How to Redact Sensitive Information from a PDF

The critical difference: covering vs truly redacting

This distinction has caused real privacy failures in high-profile cases — including classified government documents where the "redacted" text was revealed by simply selecting it in a PDF viewer.

• ·Covering (WRONG approach): places a black annotation, shape, or image on top of the text. The original text is still in the PDF content stream and can be selected, copied, or uncovered by removing the shape.
• ·True redaction (CORRECT approach): removes the text or image from the PDF content stream entirely and replaces it with a solid black rectangle. There is nothing underneath. The information cannot be recovered.

When you must use proper redaction

• ·GDPR/UK GDPR compliance — personal data must be removed before sharing documents outside the organisation
• ·Legal discovery — privileged information must be removed before producing documents to opposing counsel
• ·Freedom of Information (FOIA) responses — exempt information must be permanently removed before public release
• ·HR and employment documents — personal details, salaries, or medical information removed before sharing for audit
• ·Healthcare — patient identifiers removed from records shared for research or review

Step-by-step: redact a PDF permanently

1. 1Open editpdfai.com/pdf-redactor and upload your PDF.
2. 2Select text to redact manually: click and drag to highlight the text you want to remove. It turns red to show it is marked.
3. 3Or use AI Detection: click the AI Detect button and the tool automatically identifies names, email addresses, phone numbers, dates, and financial figures. Review and approve the suggestions.
4. 4Mark all areas you want to redact across all pages.
5. 5Click Apply Redactions. This step permanently removes the content and replaces it with black bars.
6. 6Download the redacted PDF.

After redacting: add another layer of protection

• ·Password-protect the redacted PDF — even though the text is gone, add a password if the document is sensitive
• ·Add a "REDACTED" watermark to make the document's status clear to all recipients
• ·Store the original unredacted file on an access-controlled, encrypted system — keep it separate from the redacted version
• ·Document which information was redacted and why, for compliance audit trails

Common mistakes to avoid

• ·Using a black annotation box or shape instead of the redact tool — this is the most common and dangerous mistake
• ·Forgetting to redact metadata — author names, comments, and document history in PDF metadata can reveal information even after content is redacted. A proper redactor cleans metadata too.
• ·Not applying redactions before downloading — marks are pending until you click Apply Redactions. Downloading before applying saves a version with the marks as annotations, not permanent redactions.
• ·Redacting only text but not images — if the sensitive information appears in an image or signature, that must also be redacted using a drawn selection box over the image area.