How to Redact Sensitive Information from a PDF

Applies to: Windows 10, Windows 11, Microsoft Word, Microsoft 365, Adobe Acrobat Reader
Article Type: How-To
Last Updated: 2026-08-08

Summary

Drawing a black box over text in a PDF hides it from your eyes and from nobody else — the words stay in the file and anyone can copy them straight out. This guide shows you how to prove that to yourself in two minutes, then gives you the routes that genuinely remove the content, including one that costs nothing, and finishes with the verification check you run before the file leaves your hands.

Before You Start

• A copy of the original document, kept somewhere safe. Real redaction is permanent, and you will want the full version afterwards.
• The original Word, Excel or PowerPoint file if one exists — that is the shortest safe route, and it is covered in step 2.
• Ten minutes. This is not a task to rush at the end of the day, which is when most redaction failures happen.

Instructions

1. Prove the black-box trap to yourself

A black rectangle drawn over text is a picture placed on top of it, and the words underneath stay in the file exactly as they were.

1. Open a PDF where something has been blacked out — one you made, or one you received — in Microsoft Edge or Adobe Acrobat Reader.
2. Click immediately before the black area and drag across it as though you were selecting ordinary text. A blue selection highlight appears over the black box. That highlight alone tells you there is live text underneath.
3. Press Ctrl + C to copy the selection.
4. Open Notepad and press Ctrl + V. The text that was supposed to be hidden appears in full.
5. Try the other route into the same data: back in the PDF, press Ctrl + F and search for a word you believed was removed. A match means the word is still in the document, black box or not.

The same is true of the highlighter set to black, a filled shape pasted over the text in Word, and a text box with a black background. All three change what the page looks like and nothing about what the page contains. This is how organizations have published court filings, contracts and payroll data that anybody could read with two keystrokes.

2. Redact at the source, whenever you still have the original

Deleting the text from the document it came from and exporting a fresh PDF is the safest route, because the sensitive content never reaches the PDF at all.

1. Open the original in Microsoft Word, then use File > Save As to make a working copy with a name like report-external.docx. The full version survives untouched, which is what lets you delete freely in the next step.
2. Select the sensitive text and delete it. Do not recolor it, white it out, or cover it with a shape — deleted text is gone from the file, formatted text is still there.
3. Open the Review tab and check for tracked changes. Click Accept > Accept All Changes so that deleted text is not preserved as a revision anyone can display.
4. Still on the Review tab, click the arrow under Delete and choose Delete All Comments in Document. Comments carry names, dates and draft wording that often say more than the text you removed.
5. Run the metadata sweep in step 5 before you export.
6. Export the PDF with File > Save As, set Save as type to PDF, and give it a new filename. Open the result and confirm the redacted content is not there.
7. If the original file no longer exists, open the PDF itself in Word — right-click the file, choose Open with > Word, and accept the conversion prompt. Word rebuilds it as an editable document, delete the text there, and save a new PDF. Check the layout afterwards, because conversion moves things.

3. Use the Redact tool in Adobe Acrobat Pro

Acrobat's Redact tool removes the content rather than covering it, and Adobe documents it as available only in Acrobat Pro and the paid plans above it.

1. Check which Acrobat you have: open Help > About Adobe Acrobat. If it says Adobe Acrobat Reader, you have the free reader, and it has no Redact tool. Adobe's own documentation lists redaction as available only in Acrobat Pro, Premium or Studio. Skip to step 4 for the free route.
2. In Acrobat Pro, keep an unredacted copy saved elsewhere first. Applying a redaction cannot be undone, and that is exactly what makes it work — but it means the only way back to the full text is a copy you kept.
3. Select All tools in the toolbar, then Redact a PDF, then Redact text and images in the left pane.
4. Drag across each area to mark it. Marked areas appear as outlines, and nothing has been removed yet.
5. Click Apply. Acrobat warns that the marked content will be permanently removed. Confirm, and the text disappears from the page and from the file.
6. Accept the prompt to sanitize and remove hidden information when Acrobat offers it. This is the part that strips metadata, comments and hidden layers that the visible redaction never touched.
7. Save the result under a new filename, then run the verification in step 6.
8. If you do not have Acrobat Pro and this is a regular part of your job, ask IT to assign you an Acrobat Pro license, and include what you need it for — permanently removing text from PDFs before they leave the organization — and roughly how often. For a one-off document, step 4 gets you there today.

4. Rebuild the pages as pictures when you have no Acrobat Pro

Capturing each page as an image and blacking it out in an image editor destroys the underlying text by construction, because an image has no text to recover.

1. Open the PDF in Microsoft Edge and set the zoom so one full page fills the window.
2. Press Windows + Shift + S. The screen dims and a small capture bar appears at the top. Drag a box around the whole page. The capture lands on your clipboard — How to Take Screenshots on Windows covers the tool in full.
3. Open Paint and press Ctrl + V. The page appears on the canvas.
4. Choose the Rectangle from the Shapes group, set Fill to Solid color, and set the outline and fill colors to black. Drag a rectangle over each sensitive area. These pixels are overwritten in the image, which is the whole difference between this and a PDF annotation.
5. Save with File > Save as > PNG picture under a new name such as page-1-redacted.png. The PDF you captured from is untouched.
6. Repeat for every page of the document.
7. Open a blank Word document, use Insert > Pictures > This Device, and place the images in page order.
8. Export with File > Save As and Save as type set to PDF. The finished file carries no recoverable text anywhere.
9. Know the cost before you choose this route: the document is no longer searchable or selectable, the file is larger, and a screen reader cannot read it aloud. That makes it right for a two-page letter and wrong for a hundred-page report — use step 2 or step 3 for those.

5. Remove the metadata that travels with the file

Author names, comments, tracked changes and document properties ride along inside the file, and none of them appear on the page you are checking.

1. In Word, before you export, open File > Info, click Check for Issues, and choose Inspect Document. The Document Inspector window opens with a list of content types.
2. Leave the categories ticked and click Inspect. Anything found is listed with a Remove All button beside it.
3. Click Remove All for each finding you do not want to ship. Removal cannot be undone inside that file, which is why step 2 had you working on a copy — the full original still has everything.
4. For a finished PDF, open File Explorer, right-click the file, choose Properties, and open the Details tab. Click Remove Properties and Personal Information at the bottom.
5. Choose Create a copy with all possible properties removed and click OK. Windows writes a new, clean file alongside the original and leaves the original as it was.
6. Look at the filename and the email subject line too. A file called Payroll_JSmith_SSN_redacted.pdf gives away more than the page ever did.

6. Verify the finished file before you send it

This check is not optional, and it takes under a minute — it is the step that catches the redaction that quietly did nothing.

1. Close the file completely, then reopen it from where you saved it. Checking the copy still open in the editor tells you nothing about what was written to disk.
2. Drag-select across every area you redacted, press Ctrl + C, and paste into Notepad. Nothing from the redacted area appears.
3. Press Ctrl + F and search for a word you removed — a surname, a street, the last four digits of an account. No matches is the result you need. A single hit means the content is still in the file and it is not ready to send.
4. Open File > Properties and read the Description tab. Author, title and subject must read as blank or generic.
5. Scroll the entire document, not only the pages you edited. Bookmarks, comment markers and appendices repeat content people forget about.
6. Attach the file only after all five checks come back clean.

7. Act fast if the file has already gone out

A document that left with live text under a black box is a disclosure, and the first hour is the only one where anything can still be undone.

1. Tell your manager and IT now — the same hour, not at the end of the day. Nobody has ever been in more trouble for reporting this quickly than for reporting it late, and IT has options that expire.
2. Give them four facts in the first message: who received the file, when it was sent, the exact filename, and what was exposed. That is what they need to act, and gathering more first only costs time.
3. If it went to colleagues inside your organization within the last few minutes, try a recall — How to Recall or Replace a Sent Email in Outlook covers what it can and cannot do. Treat it as a bonus, never as the fix; recall fails often and silently.
4. If you shared it as a OneDrive or SharePoint link, open the file's Manage access panel and remove the sharing link. That cuts off anyone who has not already downloaded it.
5. Wait for IT's guidance before sending a corrected version to the same recipients. A second email can draw attention to a file most people never opened.
6. Keep the original file and the sent message. Deleting them removes the evidence IT needs to work out who saw what.

Troubleshooting

DANGER

A black rectangle, a black highlight, or a shape pasted over text removes nothing. The words stay in the file and anyone can select, copy or search them out. Only the routes in steps 2, 3 and 4 delete the content — and only the check in step 6 proves it worked.

Symptom / Error	Potential Cause	Solution
You can still select and copy text from under a black box	An annotation was drawn over the text rather than applied to it	Redact properly with step 3, or rebuild the pages as pictures with step 4, then re-run the check in step 6.
There is no Redact tool anywhere in your Acrobat toolbar	You have the free Adobe Acrobat Reader, not Acrobat Pro	Adobe lists redaction as Acrobat Pro only. Use step 4 for this document, and ask IT to assign you an Acrobat Pro license, including what you need it for and how often.
A search still finds a name you removed	The text survives in a comment, bookmark or document property	Run the sanitize step in Acrobat, or the Document Inspector and Remove Properties and Personal Information steps in step 5.
Outlook blocks the email with a policy message	A data-loss rule matched content still present in the file	Treat this as the warning it is and re-run step 6 before doing anything else. Understanding DLP: Why Can't I Send This Email? explains the block.
The redacted PDF is much larger and no longer searchable	The page-as-picture route replaced the text with images	Expected. Keep step 4 for short documents and use step 2 or step 3 for long ones.
A scanned PDF has no selectable text at all	The pages are already images	Do not assume it is safe — many scanners add a hidden text layer. Run the search in step 6 before you trust it.
Word will not let you delete a tracked deletion	Track Changes is still recording	On the Review tab, turn Track Changes off, then use Accept > Accept All Changes.

Related Articles

• How to Manage PDF Files
• How to Password-Protect a PDF or Word Document
• How to Extract a Single Page from a Large PDF Document
• Understanding DLP: Why Can't I Send This Email?

Did this solve your problem?