That black box isn't redaction: 4 mistakes that expose sensitive data
In this post
Redacting a PDF looks simple: hide the sensitive parts, share the file. But the most common ways people do it don't actually remove anything, and the failures have shown up everywhere from court filings to government releases. Here's what real redaction requires, and the mistakes to check for before your next document goes out.
Mistake 1: drawing black boxes over the text
The classic. A black rectangle from a PDF editor, or a highlighter set to black, looks exactly like a redaction. It isn't one. The text underneath is still in the file; the box just sits on top of it. Anyone can select the "hidden" area and copy the text out, and in many viewers a simple copy-paste into a notes app reveals everything. This exact mistake has embarrassed law firms and government agencies in high-profile releases, because the document looks perfectly redacted right up until someone checks.
Mistake 2: relying on what you can see
A PDF contains more than its visible pages. Metadata can carry author names and revision history, and text layers from OCR can sit invisibly behind scanned pages. A document can look clean while carrying information you never saw.
Mistake 3: deleting text but keeping the layout
Some people delete the sensitive text and leave the gap. Better than a box, but the gap itself talks: a missing word of exactly six characters in a named field narrows the possibilities fast, and surrounding context often does the rest. Proper redaction marks that something was removed without preserving its exact shape.
Mistake 4: redacting the copy, sharing the original
The least technical failure and still a common one: two similarly named files, one careless attach. Name redacted outputs unmistakably, and keep originals out of the folder you share from.
- contract_REDACTED.pdfsafe
- contract.pdf⚠ original
What proper redaction actually does
Real redaction removes the information from the file itself, not just from view. The text is gone from the content layer, unrecoverable by selection, search, or extraction, with a visible marker in its place. That's what Conseal produces: it detects sensitive information, you review and approve every item, and the output is a new file with the selected content actually removed, verified by a built-in check. The original stays untouched on your machine, and a restorable bundle lets you bring values back if you ever need them, under your control.
The checklist
Before any redacted PDF leaves your hands:
The last item is the one no tool replaces. Software does the finding and the removing; the final look is still yours.
- Introducing Conseal
- How to safely use ChatGPT with confidential documents
- That black box isn't redaction: 4 mistakes that expose sensitive data
- Locked or open? Which save to pick for your redacted file