Task how-to - redact

How to redact a PDF properly

Learn how to properly remove sensitive information from a PDF in your browser. Covering text with whiteout leaves it in the file. Here is how to remove it.

Use Secure redaction when you need to remove sensitive information from a document before sharing it. The workflow is:

  1. Open Secure redaction.
  2. Use LOAD PDF in the top bar and open the document from your device.
  3. Select Redact in the toolbar and keep Secure redaction selected.
  4. Select the text — or draw a box over the area — that must be removed.
  5. Review the sanitize options, apply the redaction, and export once verification passes.

Diagram showing text selected, a black redaction bar applied, and the underlying data removed successfully

The critical difference between redaction and drawing a black box over text is what happens beneath the surface. Drawing a shape, or applying whiteout, only covers the visible pixels on the screen. The text itself remains in the file. If you send that file to someone else, they can highlight the black box, copy the hidden text, and paste it elsewhere to read it.

Secure redaction removes the underlying data. When you apply a redaction, your browser edits the structure of the document to delete the characters and vector paths within that region. It then places a black box in that exact spot so the layout remains intact.

This distinction is important for payslips, bank statements, and legal filings. When you send these documents to a third party, you are responsible for the data you include. A proper redaction ensures you are not accidentally leaking account numbers or salaries.

You can confirm this behavior yourself. After you export the redacted file, open it in another PDF viewer and attempt to highlight or search for the removed text. It will not be there. Lemmafour even runs a second, independent PDF engine in the browser to verify the removal immediately after the redaction is applied.

Your privacy is the other half of the process. Online tools typically require you to send your document to their servers for processing. This puts your sensitive data on infrastructure you do not control. Lemmafour keeps the file on your device. All processing happens in the browser. You can check this by opening the Local - 0 sent panel while you work, or by watching the browser’s Network tab. You will see the site’s own scripts and fonts load, but your document is never transmitted.

One limitation to understand is that redaction removes page content, and the Redact tool’s sanitize options cover metadata/comment cleanup during the same operation; always verify the export by trying to select or search the removed text. Redaction is a scalpel for page content, not a global file sanitizer without those options checked.

FAQ

Questions answered here

Does redaction actually remove the text?

Yes. Secure redaction removes the underlying text and vector paths completely. You can verify this by trying to select or search for the text after exporting.

Does the redaction tool send my PDF to a server?

No. The redaction process happens entirely on your device. The site's own scripts and fonts load, but your document bytes never leave your browser.

Can I use whiteout to hide text?

You can, but it is not safe for sensitive data. Whiteout only places a shape over the text. Anyone who receives the file can drag the box away or copy the text underneath.