Redact PDF Online Free: Complete 2026 Guide to True Permanent Redaction
You have a PDF that needs sensitive information removed before sharing. Maybe a contract with prices that should not be visible to the recipient. Maybe a medical record with patient details that need to come out before forwarding to a specialist. Maybe a court document with social security numbers, witness names, or attorney-client privileged communication. Maybe a financial statement with account numbers. Maybe an internal report with employee details before external publication. Whatever the case, you need certain text or images permanently gone from the document, in a way that cannot be recovered.
This is where most online "redact PDF" tools fail in a dangerous way. Many of them draw a black rectangle on top of the text, but the underlying text stays in the file. Anyone can extract the "redacted" content with copy-paste, text search, or any automated extraction tool. There have been multiple high-profile cases where law firms, government agencies, and corporations leaked sensitive information through exactly this mistake. iHatePDF Redact PDF does it the right way: when you click Redact PDF, the content under every black box is permanently stripped from the file. Text characters, embedded images, vector graphics, signatures, and any other content within the marked area are deleted from the PDF's structure. Search returns nothing. Copy-paste returns empty. Text extraction tools find nothing. There is no underlying layer to recover. Free, no watermark, no signup needed. If you want to redact AND make other edits in one session, the alternative Editly path is the full editor with redaction included.
- Open iHatePDF Redact PDF and upload your PDF
- Click and drag anywhere on a page to draw a black box over content you want gone
- Add as many redaction boxes as needed across any pages
- Click Redact PDF, the content under each box is permanently stripped from the file
- Verify by trying to copy-paste from the redacted area, it will find nothing. Then download the truly redacted PDF
Many tools that claim to redact PDFs simply draw a black rectangle on top of the text. The original text stays in the file underneath, recoverable by anyone who knows where to look. Real redaction permanently strips the content from the document structure. Always verify your redactions by attempting to copy-paste from within a redacted region after saving. If text comes out, you used a fake redaction tool and your document is not safe to share.
The difference between true and fake redaction
This is the single most important thing to understand about PDF redaction. Tools fall into two categories, and they produce documents with very different security guarantees.
Fake redaction (dangerous, looks the same)
- Draws a black rectangle on top of the existing content as a graphical overlay or annotation.
- The underlying text and images stay in the PDF file. Nothing is removed from the document structure.
- Recovery is trivial. Copy-paste under the black box returns the original text. Text search finds the "hidden" content. Programmatic PDF readers (pdftotext, pdfplumber, PyPDF2) extract the text behind the rectangle in seconds. Changing the rectangle's color to transparent reveals everything.
- Visually identical to real redaction. The recipient sees a black box and assumes the content is gone. It is not.
True redaction (what iHatePDF does)
- Strips the content from the file structure. Text characters, images, vector graphics, and other content within the redaction box are deleted from the PDF.
- The black rectangle replaces the content, not just covers it. There is no underlying layer to recover.
- Recovery fails by design. Copy-paste returns empty. Search finds nothing. Text extraction tools return no text from the redacted regions. The data is genuinely gone.
- Visually identical from the outside. The recipient sees a black box, but this time there is nothing behind it.
For sensitive use cases (legal, medical, financial, government), true redaction is the only acceptable option. Multiple high-profile cases of leaked confidential information through fake redaction have made the news over the years. Bar associations and compliance regulators explicitly require true redaction for documents involving privileged information, protected health information, or personally identifiable data.
Why redact a PDF?
Many documents contain a mix of information that needs to be shared and information that must stay confidential. Redaction lets you share the relevant content while permanently removing the sensitive parts.
Common contexts where true redaction matters:
- Legal documents. Court filings, depositions, exhibits, attorney-client privileged communications. Bar associations require true redaction for sensitive material.
- Medical records. HIPAA-protected health information that must be removed before sharing with third parties, researchers, or non-treating providers.
- Financial documents. Bank statements, tax returns, account numbers, social security numbers, balances. Required for SOX, PCI-DSS, and financial regulator compliance.
- HR documents. Personnel files, performance reviews, salary information, disciplinary records being shared outside HR.
- Government records. FOIA responses, classified information, witness identities in court documents, redacted intelligence reports.
- Corporate documents. Trade secrets, pricing strategy, competitive intelligence, internal memos being shared externally.
- Contracts. Pricing, terms, or party details that must be hidden from third parties reviewing the contract for other purposes.
- Identity documents. Passport scans, driver licenses, IDs being submitted with sensitive fields (numbers, dates of birth) hidden.
- Customer data. Email addresses, phone numbers, addresses, personal identifiers in customer-facing reports.
- Research data. Participant identifiers, location data, or other PII in research papers and public disclosures.
How to redact a PDF: full walkthrough
- Open the tool. Visit iHatePDF Redact PDF in any web browser. Works on Windows, Mac, Linux, Chromebook, iPhone, Android, and tablets.
- Upload your PDF. Drag and drop the file onto the upload area, or click to browse. Cloud import works from Google Drive, Dropbox, and OneDrive.
- Page thumbnails appear in the workspace. Click any page to open it for editing.
- Draw redaction boxes. Click and drag anywhere on a page to draw a black box around the content you want gone. The box can cover text, images, signatures, stamps, barcodes, or any combination. Make multiple boxes per page if needed.
- Navigate between pages. Switch pages to redact content anywhere in the document. There is no limit on how many boxes you add or which pages they go on.
- Verify the preview. At this stage, the black boxes are previews only. The underlying content is still in the file. The boxes show exactly which areas will be wiped.
- Adjust boxes if needed. Click a box to remove it. Drag a box to reposition. Resize by dragging edges. Nothing is committed until you click Redact PDF.
- Click Redact PDF. The content under every box is permanently stripped from the document. The output PDF has no recoverable content in the redacted regions.
- Download the redacted PDF. Save to your device or back to your cloud with one click.
- Verify the redaction worked. Open the downloaded PDF, try to select text within a redacted area, attempt to copy-paste from a redacted region. Both should return nothing. This is the right behaviour: the content is genuinely gone.
- Optional: chain into another tool. Send the redacted PDF straight into Merge PDF, Compress PDF, Protect PDF, or any other tool.
Alternative method: redact in Editly (the full PDF editor)
Every iHatePDF tool has its own focused preview workspace: Merge has its merge preview, Split has its split preview, Compress has its compress preview, and Redact PDF has the drag-to-mark workspace described above. Each is built for one job and does that job cleanly. Editly sits alongside them as the full PDF editor: it handles content editing (text changes, annotations, image insertion, signatures, page management) and also includes redaction as one of its capabilities.
So the choice between Redact PDF and Editly is not "basic vs advanced." It is: focused redaction tool vs full-featured editor that combines redaction with content editing in one session. Both use true permanent redaction.
- Open Editly and upload your PDF
- Use the redact tool to draw boxes over content you want permanently removed
- Apply any additional edits: text changes, annotations, page deletions, signatures, image inserts
- Click Save and download the edited PDF with all changes (redactions plus edits) applied in one file
When Editly is the right choice
- You need to edit content alongside redacting. Fix typos, add annotations, insert images, all in the same session as redacting sensitive material.
- You want to delete pages too. Remove entire pages and redact specific content on remaining pages, all in one workflow.
- You want to add a signature after redacting. Redact privileged content, then sign the document in the same tool.
- You need to add annotations or comments. Markup the document with explanatory notes alongside redacting confidential parts.
- Multiple tasks on one document. Any combination of redact + edit + sign + page management is faster in Editly.
When the dedicated Redact PDF tool is the right choice
- You only need to redact. Most common case. The focused preview workspace is faster than opening the full editor.
- Many redaction boxes on one document. Dedicated redaction interface is optimised for drawing lots of boxes quickly.
- Chaining into other tools. Redact first, then Merge, Compress, Protect, or any other dedicated tool, all with their own previews.
- You want a single-task interface. No editing toolbar distractions, just the redaction tool.
What gets stripped: technical details
Understanding what is actually removed during true redaction helps you trust the output. Six categories of content are stripped from the marked regions:
- Text characters. The actual character data in the PDF's text layer. Search and copy-paste find nothing in redacted regions because there are no characters there.
- Embedded images. Raster images (JPEG, PNG, TIFF) within the redacted area are cut out or replaced with the black fill. Image extraction tools cannot recover them.
- Vector graphics. SVG-style line art, logos, diagrams, and other vector elements within the redacted region are removed from the page's drawing instructions.
- Form field content. If a redacted area covers a form field with a filled-in value, the value is removed alongside the visible content.
- Annotations and comments. Sticky notes, highlights, or other annotations within the redacted area are removed.
- Searchable text layer. If the PDF has an OCR text layer (common for scanned documents), the OCR text under redacted regions is also stripped, so text search across the whole document returns nothing from those areas.
What is preserved everywhere else: text remains text (selectable, searchable, copyable), images keep their original resolution, fonts are unchanged, page layout stays the same. Only the marked areas are touched.
Common scenarios that need redaction
| Scenario | What to redact |
|---|---|
| Court filing for public docket | SSNs, witness names, minor identifiers, addresses |
| Medical record for specialist referral | Unrelated diagnoses, third-party names, insurance details |
| Bank statement for tax filing | Account numbers, irrelevant transactions, contact details |
| Contract for third-party review | Pricing, party names, signature blocks |
| HR document for external use | Names, employee IDs, salaries, performance ratings |
| FOIA response preparation | Personal information, ongoing investigation details |
| Passport or ID scan for verification | Passport number, date of birth, signature |
| Internal report for external publication | Employee names, customer details, financials |
| Customer email screenshot | Email addresses, names, account references |
| Research paper for publication | Participant identifiers, raw location data |
| Insurance claim with attached docs | Unrelated personal information, third parties |
| Pre-litigation discovery production | Privileged communications, attorney work product |
Common Redact PDF issues (and fixes)
I can still see some text along the edge of my redaction
Redaction box was drawn slightly too small, leaving a sliver of the original visible. Fix: Extend the box to cover the visible edge with a small buffer. Drag the box's handles outward by a few pixels. Always slightly oversize redaction boxes to ensure full coverage.
I drew a redaction box on the wrong place
Boxes are previews until you click Redact PDF. Fix: Click the box to remove it, then redraw correctly. Take your time with the preview, since once you click Redact PDF the change is permanent.
I need to redact the same information across many pages
Page-by-page drawing is the current workflow. Fix: Navigate to each page, draw the box in the right position, repeat. For documents with consistent layout (like multi-page forms), this is reasonably fast. For very repetitive redaction, consider grouping all redactions in one pass through the document.
I want to redact metadata too, not just visible content
Redact PDF removes visible content from pages. Fix: For metadata removal (author name, creation date, software details, embedded form data, hidden fields), use a metadata-stripping tool after redaction, or open the redacted PDF in Editly to inspect and clear specific metadata fields. For most use cases, visible content redaction is sufficient.
I redacted but the file size is still big
Redaction removes content from the page structure but does not necessarily compact the underlying file. Fix: Run the redacted PDF through Compress PDF to clean up and reduce file size. Compression often reveals significant savings on heavily-redacted documents.
The recipient says they cannot see the redactions correctly
Very old PDF viewers may render the document differently. Fix: Standard modern PDF readers (Adobe Acrobat Reader, Preview on Mac, Chrome and Edge built-in viewers, mobile PDF apps) all display redacted content as black boxes. If a recipient sees something unexpected, ask them to open in Adobe Acrobat Reader for the most reliable rendering.
Verifying your redactions actually worked
For high-stakes redaction (legal, medical, government), always verify the output before sharing. Three quick checks:
- Copy-paste test. Open the redacted PDF. Try to select text within a redacted region. Copy and paste into a plain text editor. If anything appears, the redaction is fake.
- Search test. Use the PDF reader's search function (Ctrl+F or Cmd+F) and search for known content that should be redacted (a name, an account number, a phrase). The search should return nothing or only return matches in non-redacted areas.
- Text extraction test. For maximum certainty, use a command-line tool like pdftotext (part of poppler-utils) to extract all text from the PDF. Check the output for any redacted content. If nothing shows, the redaction is genuine.
iHatePDF Redact PDF passes all three tests by design. If you ever get a different result, please contact us immediately so we can investigate.
Redacting PDFs on mobile (iPhone and Android)
Mobile redaction is useful for redacting personal information from documents on the go. Convert from your phone with no app installation.
On iPhone or iPad:
- Open Safari and visit ihatepdf.com/redact
- Tap the upload area and choose your PDF from Files
- Touch and drag to draw redaction boxes on each page
- Tap Redact PDF
- The redacted PDF saves to Files under Downloads, ready to share via Mail, Messages, or any other app
On Android:
- Open Chrome and visit ihatepdf.com/redact
- Tap the upload area and select your PDF from phone storage or Google Drive
- Touch and drag to draw redaction boxes
- Tap Redact PDF
- The redacted PDF downloads to your Downloads folder, ready to share via Gmail, WhatsApp, or any other app
For complex redaction jobs with many small areas, desktop offers more precision. Mobile is best for quick redaction of one or two clear regions before sharing.
Tips for safe, effective redaction
- Keep an unredacted backup of the original. Redaction is permanent. If you might need the original data later, save it somewhere secure before redacting.
- Always verify with copy-paste after redacting. Three-second check that confirms the redaction is real.
- Oversize redaction boxes slightly. Cover content with a small buffer to avoid leaving slivers of original visible at the edges.
- Redact methodically, page by page. For long documents, work through one page at a time to avoid missing anything.
- Watch for repeated information. The same SSN, name, or account number may appear multiple times across a document. Search the unredacted version first to find all instances.
- Strip metadata separately if needed. For maximum anonymity, redact visible content here and run the result through a metadata cleaner.
- For legal redactions, follow your bar association's rules. Some jurisdictions have specific requirements for redaction methodology and certification.
- For HIPAA, ensure your redaction covers all 18 HIPAA identifiers. Names, dates, locations, contact info, account numbers, and several others.
- Compress after redaction. Run through Compress PDF to reduce file size after stripping content.
Workflow chaining
Redact PDF is typically an early step in a longer workflow. Clean up first, then process. Common chains:
- Redact, then compress. Strip confidential content, then Compress PDF for a smaller, cleaner file before sharing.
- Redact, then merge. Redact each input PDF, then Merge PDF the cleaned versions for a redacted combined deliverable.
- Redact, then protect. Strip sensitive content, then Protect PDF with a password for additional safety on the redacted version.
- Redact, then sign. Clean up the document, then Sign PDF the redacted output to certify the version sent.
- Split, then redact each part. Split PDF first to isolate sections, then redact each part appropriately.
- OCR, then redact. Run scanned PDFs through OCR PDF first to add a text layer, then redact specific text using that layer.
Privacy and security
Redaction often involves the most sensitive documents people handle: medical records, legal filings, financial statements, contracts with privileged information. iHatePDF is built with this in mind. Files upload over HTTPS, process on our secure servers, return to you as redacted PDFs, and the original files delete automatically at the end of your session. No human review, no AI training, no third-party sharing. GDPR-compliant. Critical for HIPAA-protected health information, attorney-client privileged documents, financial information, and government-confidential content. Full picture in the privacy and security guide.
Frequently asked questions
Is this real redaction or just a black box on top?
Real redaction. The content under every redaction box is permanently stripped from the PDF, not just covered. Text characters, embedded images, vector graphics, and any other content within the marked area are removed from the underlying file structure. This is fundamentally different from drawing a black rectangle over text in a PDF editor or annotation tool, where the text remains in the file underneath the rectangle and can be recovered by copy-paste, search, text extraction, or simply removing the annotation layer.
Can the redacted content be recovered later?
No. Once you click Redact PDF and download, the redacted content is gone from the file. Standard recovery methods all fail: text search returns nothing, copy-paste under the redaction returns empty, PDF text extraction tools (pdftotext, pdfplumber, programmatic libraries) find nothing in the redacted region, removing or modifying annotation layers reveals nothing because the content is not behind an annotation. The only way to recover is from a separately-saved backup of the original PDF, which is why you should always keep an unredacted original if you may need the data later.
How is this different from drawing a black box in another editor?
Critical difference. Drawing a black rectangle in tools like a basic PDF editor, an image editor, or even some commercial software places a graphic overlay on top of the existing content. The text and images underneath remain in the PDF file. Anyone who opens the PDF can extract the original content by copy-paste, by changing the rectangle's color to transparent, by saving as text, or by using automated extraction tools. There have been multiple high-profile cases (legal filings, government documents, corporate disclosures) where "redacted" documents leaked sensitive information through exactly this mistake. True redaction strips the content from the file structure entirely.
Can someone copy-paste the hidden text from the PDF?
No. Standard PDF text layers under redacted regions are removed. Try it yourself after redacting: open the redacted PDF, attempt to select text within a redacted box, and the selection finds nothing. Copy-paste from the redacted area returns empty. Browser-based PDF viewers, Adobe Acrobat, Preview on Mac, and PDF text extraction libraries all return no text from the redacted regions because there is no text there to find.
What can I redact - text, images, or both?
Both, and more. The redaction box removes everything within its boundaries: text (including the text layer that supports search and copy-paste), embedded raster images (photos, scans), vector graphics (logos, diagrams, line art), signatures (handwritten or digital), stamps and seals, barcodes and QR codes, and even areas of a scanned document. If you draw a box over a region, that region is wiped completely after saving.
Will the rest of my PDF look the same?
Yes. Content outside your redaction boxes is preserved exactly. Text remains text (selectable, searchable, copyable), images keep their original resolution, fonts are unchanged, layouts stay the same. The PDF structure is intact except for the marked areas, which become solid black rectangles with no recoverable content underneath.
Can I change my mind before saving?
Yes. Before clicking Redact PDF, the black boxes are a preview only. The underlying content is still in the file at this stage. To undo a redaction box, click it to remove. To adjust a box, click and drag it to a new position or resize it. Take your time, the live preview shows exactly what will be wiped. Once you click Redact PDF, however, the change is permanent and downloaded files cannot be reversed.
Can I import from Google Drive, Dropbox, or OneDrive?
Yes. Click the cloud icon during upload and authenticate once with your cloud provider. After that, browse cloud folders and select PDFs directly. The redacted PDF can be saved back to the same cloud location with one click, no local download or re-upload step needed.
Are my files kept private?
Yes. Files upload over HTTPS, process on our secure servers, return to you as redacted PDFs, and the original files delete automatically at the end of your session. No human review, no AI training, no third-party sharing. GDPR-compliant. Especially important for redaction use cases involving HIPAA-protected medical records, attorney-client privileged documents, financial information, or government-confidential content. Full details in the privacy and security guide.
Will OCR still work on the redacted PDF?
For non-redacted regions, yes. The text layer outside redacted areas remains intact and OCR or text extraction continues to work on those parts. Inside redacted regions, there is nothing left to OCR, so those areas return empty. This is the correct behaviour: a properly redacted document should have nothing in the redacted region that any tool (including OCR) can recover.
Does it work on mobile?
Yes. Works in any modern mobile browser (Safari on iPhone, Chrome on Android, Firefox, Edge, Samsung Internet). Touch-and-drag to draw redaction boxes on a phone screen. Useful for redacting personal information from documents on the go before forwarding via Mail, Messages, or any other app. For complex redaction jobs with many small areas, desktop offers more precision.
What about metadata - is that redacted too?
The redaction tool removes visible content from the page. PDF metadata (author, creation date, title, software used, embedded fonts, hidden form fields, document history) is preserved by default. If you need to remove metadata as well, run the redacted PDF through a metadata-stripping tool, or use Editly to inspect and clear specific metadata fields. For most use cases (visual content redaction), this distinction does not matter. For high-stakes situations (anonymous whistleblowing, sensitive corporate filings, legal disclosures), strip metadata in a separate step.
Should I use Redact PDF or Editly?
Use the dedicated Redact PDF tool when you only need to redact and nothing else, want the focused redaction interface, or plan to chain into Merge, Compress, Sign, or Protect next. Use Editly when you need to redact AND make other edits in the same session: fix typos, add annotations, insert images, delete or reorder pages, add signatures. Editly is the full PDF editor that handles content editing plus redaction; Redact PDF is the focused single-purpose tool with its own preview workspace.
Is there a watermark on the redacted PDF?
No. No watermarks, no signup gate for single conversions, no daily caps. The redacted PDF is your original document with the marked content permanently removed. iHatePDF makes money through optional Pro features, not by watermarking free tool output. This is critical for redaction use cases where the output goes into formal proceedings (court, government, regulatory filings) that would reject watermarked documents.
True permanent redaction. Content stripped from the file, not just covered. Search, copy-paste, and recovery all fail. No watermark.
Redact PDF →Redact in Editly →Use other tools
Free, fast, private PDF tools.
Show all tools →