How to Redact Sensitive Information From a PDF for Free

Redaction is not the same as drawing a black box

This is the single most important thing to understand before redacting anything: a black rectangle drawn over text in a PDF editor usually just sits on top of the content — the underlying text is still in the file, and it's trivially recoverable by selecting and copying it, or sometimes just by opening the PDF in a different viewer. This has caused real, public data leaks, including sensitive government and legal documents where a 'redacted' PDF still had the original text underneath a visual cover.

Real redaction means permanently deleting the underlying content in that region, not just hiding it visually. If a tool doesn't explicitly say it removes the content rather than covering it, assume it doesn't, and don't trust it with anything genuinely sensitive.

What gets redacted, in practice

Common cases: a Social Security number on a tax document being shared with a third party, an account number on a bank statement being submitted as evidence, a name or address on a document being made public, or a signature that shouldn't appear on a shared copy. In every case, the goal is the same — the sensitive detail should be genuinely gone from the file that leaves your hands, not just visually obscured.

How to redact a PDF online for free

The general process:

• Upload the PDF.

• Mark the exact area (or areas) that need to be redacted — usually by drawing a box over the sensitive text on each page.

• Run the redaction — a real redaction tool removes the underlying content in that region, not just paints over it.

• Download the result and confirm the sensitive text is actually gone, not just hidden, by trying to select or search for it in the output file.

Redacting with FlowPDF

Redaction needs precise coordinates — telling the tool exactly where on the page the sensitive content sits — so this is one case where it helps to be specific rather than just describing what to remove in general terms. Say which page and roughly where on it (for example, 'redact the account number in the top right of page 1'), and FlowPDF applies a permanent redaction that removes the underlying content rather than covering it.

Double-check before you share

After redacting, it's worth a quick sanity check on the output file: try to search for the redacted text (Ctrl+F or Cmd+F) and confirm it doesn't turn up, and try selecting the black box itself to confirm there's no text underneath it. If either of those surfaces the original content, the redaction wasn't done properly and the file shouldn't be shared as-is.

Related PDF tasks

If the goal is preventing unauthorized access to the whole document rather than removing specific details, password protecting the PDF solves a different problem and is worth doing alongside redaction, not instead of it. And if you're removing content that spans entire pages rather than small sections, deleting pages outright is simpler than redacting each one individually.