Black Out Text in a PDF: Why Drawing a Black Box Is Not Redaction

By the SladdPDF team · Published August 23, 2026 · Updated August 23, 2026

You can black out text in a PDF in about ten seconds: open the file, draw a black rectangle over the sensitive words, save. The problem is that the rectangle is a picture drawn on top of the page while the words stay stored underneath — select the page, copy it, paste it into any text editor, and the "hidden" text comes back in full. Real redaction deletes the characters from the file, and the surest way to guarantee that is to flatten each page to an image.

What happens when you black out text in a PDF?

When you black out text in a PDF by drawing a black rectangle over it, you add a shape to the page — you do not delete a single character of the text underneath. On screen the result looks perfect: the words are invisible and the page prints correctly. Inside the file, nothing has been removed.

This is not a bug in your PDF app. The rectangle and the sentence it covers are independent objects that happen to share coordinates, and the viewer paints them in order, so the rectangle lands on top. Ask the file for its text instead of its picture — which is what copy, search, screen readers and extraction libraries do — and the rectangle is not part of the answer.

The trap is the phrase itself. On paper, blacking out with a marker destroys the ink. On a computer, it means drawing something over. The metaphor promises destruction; the software delivers concealment.

Text layer vs visual layer: two things that never touch

A PDF is not a picture of a page — it is a list of instructions for drawing one, and text is stored as text, not as pixels. Each page carries a content stream: operators saying which font to load, where to place the pen, and which characters to draw there. "Account number 5401 2288" is stored as those characters plus a font and a coordinate.

Graphics live in the same stream as separate operators: set the fill colour to black, draw a rectangle, fill it. Operators run in order, so an object written later covers one written earlier. That painting order is the whole mechanism behind the black box: it changes what you see, and nothing about what the file contains.

There are two layers to any PDF page, read by different consumers:

• The visual layer — what a human sees when a viewer renders the page. This is where your black box lives.
• The text layer — the character data a machine reads when you select, copy, search, extract or index. This is where the sensitive words live, untouched.

Every leaked-redaction story follows from that split: the redactor checked the visual layer, because that is the only one a screen shows; whoever broke it read the text layer.

Two related habits fail the same way: white text is still text, since copy-paste ignores colour, and one-point text is the same trick at another scale. Anything that changes only appearance leaves the text layer intact.

Annotations vs content removal

Some black boxes are even easier to defeat, because they are not part of the page at all — they are annotations: separate objects attached to a page, like comments, highlights, stamps and markup shapes. Annotations are built to be added, moved and deleted without altering the document underneath, which is exactly what makes them useless for redaction.

If your black box is an annotation, anyone can open the comments panel in a PDF editor, select it and press Delete. The document beneath appears intact — no technical skill, no copying required. A black highlighter, the classic Word-then-export mistake, behaves the same way.

Well-designed tools warn you. Preview on macOS shows a message when you cover content with a shape, saying the content behind the annotation will not be deleted, and points you at its dedicated Redact tool. The two look identical in the result and differ completely in what they leave in the file.

A third case catches professionals. Acrobat's redaction is deliberately two-step: you mark content, then apply the marks, which permanently removes the information and cannot be undone. A file saved after marking but before applying looks redacted and is not. Acrobat then offers a separate sanitize step for hidden data.

The 30-second test you can run right now

You do not have to take this on faith. Test any PDF in under a minute — on the exported file you are about to send, not the working copy.

1. Open the finished PDF in any viewer, including your browser.
2. Select everything with Ctrl+A (Cmd+A on a Mac), then copy with Ctrl+C or Cmd+C.
3. Paste into a plain text editor — Notepad, TextEdit, a code editor, an email draft.
4. Read what came out. If a word you removed appears in that paste, the document is not redacted.

Two extra checks take twenty seconds. Search with Ctrl+F for a name or number you removed: if the viewer jumps to a black bar, the text is there. Drag your cursor across the bar — if it highlights the way text does, you are selecting characters. On a command line, pdftotext from the Poppler tools dumps a file's whole text layer, ignoring every graphic.

One caveat: passing proves the page text is gone, not that the file is clean. Metadata, attachments, form-field values, bookmarks and back-of-document indexes live outside the page content and survive a perfect visual redaction — check the document properties too, and see our guide to removing metadata from a PDF.

What it costs: the TSA screening manual

In December 2009 the US Transportation Security Administration published its airport screening standard operating procedures on a federal contracting website with the sensitive passages blacked out — and fully readable. Rather than removing the text, whoever prepared the file drew black boxes on top of it. The content stayed in the PDF, indexed and searchable, and readers recovered it by copying the blacked-out portions into another document.

The material was not trivial: coverage at the time described screening rules for diplomats and law-enforcement officers, images of official credentials, and procedural detail the agency meant to withhold. The TSA pulled the file, but copies had already spread and the manual is still mirrored today. Five employees were placed on administrative leave. The agency said the document was an outdated, unclassified version that was never implemented.

What makes the case useful is not that the TSA was careless. The same failure has hit ministries, courts, police forces, law firms and a major newspaper over two decades — a workflow problem, not a competence problem: every one of them checked the visual layer and shipped the text layer. See a dozen documented cases in famous redaction failures.

What does real redaction require?

Real redaction removes the content from the file rather than concealing it, then removes the copies hiding elsewhere. The US National Security Agency's guidance for publishing sanitized documents, Redacting with Confidence, is explicit: covering text, charts or tables with black rectangles, or highlighting text in black, is among the most common mistakes, because the original text remains in the file and can be uncovered by deleting the overlaid graphics. Effective redaction requires actually removing the data.

US federal court guidance for filers puts it plainly: the highlighter function creates a black box over the data but merely hides it, and anyone can copy the box, paste it into a word processor and read what was underneath. Courts therefore recommend software that scrubs the content — or, for scans, printing the page, blacking it out with a marker and scanning it back in.

A redaction is finished when three things are true: the characters are deleted from the page content, every derived copy is gone (metadata, annotations, form fields, attachments, an index at the back), and you have verified the exported file. What the common methods actually do:

Rasterization: the guarantee

Rasterization means rendering each page to a bitmap and rebuilding the PDF from those images, so the only thing that survives is pixels. No text layer to copy from, no annotation to delete, no invisible object under anything. It is what the courts' print-and-rescan advice achieves, without the printer.

The appeal is that it does not depend on a tool correctly finding and deleting the right text objects. Object-level redaction must catch every character in the marked region and leave no fragment in a font subset, a tagged-content tree or a duplicated stream. Rasterization sidesteps that by throwing the structure away.

The trade-offs are real. A rasterized PDF is usually larger, and its text is no longer selectable or searchable — so screen readers cannot read it unless you run OCR, a genuine accessibility cost for documents meant for wide publication. Quality depends on export resolution: too low and small print gets fuzzy, too high and the file balloons. We cover the DPI trade-off in rasterization: the gold standard of PDF redaction.

For anything genuinely sensitive — bank details, health data, ID numbers, witness names — losing selectable text is a small price. Where searchability matters, object-level redaction in a professional tool, verified with the copy-paste test, is a reasonable alternative.

How to black out text in a PDF so it stays gone

The safest redaction happens before the PDF exists. If you own the source document, delete the sensitive text in the word processor and export a fresh PDF: text deleted before export never enters the file, so there is nothing to recover.

Usually you do not have that option, and the tool you pick decides whether the words survive. SladdPDF, our free browser-based redaction tool, works locally: the file is processed in your browser with JavaScript and WebAssembly, nothing is uploaded to any server, and it keeps working offline once loaded. The free version has no page limit; Pro (a paid licence key) unlocks high-resolution 300 DPI export.

1. Open the PDF in your browser. Go to sladdpdf.com on Windows, macOS, Linux or ChromeOS and load the file. It stays on your device.
2. Draw redaction boxes over every sensitive passage. Zoom in for small print; Ctrl+Z undoes a mistake. Check headers, footers and repeated fields.
3. Review every page in the thumbnail strip. Names and numbers repeat more often than people expect.
4. Export in Secure mode. It rasterizes each page after redaction, so the text, layers and hidden objects underneath are destroyed and unrecoverable. Fast mode draws vector overlays and warns that underlying text may in some cases still be extractable — not for sensitive data.
5. Enable metadata removal on export, so the title, author, creation tool and hidden tags go too.
6. Run the copy-paste test on the exported file before you send it. Thirty seconds, every time.

For long documents, batch work or mandated redaction logs, a desktop tool like Adobe Acrobat Pro is the better fit — Apply, then Sanitize, then test the output the same way. Starting from scratch? Our complete guide to redacting a PDF for free walks through the whole workflow.

The rule is short enough to remember: a black box is what a finished redaction looks like. It is never what makes one work.

This article is general guidance, not legal advice.