How to redact confidential information from a PDF is a question with two parts: the technical part (how do you black out the content) and the safety part (how do you do it without creating a new privacy risk in the process). Most guides cover the first part and skip the second entirely. This guide covers both.

The Problem Most Guides Do Not Mention

The typical free redaction workflow looks like this: open a free online tool, upload your PDF, draw some black boxes, download the result. The problem is step two. When you upload a document containing a Social Security number, bank account details, medical records, or legal filings to a free online tool, your sensitive document now exists on a server you do not control — even if only briefly.

For the document you were trying to protect.

Most free redaction tools are server-side: your file travels to their infrastructure, gets processed there, and a result comes back. They delete files after an hour or two. Most are reputable. But uploading a confidential document to any third-party server creates exposure that simply should not exist for the kinds of documents that require redaction in the first place.

RapidTools processes everything locally in your browser using JavaScript. Your PDF never leaves your device — not to our servers, not to any third party. The redaction happens on your own machine, and the only thing that moves is the downloaded result, which goes straight to your local filesystem. This is the safe way.

The Other Problem: Fake Redaction

There is a second issue that is even more common than the upload problem: the black box that is not actually a redaction.

Many PDF editors — including tools that call themselves redaction tools — let you draw a black rectangle over text as an annotation layer. The black box sits on top of the page visually, but the original text is still there in the file data. Anyone can:

  • Select the text under the box and copy it
  • Delete the annotation layer and read the content
  • Run the file through a text extractor and read everything
  • Open the file in a PDF editor and remove the overlay

This has caused real-world disclosure of sensitive information in legal filings, government documents, and financial reports. Documents that appeared redacted were searchable with a single copy-paste.

Real redaction requires destroying the underlying content — not covering it. RapidTools does this by converting each page to a canvas image, drawing your redaction marks onto the image data, and rebuilding the PDF from those images. There is no text layer remaining in the output file. The content cannot be recovered by any means.

What Information Needs Redacting

Different document types carry different sensitive data. Here is what to look for in the most common scenarios:

Legal Documents

  • Social Security numbers — appear in tax forms, court filings, employment documents
  • Driver’s licence and passport numbers
  • Financial account and routing numbers
  • Home addresses of private individuals
  • Minor children’s names and birth dates (required in many jurisdictions when filing with courts)
  • Attorney-client privileged communications
  • Material covered by a court protective order

Medical and Healthcare Documents

  • Patient names and dates of birth when sharing for administrative purposes
  • Medical record numbers
  • Diagnosis codes and treatment details when not relevant to the purpose of sharing
  • Insurance member ID numbers
  • Provider notes containing personal health information

Financial Documents

  • Bank account numbers — even partial account numbers
  • Credit and debit card numbers
  • Social Security or tax ID numbers on tax documents
  • Salary figures when not relevant to the recipient
  • Investment account numbers and balances

HR and Employment Documents

  • Employee Social Security numbers on payroll documents
  • Personal addresses and phone numbers
  • Salary and compensation details when sharing for other purposes
  • Performance review content for third-party sharing
  • Background check results

Business and Commercial Documents

  • Trade secret details when sharing a contract excerpt
  • Pricing terms in contracts when sharing with parties not privy to those terms
  • Customer lists and contact information
  • Confidential technical specifications

Step-by-Step: How to Redact a PDF with RapidTools

  1. Open the tool. Go to rapidtools.online/redact-pdf in any browser. No account, no login, no software to install.
  2. Upload your PDF. Click the upload area or drag and drop your document. Processing is local — the file never leaves your device.
  3. Choose your redaction style:
    • Black Box — the legal and formal standard. Solid black rectangles. Use for court filings, legal productions, FOIA responses, and any formal document disclosure.
    • White Box — covers content with white. Use for internal documents or when the document background is white and you want a clean, unobtrusive redaction.
    • Blur — applies a strong blur effect. Use for screenshots, photos with personal information, ID documents shared informally, or any situation where the redaction does not need to look formal.
  4. Draw redaction areas. Click and drag over each piece of information you want to remove. You can switch between Black Box, White Box, and Blur for different marks on the same document — for example, black boxes on text and blur on a photo.
  5. Navigate between pages. Use the page navigation buttons to move through the document. Apply marks on every page that contains content you want to remove. Do not assume sensitive information only appears once — names, numbers, and identifiers routinely appear in headers, footers, captions, and multiple sections.
  6. Use Undo if needed. The Undo button removes the last mark placed on the current page. If you over-redact, undo and redraw.
  7. Apply and download. Click Apply Redactions & Download PDF. The tool renders each page to an image with your marks burned in, then rebuilds the PDF. The download is your permanently redacted document.
Important: Keep the original unredacted document in a secure location before applying redactions. Once you download the redacted version, the content removed from that file cannot be recovered. If you need to produce a differently-redacted version later — for a different recipient, or to correct an error — you will need the original.

The Output Is Image-Based — Here Is Why That Matters

When you download your redacted PDF from RapidTools, each page is an image rather than a text layer. This is what makes the redaction real and permanent. But it comes with a tradeoff worth understanding: the output PDF will not have selectable or searchable text.

For most redaction use cases, this is perfectly acceptable. You are sharing the document so the recipient can read it, not so they can search it. The visual content is identical to the original — the only difference is that the redacted areas are covered and the underlying text structure is gone.

If you need a searchable output after redacting — for example, because the recipient needs to search the document for case references — you can run OCR on the downloaded file using Google Docs (upload the PDF, Google will OCR it automatically) or a dedicated OCR tool. The redacted areas will appear as blank in the OCR output.

What to Check Before Finalising

Redaction errors almost always come from missing something rather than the tool failing. Before sharing a redacted document, go through this checklist:

  • Search for all instances of the target data. If you are redacting a Social Security number, that number may appear in multiple places — a cover page, the document body, a footer, an exhibit. Check every page.
  • Check headers and footers. Running headers and footers often contain names, dates, matter numbers, or other identifying information that appears on every page but is easy to miss when working through the document.
  • Check page 1 specifically. Cover pages, title pages, and signature pages concentrate personal information. These pages often need the most redaction work.
  • Check any exhibits or attachments. Multi-part PDFs may contain attached exhibits with unredacted versions of information you redacted in the main body.
  • Zoom in on image-based content. If the PDF contains photographs or scanned images with visible sensitive information — a photo of an ID card, a scan of a cheque showing an account number — make sure you have covered those too. They will not be caught by text-search approaches.
  • Do a final page-by-page review. Before downloading, scroll through every page in the tool and confirm every redaction box is covering what you intended and nothing unintended is covered.

Redaction for Specific Document Types

Tax returns and financial statements: The most commonly redacted items are Social Security numbers (on the first page), account numbers, and routing numbers. Redact all nine digits of the SSN — not just the last four. An account number partially visible is still exploitable.

Court filings and legal documents: Many court systems now require that personal identifiers be redacted before filing. Under FRCP Rule 5.2, filings must be redacted to show only the last four digits of SSNs and financial account numbers, the year only of any birth date, and the initials only of minor children. Check the applicable court rules before filing.

Medical records: HIPAA defines 18 categories of protected health information (PHI). When sharing medical records for any purpose other than direct treatment, all 18 identifiers should be reviewed. The most commonly missed are date elements (dates of birth, dates of service, dates of admission) and geographic data below the state level (city, county, zip code).

Passports and government IDs: When sharing a copy of a passport or national ID for identity verification, redact the machine-readable zone (MRZ) at the bottom of the photo page — it encodes the full ID number and date of birth in a format that can be machine-read. Also redact any visible signatures.

Employment contracts and offer letters: When sharing for reference or dispute purposes, redact salary figures, equity details, and any clauses marked confidential in the original document. Also redact the home address and personal phone number of the employee if not relevant to the purpose of sharing.

Why the Upload Question Matters for Redaction Specifically

It is worth dwelling on this point because it is specific to redaction in a way it is not for other PDF tasks.

When you compress a PDF or merge two PDFs, the privacy concern is real but modest — a briefly-held copy of your document on a third-party server is suboptimal but not catastrophic for most documents.

When you are redacting a document, by definition you have identified the document as containing sensitive information that should not be exposed. Uploading that document to a server to redact it contradicts the purpose of the redaction. You are exposing the sensitive content — to the tool’s servers — in order to remove it from a version you plan to share. The logic breaks.

With RapidTools, the redaction loop is closed entirely. You identify the sensitive content, mark it for removal, and the result is processed locally. The sensitive version never travels anywhere. The redacted version is what you share. Nothing is ever uploaded.

You may also want to read how to redact a PDF and whether redacted PDFs can be unredacted.

Frequently Asked Questions

How do I permanently redact information from a PDF?

Go to rapidtools.online/redact-pdf, upload your PDF, draw black boxes over the content you want to remove, and click Apply Redactions. The tool converts each page to an image with your marks burned in — there is no underlying text layer remaining. The redaction is permanent and cannot be reversed.

Is drawing a black box over text enough to redact it?

Only if the page is flattened first. A black rectangle placed as an annotation over a PDF leaves the original text in the file. It can be selected, copied, or extracted. RapidTools converts each page to an image before rebuilding the PDF, destroying the text layer entirely. The content cannot be recovered by any means.

Is it safe to use a free online tool to redact sensitive documents?

It depends on the tool. Most free tools upload your file to their servers. RapidTools is different — it processes everything locally in your browser. Your file never leaves your device. For documents containing SSNs, financial data, medical records, or legal filings, use a tool where the file stays on your device.

How do I redact a Social Security number from a PDF?

Open the PDF in RapidTools Redact PDF, draw a black box over every instance of the SSN, navigate through all pages to catch every occurrence, and download. Redact all nine digits — not just the last four. The output has the SSN permanently removed from the file data.

Will the redacted PDF still be readable?

Yes. The redacted areas are covered by your chosen style (black, white, or blur). All other content remains fully visible and readable. The only change is that the output is image-based rather than text-based, so text will not be selectable in the output. The visual appearance is identical to the original except for the redacted areas.

Can I redact on my phone or tablet?

Yes. RapidTools Redact PDF works on iOS Safari and Android Chrome. Upload from your Files app or file manager, draw redaction areas with your finger or stylus, and download the result directly to your device.

What redaction style should I use for a court filing?

Black Box is the legal standard for court filings, FOIA responses, and formal document productions. It is the format courts and opposing counsel expect. White Box and Blur are appropriate for internal documents and informal sharing where a formal appearance is not required.

Can redacted content be recovered?

Not from a RapidTools-redacted PDF. The output is image-based — there is no text layer to extract. The original pixels under the redaction marks are overwritten when the image is built. For annotation-based redactions made in other tools, the content may still be recoverable. Always verify your redaction method actually destroys the content rather than just covering it.

How do I redact multiple pages at once?

Navigate page by page using the page navigation buttons in the tool and draw redaction marks on each page individually. There is no batch-redact function — each page requires its own marks, which is intentional: automated redaction based on pattern matching can miss variations in how sensitive data appears on different pages.

Free tool — no upload required
Redact PDF Free — Files Never Leave Your Device
⬛ Redact PDF Free →

Related Tools & Guides