You are about to email a PDF that contains a client's personal phone number, home address, and account details. Before you hit send, you need to permanently black out that information so the recipient cannot see it and cannot recover it by copying text or inspecting the file. Drawing a black rectangle over the text with a markup tool will not work. That rectangle is just an annotation sitting on top of the text. Anyone can delete the annotation and read what is underneath.
True PDF Redaction permanently removes the underlying content from the file. The text is deleted from the PDF's data streams, not covered up. After redaction, the information is gone and cannot be recovered. For any document containing personal information, financial data, or confidential content, redaction is the only method that provides genuine privacy protection.
The Danger of Using Drawing Tools Instead of Redaction
Every PDF viewer includes annotation tools. You can draw rectangles, highlight text, and add text boxes. These tools are for markup and review. They are not for redaction. Annotations sit in a separate layer on top of the page content. The original text remains intact underneath. A recipient can open the PDF, delete the annotation layer, and read everything you thought you had hidden. They can also select and copy the text from the page, which will include the text underneath your black rectangles because the copy operation reads the content layer, not the annotation layer.
This is not a hypothetical risk. News organizations, courts, and government agencies have repeatedly published PDFs with annotation-based redaction and inadvertently exposed sensitive information. In several well-documented cases, the failure to use true redaction led to the disclosure of witness identities, classified information, and personal financial data. The lessons from these incidents are clear: annotation tools do not redact. Only redaction tools redact.
Step by Step: Redacting a Name, Phone Number, or Address
Open the PDF in a redaction tool. WukongPDF's redaction feature provides both manual and search-based marking. To redact a specific piece of text manually, select the Redact tool and draw a rectangle over the text you want to remove. The rectangle marks the area for redaction. The text underneath is not yet removed. You are marking what should be removed. This two-step process, mark then apply, gives you a chance to review all marked areas before permanently deleting content.
To redact every occurrence of a name or phone number across the entire document, use search-based marking. Type the name or number into the search field. The tool finds every instance. Review the matches to confirm they are all the same person's information and not a different person with the same name. Select the matches you want to redact and mark them. When all sensitive content is marked, apply the redaction. The tool permanently removes the marked content and places your chosen overlay, black box, white box, or custom text, in each location.
Verifying That Redaction Was Successful
After applying redaction, verify the result with three tests. First, visually inspect the document. The redacted areas should show your overlay with no text visible behind or around it. Second, try to select and copy text from the page. Paste it into a text editor. The pasted text should contain no redacted information. Third, search the document for the redacted terms. The search should return zero results.
If any of these tests reveal redacted information, the redaction was not properly applied. The most common cause is that the redaction marks were placed but the Apply Redaction step was missed. The marks are visible on screen as black rectangles, but they are still in the marking state, not the applied state. Return to the redaction tool and apply the marked redactions. Then re-run the verification tests.
Redacting Scanned Documents Where Text Is Part of the Image
When the PDF is a scanned image rather than a text-based document, search-based redaction cannot find the text because there is no text layer to search. You must redact manually by drawing rectangles over the sensitive areas on each page. Because the text is part of the image, redaction permanently removes those pixels from the image. The PDF Privacy of scanned documents requires more manual work than text-based documents, but the result is the same: permanent, irreversible removal of sensitive content.
After redacting a scanned document, zoom to 200% on each redacted area and verify complete coverage. Even a few pixels of a character can reveal enough information to identify a person or read a number. Redaction rectangles should extend slightly beyond the visible text to ensure complete removal, especially for letters with descenders like g, j, p, q, and y that extend below the baseline.
Finally, redact the document metadata as well. A PDF with perfectly redacted page content can still leak sensitive information through its document properties. The author field might contain the name of the person whose information was redacted. The title might contain a confidential reference. After redacting page content, open the document properties and clear the author, title, subject, and keywords fields. This PDF Security step ensures that the redaction is complete at every level of the file.
A specific technique for redacting tables and forms: redact the entire cell or field, not just the text inside it. When you redact only the visible characters but leave the surrounding cell borders and field outlines intact, the recipient can infer information from the context. An empty cell next to a label like Social Security Number tells the recipient exactly what was redacted and that the information is a nine-digit number. A more thorough approach is to redact the label as well, or to redact the entire row or section rather than individual cells. This prevents contextual inference. The goal of redaction is not just to hide specific data points. It is to prevent the recipient from learning anything from the document that they should not know, including what kind of information was removed.
A practical redaction workflow for documents you redact regularly: create a redaction checklist. List every category of information that needs to be removed, names, phone numbers, addresses, account numbers, email addresses, dates of birth, and check each one off as you verify it has been removed from every page. Run the search for each term. Apply the redaction. Verify with the copy-paste test. Check metadata. The checklist transforms redaction from a task where you try to remember what to look for into a systematic process where nothing is overlooked. For legal and compliance documents, the checklist also serves as documentation that you followed a defined redaction procedure, which can be important if the redaction is ever questioned.