Rohman
How to Redact a PDF So It Stays Redacted
On January 8, 2019, Paul Manafort's defense lawyers filed a court brief with the sensitive parts hidden behind black boxes. Within hours, journalists had highlighted the boxes, pressed copy, pressed paste, and read every word, including the admission that Manafort had shared campaign polling data with a man the FBI tied to Russian intelligence.
Nobody hacked anything. The lawyers had drawn rectangles over the text. The text was still there. If you're about to redact a PDF the same way, with a black highlighter or a filled shape, the document you publish will contain everything you think you removed. Here's why, and how to do it properly.
The Black Box Is a Decoration, Not a Deletion
A PDF page is a stack of instructions: draw this text here, place that image there. Add a black rectangle with a shape or markup tool and you've appended one more instruction on top. The text-drawing instruction underneath is untouched. Select-all reads instructions, not pixels. So do search engines.
This exact failure has embarrassed institutions that should know better, repeatedly. AT&T's lawyers in 2006, in a case about NSA wiretapping of all things: black stripes, text recoverable by copy-paste. The TSA in 2009 published its airport screening manual, the one used by roughly 450 airports, with drawn-on boxes, and the sensitive sections popped right out. In 2011 the UK Ministry of Defence blacked out passages about nuclear submarine safety; anyone with a mouse could extract them.
The NSA's own guidance on the subject says it in one line: sensitive information must be actually removed from the document, not visually hidden or made illegible.
What Real Redaction Requires
Four things, and skipping any one of them has burned someone publicly.
- Remove the content itself. Delete the text and image data, or rasterize the page so no text objects exist at all. Covering is not removing.
- Flatten everything. No annotation layer a reader can select, move, or delete to peek underneath.
- Scrub the hidden data. PDFs carry document properties (author, title, creator), comments, attachments, form data, and sometimes prior revisions of themselves, since PDF edits can be appended rather than rewritten. Scanned PDFs hide one more channel: the invisible OCR text layer that makes them searchable sits under the image, and it holds every word on the page even after you paint over the picture.
- Verify. Select all, copy, paste into a text editor. Search the output for the string you redacted. Open the document properties. Thirty seconds, and it would have saved every organization named above.
Even Perfect Pixels Can Leak
One more failure mode, because it's instructive. When a court released Ghislaine Maxwell's deposition in 2020, the redactions were done properly at the pixel level. But the transcript ended with an alphabetized index of every word, redacted entries included, and an entry's position in the alphabet narrowed the hidden names enough for Slate to reverse many of them within hours.
So after you redact, reread the surrounding text and ask what it still gives away. No tool does that step for you.
The fines are real, too. When the Police Service of Northern Ireland leaked personal data on all 9,483 of its staff through a hidden spreadsheet tab in 2023, the regulator fined it £750,000, and thousands of civil claims followed.
The Part Where You Discover the Price
People searching for Acrobat's redaction tool tend to discover two things in short order. It works properly, marking content and genuinely deleting it, with a sanitize step for the hidden data. And it lives exclusively in Acrobat Pro, at roughly twenty US dollars a month on an annual contract. Not in the free Reader or the free online tools. Not even in Acrobat Standard.
So the next search is "free online redaction tool," which leads somewhere worse. Think about what that workflow is: taking your most sensitive document, the one whose contents you specifically need to control, and uploading the unredacted original to a server you know nothing about. Copies in transit and at rest, retention you'll never get to audit. The whole point of redacting is defeated before the first box is drawn.
Redact Without the Upload
OxygenPDF's Redact PDF tool runs entirely in your browser. The file never leaves your machine, which for this job is the entire point.
It works in two modes:
- Find & Redact searches the document's text and blacks out every match, with the whole text run around it, so a partial match doesn't leave fragments. Type "Kilimnik" once instead of hunting page by page.
- Full Pages blacks out entire pages, for exhibits or attachments that shouldn't survive at all.
Under the hood it takes the most destructive path available, on purpose. Each page is re-rendered to pixels, the black boxes are burned into those pixels, and a brand-new PDF is built from the result. The original text objects don't exist in the output, so the Manafort copy-paste test comes back empty. And because the output is a new document rather than an edited copy, none of the original's metadata, comments, form data, or buried revisions ride along.
The honest trade-off: the result is image-based. Text anywhere in the document is no longer selectable or searchable, and the file can get larger. That's the cost of scorched earth. If you only need to clean document properties or strip scripts from a file without redacting content, Sanitize PDF does the lighter job.
Before You Hit Send
Redact the content, not the view of it. Scrub what travels with the file. Then run the copy-paste test like the last four paragraphs of your career depend on it, because for a few unlucky lawyers, they did.
Redact your PDF in the browser, on your machine, and the unredacted version never exists anywhere but with you.
