VelloDoc
PDF Security

Why Doesn't a Black Box Redact a PDF?

A black box drawn over text in a PDF usually leaves the words in the file. Here's why, and how to redact a PDF so the text is really gone.

Quick answer

  • A black box drawn with a shape tool sits on top of the page. The words are still in the file underneath.
  • Anyone can copy them out by selecting the box and pasting into a text file.
  • Real redaction deletes the text and images inside the marked area. Redact PDF does exactly that.

Why isn't a black box enough?

Because it covers the words without deleting them. A PDF page is a list of drawing steps, and the box is just one more step on top.

  • The text is still there: the steps that draw it haven't changed.
  • Copy and paste gives it away: most viewers let you select text right through the box.
  • The box can come off: anyone with a PDF editor can delete it.
  • Text tools ignore it: some software pulls every word out of a file, whatever is drawn on top.

Has this really gone wrong in public?

Yes, and it's still happening. The newest big case came in early 2026, when the US Justice Department released the Epstein files.

  • The Epstein files, early 2026: people found that some blacked-out text could be copied out, or brought back with a photo editor.
  • What leaked: names, email addresses and faces of victims. Their lawyers told a judge that nearly 100 lives had been turned upside down.
  • The clean-up: the Justice Department pulled several thousand documents to fix them, but copies had already spread online.
  • Paul Manafort's lawyers, January 2019: reporters copied the black bars in a court brief into a text file and read every word.
  • The lesson: once a badly redacted file is out, taking it down doesn't take the words back.

What has to be removed for real redaction?

The content itself, not just how it looks. Check all four of these before you share the file.

  • The text: the words have to be deleted, not hidden behind a shape or turned white.
  • Picture pixels: if the detail is in a photo, a chart or a scan, the pixels under the cover have to go too.
  • Metadata: the author's name, the software and the dates are stored apart from the page, so clear them separately.
  • Hidden extras: layers you can switch back on, attached files, form entries and comments all travel with the file.

How do I redact a PDF properly?

Delete the content first, then clean up what's around it. These steps work best in this order.

  • Start from the original: if you still have the Word or Excel file, delete the text there and save a new PDF.
  • If you only have the PDF: use Redact PDF. It deletes the text and images inside the areas you mark and fills them with black.
  • Clear the metadata: Remove Metadata removes the author, software and dates in one go.
  • Catch hidden extras: PDF Sanitizer finds hidden layers, attached files and scripts that redaction won't reach.
  • Test it: select the black areas, paste them into a text file, and check the file's properties for names you missed.

Are scanned PDFs safer to redact?

Not always. A scan has no text to select, but it can still hide what's under a box.

  • Boxes drawn on top: if the box is a separate shape, the original picture is still underneath it.
  • Boxes burned in: if the box was part of the image when it was saved, the pixels under it are gone.
  • OCR text: a scan that went through OCR PDF has invisible text over each word, and it can still be copied after you black out the picture.

Try the tools

Try it on your own file. The tools are free and you don't need an account.

Redact PDFPDF SecurityRemove MetadataPDF SecurityPDF SanitizerPDF Security

Common questions

I used my PDF viewer's shape tool. Is the file safe to send?

No. A shape tool only puts a box on top of the page. Redo it with Redact PDF and test the result before you send it.

Does flattening a PDF remove the text under a black box?

Not on its own. Flattening merges the box into the page so it can't be moved, but the text underneath can still be in the file. Use Redact PDF, then copy the black area to test it.

Can a proper redaction be undone?

No. The text is deleted from the file, so there's nothing left under the black box to bring back. Keep an unredacted copy somewhere safe if you'll need it later.

Does redacting a PDF remove its metadata too?

No. Redaction deals with what's on the page. The author, software and dates are stored elsewhere, so clear them with Remove Metadata.

What else can leak from a PDF?

Hidden layers, comments, form entries and attached files. None of them show when you print, but they all travel with the file. PDF Sanitizer checks for them.

This post is general information about working with PDFs, not legal or security advice. Check anything important with someone qualified. Posts are written with AI help, based on how our tools actually work. About VelloDoc

More blogs

All posts →

How Do I Sign a PDF Without Printing It?

How to add a typed or drawn signature to a PDF on screen, whether it counts as legal, and how to keep the file safe once it's signed.

Read the post →

How Do I Password Protect a PDF?

How to lock a PDF with an AES-256 password, why a permissions-only lock is weak, and what to do if you forget the password later.

Read the post →

What Does Your PDF's Metadata Reveal About You?

A PDF can carry your name, the apps you used and dates in places you never see. Here's what's in there and how to clear it before you share.

Read the post →