How to Redact a PDF Properly Before Sharing

Guides & Tutorials / Document preparation

To redact a PDF properly, use a tool designed to remove content, apply its redactions, review hidden information, and save a separate release copy. Close and reopen that exact file before checking it. Drawing a black rectangle over text is not the same as removing the text underneath.

The workflow matters as much as the button. A correctly processed document can still expose information if you miss a repeated name, leave a revealing comment, or attach the original instead of the reviewed copy. Start by deciding what the recipient needs, then remove everything outside the approved scope.

This guide explains document preparation rather than deciding what you are permitted or required to disclose. Product instructions were checked on 24 October 2026. Use your organization’s approved tools and review process for sensitive releases.

A black box can hide text without removing it

A PDF can hold content that is not obvious from the page you see. If a rectangle is merely an annotation above text, the text can remain available underneath. The UK Information Commissioner’s Office describes this specific failure in its redaction guidance, including cases where copying into another format reveals covered information.

Adobe’s redaction tutorial separates marking items from applying removal and explains sanitization for material such as comments, metadata, and hidden layers. It lists the feature for Acrobat Pro, Premium, or Studio. Check your available tools before starting; a PDF viewer’s drawing tools are not equivalent.

Prepare a working copy and a clear removal list

Keep the original in its controlled location and work on a clearly labeled duplicate. Use a separate output name for the release copy. For example, a hypothetical workflow might use supplier-review-working.pdf and supplier-review-release.pdf, with the original stored separately.

Write a short removal list before using the tool. Specify the information to remove, where it appears, and who will review the result. “Remove the customer’s details” is less useful than naming the relevant fields and checking repeated appearances across the file.

Inspect the whole document, including cover pages, headers, footers, screenshots, and appendices. Decide whether an entire page is unnecessary. Do not leave identifying information elsewhere simply because the most prominent occurrence has been removed.

For a hypothetical supplier invoice, you might retain the purchased items and total while removing a contact’s personal phone number and bank details. Review the footer and payment instructions as well as the main billing table. This is an example of a review plan, not advice about what any particular recipient is entitled to receive.

The ICO’s redaction checklist supports working from copies, recording decisions, labeling versions clearly, and reviewing outputs. Use those principles to make the release process repeatable instead of relying on memory.

Apply PDF redactions in Acrobat

In the current desktop workflow documented by Adobe:

1. Open the working copy and choose All tools → Redact a PDF.
2. Select Redact text and images, then drag over the content to remove.
3. Review the marked areas against your removal list.
4. Select Apply.
5. In the confirmation dialog, choose the option to sanitize and remove hidden information when appropriate for the release.
6. Continue and save with a distinct release filename and location.

These steps follow Adobe’s current redaction instructions. Interface placement may differ across releases. Stop if your application only offers comments or shapes; do not substitute a drawing because the expected command is unavailable.

Find repeated text, then review the matches

For recurring names or phrases, Adobe documents Find text and redact, with searches for individual terms, multiple terms, or patterns. Review matches, mark the intended results, and apply them using the search-and-redact workflow.

Build your search list from the actual document. A surname, full name, email address, and spaced account number are different strings. A search for one spelling is not a review of every representation. Check surrounding text so a broad match does not remove necessary information or leave part of an identifier exposed.

Check images separately

A screenshot or scanned page needs visual review even when text search returns nothing. Adobe has a separate image-redaction workflow. Use the documented image or area-removal controls for the sensitive region. Do not conclude that a name is absent simply because the search tool cannot find it in a picture.

Preview on Mac has a dedicated Redaction Selection tool

Apple’s Preview guide for macOS Tahoe 26 lists Redaction Selection separately from shapes and highlights. Open a duplicate PDF, show the Markup toolbar, and use that dedicated tool to select text for removal. Apple states that the redaction becomes permanent once the document is closed.

Save and close the release copy, reopen it, and perform the checks below. Do not assume that Preview’s text-redaction feature is also a complete hidden-information sanitization workflow. Review the document’s other contents and use a tool suited to the full release requirement.

Apple also describes flattening annotations through printing. Flattening ordinary annotations and applying a dedicated redaction operation are different instructions; do not assume that an arbitrary “print to PDF” recipe proves sensitive information is gone. If your installed version differs, consult the matching version of the guide before proceeding.

Review hidden information as a separate task

Visible redactions do not answer every disclosure question. Adobe identifies metadata, comments, and hidden layers as examples of information to review with its Sanitize document tool. In Acrobat Pro, the documented route is All tools → Redact a PDF → Sanitize document.

The tool offers removal of all detected hidden information or selective removal through the Hidden Information panel. Review the detected categories against the release requirements, perform the removal, and save. Sanitization can alter useful document features, so inspect the output rather than assuming every change is desirable.

Also inspect the file’s properties, comments, bookmarks, attachments, and remaining navigation where available. Ask whether a label, linked document, or review note repeats the detail you removed from the page. This is a practical review list; different PDFs contain different features, and no single panel necessarily represents every item you need to assess.

Choose an approved processing environment before uploading the unredacted document to an online service. A confidential input file is disclosed to that service before its output can be reviewed. Check the service’s processing, retention, and deletion arrangements rather than selecting it solely because it is convenient.

Check the saved file you intend to send

Close the editing session and reopen the exact release file from its saved location. This avoids checking a preview while accidentally sending a different file. For consequential releases, have another trained reviewer check the output against the removal list.

If forbidden text appears in a search or copy-paste check, stop the release and reprocess the working copy. Do not repair the appearance with another rectangle. If nothing appears, continue the rest of the review: absence from those checks alone is not proof that every disclosure risk has been eliminated.

Read for context too. A removed name may still be apparent from a job title, a unique reference, or a sentence elsewhere. This is a separate editorial question from whether the selected PDF objects were removed. Decide whether the remaining document still discloses what the removal list was intended to protect.

Share the reviewed copy and keep the original controlled

Before sending, open the actual attachment or download the file from the proposed sharing link and verify its identity. Confirm the recipient, access level, and version. A correct redaction workflow does not help if the link points to the unredacted original.

• The filename and saved location identify the release copy clearly.
• All planned removals were applied and the hidden-information review is complete.
• The saved output passed the required review.
• The attachment or link resolves to that same reviewed output.
• The original remains accessible only to people who need it.
• The review record identifies who approved the release.

Use suitable sharing permissions alongside redaction. Ryvenora’s secure file-sharing guide explains recipient restrictions, access levels, and link checks. Removing selected content and controlling who receives the remaining content solve different parts of the problem.

Frequently asked questions