ShiftTools ShiftTools
Zero-Upload Browser Utility

PDF Redactor & Sanitizer

Permanently redact confidential text, SSNs, emails, phone numbers, and areas in PDFs in your browser by flattening pages into raster streams.

Interactive Tool Workspace

Loading local in-browser WebAssembly engine & hardware cryptographic sandbox...

Every year, high-profile legal filings and corporate disclosures make headlines for the same mistake: someone drew a black rectangle over confidential text in a basic PDF editor, not realizing the original text was still sitting underneath waiting to be copied and pasted. Use this tool to redact PDF text permanently in your browser. It combines one-click PII auto-detection and freehand canvas boxes with full raster page flattening so redacted characters are destroyed for good.

Why drawing a black shape in a regular PDF editor fails

In the PDF file format, text and vector shapes live on independent drawing layers within a page's content stream. When you draw a black rectangle over a Social Security Number, bank account, or client name in a standard annotation tool, the PDF simply adds a rectangle instruction on top of the existing text instruction. Anyone who opens that PDF can press Ctrl + A, copy the invisible text right through the black box, and paste it into Notepad - or open the file in any object editor and delete the black box in two seconds.

True sanitization requires two things to happen before the file leaves your computer:

  1. The redaction boxes must be burned directly into a flat pixel buffer at print resolution.
  2. The original vector text stream and hidden document metadata must be discarded so zero text tokens survive in the exported PDF.

That is exactly how this redactor operates: every page is rendered onto an HTML5 canvas with your blackout, whiteout, or exemption-code boxes permanently fused into the bitmap pixels, and re-packaged into a brand-new PDF container with a wiped metadata catalog.

How to redact PDF text and sensitive regions permanently

  1. Drop your PDF into the upload box or click Select PDF File(s) to load the interactive redaction canvas.
  2. To mark patterns automatically across all pages, click any of the Auto-Detect PII buttons in the left panel (Emails, Phone Numbers, SSN / IDs) or type a name or account number into the Custom Keyword Redact box and click Mark Matches.
  3. To redact any paragraph, signature, or image manually, simply click and drag a rectangle directly on the page preview canvas.
  4. Pick a Redaction Style (Solid Blackout, Clean Whiteout, or Stamped Label such as REDACTED or XXXX XXXX), review your marked boxes, and click Apply Permanent Redaction & Download.

Auto-PII pattern scanners and manual canvas tools

Redacting a multi-page contract by hand is tedious and makes it easy to miss an email address or account number buried on page 19. The workspace pairs automated regex coordinate scanning with manual drag-to-redact controls.

  • One-click PII auto-scanners: Scans the positional text coordinates across every page of your PDF to automatically place bounding boxes over Email Addresses, Phone Numbers, and SSN / 12-Digit ID patterns.
  • Custom keyword & phrase redaction: Type a client's surname, project codename, or invoice number once and click Redact Keyword to place redaction boxes over every matching occurrence across all pages simultaneously.
  • Freeform drag-to-redact on the live canvas: Click and drag anywhere on the rendered page preview to cover signatures, photographs, bar codes, or entire paragraphs.
  • Three visual redaction styles: Switch between classic Blackout (#09090b) with optional white exemption text (such as REDACTED or FOIA EX. 6), Clean Whiteout (#ffffff) to erase old headers or footers cleanly, or Masked Pattern (XXXX XXXX).
  • Per-box audit list: The sidebar lists every redaction box on the current page showing whether it was created by an Auto-Scanner or Manual Canvas Selection, with a one-click delete button if you want to unmark a false positive before exporting.

Worked example: sanitizing a 22-page legal exhibit

Suppose you need to produce Customer-Complaint-Exhibit.pdf (22 pages, 1,920 KB) for an external audit, but must remove all customer email addresses, phone numbers, the complainant's surname ("Henderson"), and a handwritten signature on Page 22.

  1. You load the 22-page PDF into the redactor.
  2. You click Auto-Redact Emails (which finds and marks 9 email addresses across the 22 pages) and Auto-Redact Phones (which marks 5 phone numbers).
  3. You type Henderson into the Custom Keyword box and click Mark Matches, which places boxes over 18 occurrences of the name across the document.
  4. You jump to Page 22 and drag a manual rectangle over the handwritten signature block.
  5. With Solid Blackout + "REDACTED" Label selected, you click Apply Permanent Redaction & Download.

The exporter renders all 22 pages at 150 DPI with all 33 redaction boxes burned directly into the page pixels, strips all author/title metadata, and downloads Customer-Complaint-Exhibit-redacted.pdf (2,640 KB). Trying to select text or search for Henderson in the exported PDF returns 0 matches because no text layer exists in the sanitized file.

What to double-check before releasing a redacted PDF

Keep two important operational realities in mind when using automated pattern matching:

First, auto-detection works on selectable text layers. If a page in your PDF contains digital text, the email, phone, and keyword scanners can read the exact (x, y, width, height) coordinates of every word. However, if a page is a flat photograph or raw scanner bitmap with no OCR text layer, regex pattern scanners cannot read the pixels - you must draw manual redaction boxes over sensitive regions on scanned pages using your mouse.

Second, because permanent redaction flattens pages into raster images to guarantee that underlying vector text bytes are destroyed, the exported PDF will no longer have selectable text on those pages. Always keep your original unredacted source file stored safely in your private folder, and distribute only the -redacted.pdf output.

Local browser processing for confidential files

Uploading an unredacted legal filing or medical chart to a remote server just to redact it would expose the very PII you are trying to protect. Here, all text coordinate scanning, canvas drawing, and raster PDF reconstruction happen 100% locally in your browser RAM.

Related privacy and redaction tools

If you specifically need to mask the first 8 digits of an Indian Aadhaar card while keeping the last 4 digits visible, use the dedicated ID & Aadhaar Masker. To strip only hidden header tags without flattening pages, open the PDF Metadata Remover. For blurring regions in PNG or JPG screenshots, try the Screenshot Annotator & Blur Studio, or scrub API tokens from browser logs with the HAR Sanitizer.

Frequently Asked Questions

Can anyone copy or recover the text underneath the black boxes after I export?

No. Unlike annotation tools that merely place a vector shape on top of live text, this redactor renders each page with the redaction boxes onto a flat pixel canvas and builds a brand-new PDF from those rasterized bitmaps. Zero original text characters remain in the exported file.

Does permanent redaction also wipe the hidden PDF Author and Title metadata?

Yes. When generating the sanitized output file, the exporter creates a fresh PDF container and leaves the Title, Author, Subject, Creator, and Producer metadata fields completely blank.

Why did Auto-Detect Emails or Keyword Search find 0 matches on my scanned PDF?

Auto-Detect scans the embedded text coordinates inside the PDF. If your PDF was created by a scanner without Optical Character Recognition (OCR), the pages are pure images with no text layer. On scanned pages, simply click and drag on the canvas to draw manual redaction boxes.

Can I use Whiteout instead of Blackout to erase a header or footer cleanly?

Switch the Redaction Style in the left sidebar from Blackout to Solid White. That covers the selected area with a crisp white rectangle before flattening the page, which is ideal for erasing old letterheads or page numbers.

How do I remove a redaction box if I drew it in the wrong spot?

Before clicking the final export button, look at the Marked Redactions list in the left panel for your current page. Click the Remove button next to any individual box - or click Clear All Boxes - to adjust your selection.

Can I stamp a custom exemption code like "FOIA (b)(6)" on the black boxes?

Yes. Type your desired label (such as REDACTED, CONFIDENTIAL, or FOIA b6) into the Redaction Label input box in the sidebar, and it will be stamped in high-contrast monospace type centered inside your blackout boxes.