How to Redact a Tax Return, W-2, or 1099 Before You Share It

By the SladdPDF team · Published August 28, 2026 · Updated August 28, 2026

A tax return, W-2, or 1099 is one of the most complete identity packages a document can hold: full name, address, Social Security number, employer, income, and often a bank account and routing number for direct deposit. Before you hand a copy to a landlord, lender, school, or new employer, redact the fields they don't actually need — the IRS itself only ever shows the last four digits of an SSN on a transcript, and that is the bar to match.

Key takeaways

A full 1040, W-2, or 1099 bundles a Social Security number, address, employer, income, and often a bank account number — exactly what identity thieves target, and reported identity-theft complaints keep climbing year over year.
Redact before sharing with a landlord, lender, school, or new employer verifying past income. Never redact a copy you are filing with the IRS, a state tax agency, or submitting under an official audit or notice.
Match the IRS's own standard: its transcripts mask all but the last four digits of an SSN or EIN, the first few characters of a name, and most of a street address, while keeping financial figures fully visible.
A black rectangle drawn in a basic PDF viewer usually leaves the text layer intact underneath — it can still be selected, copied, and read.
Redacting locally in your browser means a document this sensitive never touches a third-party server.

Why tax documents are an identity-theft target

Identity thieves don't need to guess your Social Security number, address, and employer separately — a tax document already ties them together in one file, along with your income and sometimes a bank account number. The IRS's own identity-theft guidance for individuals treats tax-related identity theft, where someone files a return using a stolen SSN to claim a refund, as a distinct and ongoing risk category, not a rare edge case.

The volume backs that up. The FTC's Consumer Sentinel Network — the database that pools reports from consumers and law enforcement nationwide — logged 6.5 million consumer reports in 2024 alone, sorted across categories that include identity theft. Every one of those reports starts with a criminal getting hold of the kind of identifying information a tax return contains by default.

The FTC's Consumer Sentinel Network received 6.5 million consumer fraud and identity-theft reports in 2024 — the database the IRS and FTC both draw on for tax-related identity-theft cases (FTC, Consumer Sentinel Network Data Book 2024).

None of this means you should stop sharing tax documents — landlords need proof of income, lenders need it for underwriting, schools need it for financial aid. It means sharing the parts a recipient actually needs, and redacting the rest before the file leaves your device.

What to redact on a Form 1040

A full 1040 return carries more identifying detail than almost any other document you'll ever hand to a stranger. Before sharing a copy outside the tax process, redact:

Your Social Security number — and your spouse's, if filing jointly.
Dependents' Social Security numbers, listed in the dependents section.
Bank account and routing numbers, used for direct deposit of a refund or direct debit of a balance due.
Your signature, if the copy will circulate beyond the recipient who needs to verify it came from you.

What usually stays visible: filing status, income lines, and the refund or amount-owed figures — the numbers a landlord or lender application is actually asking for. If the recipient only needs proof of income, consider whether they need the full return at all, or whether a W-2 or a wage-and-income transcript covers it with far less exposed.

IRS tax transcripts are issued in a masked format by default — showing only the last four digits of an SSN or EIN, the first several characters of a name, and the first six characters of a street address, while every financial figure stays fully visible. That masking level is a reasonable target for any tax document you redact yourself.

What to redact on a W-2

A W-2 is smaller than a full return, but it still pairs a Social Security number with an employer name, address, and exact wages. When sharing a W-2 for a loan application, a new employer's income verification, or a rental application, redact:

Your Social Security number (Box a).
Your home address (Box e/f), if the recipient doesn't need to confirm it independently.

What usually stays visible: the employer's name and EIN (Box b) and the wage and withholding boxes — these are typically exactly what the request is for. Some employers' own EIN is treated as less sensitive than a personal SSN, but redact it too if the recipient has no legitimate need to know who you worked for.

What to redact on a 1099

1099 forms — NEC, MISC, INT, DIV, and the rest — follow the same logic, with one extra wrinkle: the payer's taxpayer identification number (TIN) sits right next to yours, and sharing the form can expose both.

Your TIN or SSN (recipient's identification number).
The payer's TIN, unless the recipient specifically needs to verify who paid you.
Any account number box, which some 1099 variants include for the payer's internal reference.

What usually stays visible: the income amount itself, which is the figure a lender or benefits agency is actually verifying.

What not to redact — and when not to redact at all

Redaction is for copies that leave the tax process, not for the process itself. Three situations where you should not redact:

Filing with the IRS or a state tax agency. Your e-filed or mailed return must carry your correct, complete SSN and financial figures. A redacted return is not a valid filing.
Responding to an official IRS notice or audit. Provide exactly what the notice requests, unredacted, unless the notice itself instructs otherwise.
Working with your accountant or tax preparer while they prepare your return. They need the full numbers to file accurately. The IRS's own guidance for tax professionals notes that preparers may redact Social Security numbers and bank account information on the client's paper copy — the one you keep for your own records afterward — not on the working file used to prepare or e-file the return.

Everywhere else — a landlord, a mortgage lender, a school financial-aid office, a new employer's HR department, a visa or immigration application — redaction of the fields above is the safer default.

Why a black box or highlight tool isn't enough

Drawing a black rectangle over a Social Security number in a basic PDF viewer, or using a "highlight" annotation tool to cover it, hides the digits visually but usually leaves the underlying text object untouched. Select-all and copy-paste in the same PDF can pull the covered number straight out — this is the same failure mode behind most public redaction mistakes.

A rectangle or highlight drawn over an SSN in a PDF is a graphic sitting on top of an intact text layer — the number underneath can often still be selected, copied, and pasted elsewhere.

Scanned tax documents add a second trap: many scans carry an invisible OCR text layer created when the document was digitized, so covering the visible number on a photo or scan still leaves a searchable, copyable copy of it behind. And a PDF's metadata — title, author, the software used to create it — can independently carry your name even after every visible number is gone; stripping metadata is part of a complete pass.

Real redaction removes the data instead of covering it: delete the underlying text object, or rasterize the page into a flat image where the redacted digits no longer exist as text at all.

A safe workflow for sharing tax documents

A defensible way to share a tax return, W-2, or 1099 with a third party:

Work on a copy, never the original file you filed or plan to file.
Decide what the recipient actually needs. A landlord verifying income rarely needs your full 1040; a wage-and-income summary or a redacted W-2 is often enough.
Mark every instance of the SSN, account numbers, and dependents' identifiers — they often repeat in headers, worksheets, and attached schedules, not just the main form.
Export with true redaction or rasterization, not a drawing tool's rectangle, using a PDF redaction tool that runs locally in your browser.
Strip metadata on export so the file's title and author fields don't carry your name separately from the page content.
Verify before you send. Open the exported file, select all, copy, and paste into a plain text editor. If any redacted number appears, the export failed and you need to redo it with a tool that actually removes the data.

You can run this entire workflow in SladdPDF, a free browser-based redaction tool. It processes the file locally with JavaScript and WebAssembly — a document this sensitive is never uploaded to any server, and the tool keeps working offline once the page has loaded. Secure mode rasterizes each page on export, destroying the underlying text so a covered SSN or account number cannot be recovered by copy-paste, and metadata can be stripped in the same export.

The free version has no page limit; a Pro license unlocks high-resolution 300 DPI export for documents you need to print or file at full quality.

This article is general guidance, not tax or legal advice.

Redact a tax document without uploading it anywhere

SladdPDF runs entirely in your browser — files are never uploaded to a server. Free with no page limit; Pro unlocks high-resolution 300 DPI export.

Redact a PDF now

Frequently asked questions

Do I need to redact my SSN before giving my tax return to a landlord?

Yes. A landlord verifying income needs to see your earnings, not your Social Security number, bank account number, or dependents' SSNs. Redact those fields and keep the income figures the application actually requires.

Is it safe to email my W-2 to an employer or lender?

Standard email is not encrypted end to end and can sit in inboxes and backups indefinitely, so redact your SSN first regardless of the channel. Many employers only need the wage and withholding boxes, not the full Social Security number, to verify past income.

Should I redact my tax return before giving it to my accountant or tax preparer?

No — your preparer needs your full, unredacted SSN and financial details to file an accurate return. The IRS notes that preparers may redact SSNs and bank account information on the paper copy they hand back to you for your own records afterward, not on the working file used to prepare or e-file the return.

Does the IRS ever want a fully redacted tax return?

No. Filings to the IRS, your state tax agency, or in response to an official audit or notice must include your full, correct identifying numbers. Redaction is for copies you send to third parties outside the tax process — landlords, lenders, schools, employers — not for the return itself.

Is SladdPDF safe for something as sensitive as a tax return?

SladdPDF processes the file entirely in your browser using JavaScript and WebAssembly — your tax return is never uploaded to a server, and the tool works offline once the page has loaded. Secure mode rasterizes the page on export so the redacted numbers cannot be recovered by selecting or copying text, and metadata can be stripped in the same pass. Free with no page limit; Pro adds high-resolution 300 DPI export.

Sources