most common redaction mistake is covering text with a black rectangle drawn on top of the page. This looks redacted to a human reader, but the underlying text is still present in the PDF. Anyone who opens the file and removes or moves the rectangle - or simply copies all text from the page - can read the supposedly hidden content.
This failure has caused real scandals. Court documents, government releases, and corporate filings have been published with this type of redaction, and the underlying content has been extracted trivially. The error is easy to make because the visual result looks correct in a standard viewer.
True redaction requires replacing the content itself with empty space or a solid fill, not just overlaying a visual cover. The text bytes, image pixels, or vector data must be physically absent from the output file.
What permanent redaction looks like technically
A properly redacted PDF has had the content in the redacted region removed from the page content stream. The page is then re-rendered - flattened - so that the black rectangle or white space is part of the page pixels, not a separate layer on top of recoverable content.
For text-based PDFs, this means the text characters in the redacted area are removed from the content stream and the area is painted over. For image-based PDFs (scans), the image pixels in the redacted region are replaced with solid black or white pixels.
Metadata is a separate concern. Author names, comment history, and revision data embedded in the PDF may reveal information about the redacted content indirectly. True redaction should also strip metadata that might expose the redacted information.
How to redact with PDFsuite
Open /tools/redact and upload your PDF. Select the redact tool and draw rectangles over the content you want to remove. Rectangles can be placed on any page. You can draw multiple redaction areas across multiple pages before applying.
Review your selections carefully. The redaction is permanent and cannot be undone after you save. Zoom in to confirm your rectangles cover exactly the content you intend to remove - not too little (leaving content exposed) and not too much (hiding adjacent content accidentally).
Click Apply Redactions. The tool flattens the page content, removes the covered material from the content stream, and downloads the redacted PDF. Open the output and attempt to select or copy text in the redacted areas. If redaction worked correctly, no text is selectable in those regions.
Verifying the redaction worked
After redacting, open the output file in a PDF viewer and try to select text by clicking and dragging over the redacted area. If the redaction is complete, text selection in that area returns nothing. If you can still select text, the redaction only drew a rectangle without removing the underlying content.
Try copying all text from the page (Ctrl+A, Ctrl+C, paste into a text editor) and search for words you redacted. A successful redaction means those words do not appear in the pasted text.
For regulated industries with legal redaction requirements (legal discovery, FOIA responses, HIPAA), additional verification steps may be required and a purpose-built redaction tool with audit logs may be more appropriate than a general PDF editor.
Metadata after redaction
Even after content redaction, PDF metadata may reveal information. The author field, creation date, modification history, and embedded comment text can contain data related to the redacted content. A document that had "John Smith - Salary $120,000" redacted from the visible page might still have that text in a comment or in the document revision history.
PDFsuite strips standard metadata when you apply redactions. Check the output file properties in your PDF viewer to confirm metadata is clean. In Acrobat, go to File > Properties > Description. In Chrome, open the PDF and check the metadata via DevTools.
For the most thorough redaction, combine the redact tool with the remove-metadata tool at /tools/remove-metadata. Run redaction first, then strip all remaining metadata from the output.
Try it yourself
Process your PDFs in the browser.
All 28 tools. Files never leave your device. $29/year.