Security
How to Hide Sensitive Information in a PDF (Why Black Boxes and Cropping Fail)
7 min readUpdated October 7, 2026By the PDF Studio team
Every few months a news story reveals that a “redacted” PDF was not really redacted: someone selected the black bars, copied the text beneath, and pasted it somewhere. Hiding information in a PDF is easy to do badly. Here is why the obvious methods fail, and what to do instead.
Why covering text does not work
A PDF page is built in layers. If you draw a black rectangle or a white box over some text, the text is still there underneath. Anyone can select it, copy it, search for it, or remove the box in an editor and read it. The same is true of highlighting something in black.
Cropping has the same weakness. Crop PDF changes the visible area of each page, but the content outside the crop is still stored in the file and can be revealed by software that ignores the crop box.
Method 1: remove whole pages
If the sensitive material is on its own page, the cleanest fix is to delete the page. Delete PDF Pages builds a new PDF only from the pages you keep; the deleted pages are not hidden inside it. Or use Extract Pages to create a file containing only the pages that should be shared.
Method 2: flatten the page to an image
When the sensitive part is a name, number, or paragraph in the middle of a page you otherwise need, convert the page to a picture, cover the sensitive part in the picture, and rebuild the PDF from the picture. The text underneath no longer exists, because the page is now only pixels.
- 1Open PDF to JPG and convert the document. Each page becomes a JPG image (rendered at twice the normal size).
- 2Open the image of the affected page in any image editor and paint a solid, opaque black box over the information. Save it as a JPG or PNG.
- 3Open JPG to PDF (or Scan to PDF for standard page sizes) and add the images in order, replacing the edited page.
- 4Download the new PDF. The text is gone from the file, and so is anything under the box.
The trade-off is that the result is all images: the text can no longer be searched or selected, and the file is larger. Run OCR PDF afterwards if the rest of the text must be searchable — it recognizes the remaining visible words only.
Verify before you send
- Try to select and search. Open the final PDF, press Ctrl/Cmd + A to select everything, and use search for the word you meant to remove.
- Check with Extract Text. Run Extract Text on the final file. If the sensitive text appears in the output, it is still in the document; if the tool reports no text, it is image-only.
- Look at the document properties. Metadata such as title and author can leak information. Compress PDF clears those fields as part of compression.
- Check every page, including thumbnails and bookmarks where names sometimes hide.
When you need true redaction
Professional PDF software includes a dedicated redaction feature that permanently deletes the selected text and image regions from the file and also scrubs metadata. For legal, medical, or regulatory work where redaction must be defensible, use one of those tools. The methods above are practical for everyday sharing, as long as you verify the result.
And remember what a password does and does not do: it controls who can open a file, not what is inside it. See how to password-protect a PDF.