Make a PDF safe to send

Private information hides in a PDF in four places: printed on the page, stored around it, stapled inside it, and sitting under cover marks someone drew. Each place needs its own cleanup, and the guides below handle one each, with browser tools that never upload your file.

Redact PDF

Find where your leak lives

Start from what must disappear, not from a tool name. A client name in paragraph three and an author name in the file properties sound similar and live in different parts of the file, so one cleanup pass cannot catch both. Match your leak to a row.

Which cleanup fits which leak
Where it hidesWhat it looks likeCleanup to open
On the pageNames, numbers, faces in the textRedact words and images for good
Around the pageAuthor, dates, software, XMP copyStrip the metadata fields
Inside the fileAttached spreadsheet or old versionScan and drop the extras
Under a black markCover boxes from someone elseCheck for text left below

A file that carries two kinds of leak needs two passes. The redaction walkthrough destroys page content from the content stream and rebuilds the page, while the metadata walkthrough clears the properties dialog fields plus the XMP duplicate it never shows. Run both when both apply.

Order the passes so they stick

Do every other operation first. Merging, compressing or signing after a cleanup writes a fresh file and can stamp new metadata onto it, quietly undoing the pass you just finished. Redact the pages, strip the metadata and attachments with Privacy scan, rename the file to something neutral, and only then inspect the copy that will travel.

The black mark check belongs at the end too. Redaction check reads the page drawing instructions, outlines opaque dark rectangles and shows any selectable text it recovers from beneath them. The recovery explainer draws the line between a mark that destroys and a mark that paints over, so you know what the report means.

Mistakes that leak after a cleanup

The classic is checking a file that no longer exists: the inspected draft gets one more compress, and the compressed copy ships uninspected. Always open the download that leaves the tab, select across each cleaned area, copy, and paste into a text editor. What lands there was never removed.

Then the outside of the file. A spotless report named harper-medical.pdf, mailed with the client in the subject, protects nothing. Rename neutrally, keep account numbers out of subjects, and remember that a cropped out paragraph still sits in the file for anyone who widens the view. Cropping frames a layout; only redaction deletes.

Short answers about PDF privacy

Does blacking out text also clean the metadata?
No. Those are separate parts of the file. Redaction destroys marked page content, while author names, dates and attachments survive it. Follow with Privacy scan or the metadata tool on the same file.
Can a check prove my file is clean?
No check can. Redaction check reports the failures it knows, dark covers with live text below, plus metadata and attachments for review. Words baked into scanned images and odd drawing tricks still need your eyes on the page.
Should I print the PDF fresh to wipe its history?
A fresh print usually drops old properties by accident, but accident is not a method. Print when you must, then inspect the printed copy with Privacy scan instead of trusting the trip.
Which step goes last?
The inspection of the exact file you send. Every operation rewrites the file, so redacting early and merging late ships a file the check never saw. Clean, finish, rename, then check.

Clean a file now

Everything happens in this tab. The file stays on your machine, and the cleaned copy is inspected before it downloads.

Redact PDF

Privacy guides and tools

Written and maintained by the PDFGym team. Last updated: