How do I redact a PDF so it can't be unredacted?

Use a tool that performs true redaction: removing the text and image data from the file itself rather than layering a shape on top. BlurData exports PDFs with the sensitive content removed from the document structure, and flattened images where the redaction is rendered into the pixels — in both cases there is nothing left to recover.

Why do so many redaction failures still happen?

Because the failure is invisible: a covered PDF and a properly redacted PDF look identical on screen. People trust what they see, skip verification, and ship the file. High-profile releases — court documents, government disclosures — have leaked names exactly this way.

Can You Unredact a PDF? Usually Yes — Here's Why (2026)

Q: How do I check if my redacted PDF is secure?

Open the exported file, click and drag to select across the redacted area, then paste into a text editor. Also try Cmd+F searching for the redacted content, and Select All + Copy. If any hidden text appears, the redaction is cosmetic and the document is not safe to share.

The uncomfortable answer

If someone hands you a PDF with black bars over the sensitive parts, there is a good chance you can read what's underneath in less than a minute — no special tools, no hacking. Select the covered area, copy, paste into a text editor. Done.

That's because the most common way people "redact" a PDF is by drawing a shape on top of the text with an annotation tool. The shape and the text are separate layers. The viewer shows you the shape; the file still contains the text. Search engines, copy-paste, text extraction and screen readers all see straight through it.

This is not a rare edge case. Court filings, government disclosures and corporate documents have leaked names, addresses and account numbers exactly this way — including, famously, portions of the released Epstein documents. We covered that failure in detail here.

Why reversible redactions happen

Three reasons, all human:

The tools make it easy to do the wrong thing. Every PDF editor has a rectangle tool. True redaction — removing content from the file structure — is a separate, often paid feature buried behind different menus.
The failure is invisible. A covered PDF and a properly redacted PDF look pixel-identical on screen. The only way to know the difference is to test the file, and almost nobody tests.
Metadata gets forgotten. Even when the visible text is handled, document properties, annotations and embedded data can carry names, usernames and file paths out the door.

How to check whether your redacted PDF is actually secure

The 60-second verification

Select and copy: click and drag across the redacted area, copy, paste into a text editor. Anything appear?
Search the file: press Cmd+F and search for a word you redacted. Any hits?
Select all: Cmd+A, Cmd+C, paste everything into a text editor and scan for the sensitive content.
Check properties: open the document info panel and look at title, author and keywords.

If all four come back clean, the content is gone. If any of them shows redacted text, the file is not safe to share — the redaction is cosmetic.

How to redact a PDF so it can't be unredacted

The rule is simple: the sensitive content has to be removed from the file, not covered. In practice that means:

For PDFs: use a tool with true redaction that deletes the text from the document structure on export. After export, the verification above should find nothing.
For images and screenshots: the redaction must be rendered into the pixels of a flattened image — not a movable shape layer. And use solid covers, not light blurs: heavy pixelation of short text can sometimes be reconstructed.
Either way: verify the exported file, not the working file. What matters is what leaves your machine.

This is exactly what BlurData is built for. It finds sensitive content automatically — emails, names, addresses, account numbers and other PII — and exports PDFs with that content removed from the file itself, and images re-rendered with the redaction baked into the pixels. There is no hidden layer, because there is no layer at all. Everything runs on your Mac; the document is never uploaded.

A note on ethics: this article explains why weak redactions fail so you can protect your own documents. If you receive a badly-redacted file containing someone else's personal data, the right move is to tell the sender — they almost certainly don't know.

Frequently asked questions

Can you unredact a PDF?

Very often, yes. If the redaction was made by drawing a black rectangle or highlight over the text, the original text is still present in the PDF — covered, not removed. Only redactions that remove the text from the document structure are irreversible.

How do I check if my redacted PDF is secure?

Select across the redacted area and paste into a text editor, search the document for the redacted content, and copy all text out of the file. If anything hidden appears, the redaction is cosmetic.

How do I redact a PDF permanently?

Use a tool that removes the content from the file on export rather than layering a shape over it, then verify the exported file. BlurData does this automatically, offline, on your Mac.

Why do redaction failures keep happening?

Because a covered PDF and a properly redacted one look identical on screen. People trust their eyes, skip verification and ship the file.

Redact so there's nothing to unredact

Automatic detection, permanent removal, 100% offline. 14-day money-back guarantee.

Download BlurData for Mac