How to Redact a PDF Before Sending It Online

PDFs feel final, but they can still leak sensitive information. A black rectangle drawn over text is not always a real redaction. In a bad PDF, the hidden text may still be selectable, searchable, copyable, or recoverable from layers, comments, attachments, or metadata.

If you are sending a contract, tax document, bank statement, medical form, ID copy, or internal report, redact the PDF first, then protect how you share it.

This guide shows a practical PDF redaction workflow that works for normal people, not only legal teams.

What PDF Redaction Actually Means

Real PDF redaction removes content from the file. It does not merely cover it visually.

Bad redaction:

• Drawing a black box over text
• Highlighting text in black
• Taking a screenshot of a PDF page with weak blur
• Cropping a page while hidden text remains in the original PDF
• Saving a Word document as PDF with comments still embedded

Good redaction:

• Marks the sensitive content
• Applies the redaction permanently
• Removes hidden text, comments, metadata, and attachments
• Produces a new final copy
• Passes search, copy, and zoom tests

If the recipient can uncover the information by selecting text, searching, or removing a layer, the PDF was not truly redacted.

What to Redact in a PDF

Start with the reason you are sharing the document. Keep what the recipient needs and remove what they do not.

PDF type	Common fields to redact
Contract	Other client names, internal comments, signatures, private pricing, unrelated clauses
Bank statement	Full account number, routing number, unrelated transactions, balances if not required
Tax document	SSN or tax ID, dependent details, employer IDs not required for the task
Medical PDF	Patient ID, policy number, unrelated diagnoses, date of birth if unnecessary
ID copy PDF	Document number, signature, machine-readable zone, address if not needed
Internal report	Employee names, customer data, unreleased metrics, file paths

For a broader checklist across document types, start with how to redact a document before sharing.

Step-by-Step PDF Redaction Workflow

1. Make a copy of the original

Never redact the only copy. Create a working copy first:

contract-redacted-for-client.pdf

Keep the original in a private folder. If you make a mistake, you can start again.

2. Use a real redaction feature

In your PDF editor, look for a tool named "Redact", "Apply Redactions", "Sanitize", or "Remove Hidden Information".

Avoid tools that only draw shapes. A shape tool can make the page look safe while leaving the original text underneath.

3. Mark the sensitive fields

Redact only what the recipient does not need. Over-redaction can make the document useless. Under-redaction creates risk.

Good examples:

• Leave the last four digits of an account number visible if needed for confirmation
• Leave the document date visible if it proves timing
• Hide other customers, dependents, unrelated transactions, and full identifiers

4. Apply redactions permanently

Marking redactions is not the same as applying them. Most PDF tools have a second action that permanently removes the selected content.

After applying redactions, save a new copy. Do not send the editable redaction working file.

5. Remove hidden information

Run your PDF editor's hidden information cleanup if available. Check for:

• Comments and annotations
• Form field values
• Hidden layers
• Embedded files
• Thumbnails
• Author metadata
• Revision history
• JavaScript actions
• File attachments

For file-level cleanup beyond redaction, read the metadata removal guide.

6. Reopen and test the final PDF

Open the redacted PDF in a different app and test it like an attacker:

• Search for a hidden name, account number, or address
• Try selecting the blacked-out area
• Copy and paste around the redacted area
• Zoom in on redacted fields
• Check document properties
• Confirm the file name does not leak the hidden data

If the hidden value appears anywhere, redo the export.

If You Do Not Have a PDF Redaction Tool

For low-risk documents, one workaround is to convert the specific page to an image, apply solid opaque blocks, and export the image or image-based PDF.

This can reduce the risk of hidden text staying underneath, but it has trade-offs:

• Text is no longer selectable
• Quality may drop
• Accessibility can suffer
• It may not be acceptable for formal legal or compliance documents

For high-risk documents, use a proper PDF redaction tool.

Redaction vs Password Protection

Redaction and password protection solve different problems.

Control	What it does	What it does not do
Redaction	Removes information the recipient should not see	Does not stop forwarding by itself
PDF password	Encrypts the file before opening	Does not hide content after unlock
Expiring secure link	Limits access window and keeps the file out of chat history	Does not remove sensitive fields inside the file

The safest order is:

1. Redact the PDF.
2. Verify the final PDF.
3. Password-protect or share through an expiring secure link.

For PDF encryption options, see how to password-protect a PDF.

How to Share the Redacted PDF

Once the PDF is clean, avoid dropping it into a permanent email thread or group chat.

Use LOCK.PUB file sharing to send the redacted PDF behind a password-protected link. Send the password through a different channel, set an expiration, and confirm the recipient downloaded it.

If someone else needs to send PDFs to you, use a secure request link so the files arrive in one place instead of scattered across email and messenger apps.

PDF Redaction Checklist

Before sending, confirm:

• I created a copy of the original
• I used a real redaction tool, not just a shape overlay
• I applied redactions permanently
• I removed comments, metadata, hidden layers, and attachments
• I reopened the final PDF in another app
• Search cannot find the hidden values
• Copy and paste cannot recover the hidden text
• The file name does not reveal sensitive details
• I am sharing the final copy through a protected channel

Frequently Asked Questions

Can I just draw a black box over text in a PDF?

No, not for sensitive documents. A black box may only cover the text visually. The original text can still remain underneath. Use a real redaction feature and apply the redaction permanently.

Is password protection enough if I do not redact the PDF?

No. Password protection controls who can open the file. It does not hide anything from the person who unlocks it. Redact first if the recipient does not need the full document.

Should I redact before or after exporting to PDF?

If your source document contains comments or revision history, clean those first. Then export to PDF and apply PDF redactions to the final copy. Finally, verify the exported file.

What is the safest way to send a redacted PDF?

Use a password-protected, expiring link. Send the link and password through separate channels, and expire the link after the recipient has downloaded the file.

Related Redaction Guides

• How to redact a document before sharing
• How to redact a bank statement before sharing
• How to redact an ID card or passport copy
• How to redact screenshots before sharing