{
  "id": 5266767,
  "title": "Why \"black box\" PDF redaction almost never actually works",
  "url": "https://urgent.news/2026/09/03/why-black-box-pdf-redaction-almost-never-actually-works",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-03T06:36:20.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/filotool/why-black-box-pdf-redaction-almost-never-actually-works-39ap"
  },
  "original_language": "en",
  "account": "A PDF redaction tool built by the author revealed a crucial flaw in most existing solutions: they simply draw a black box over the text to be hidden, rather than permanently removing it. While the visual result looks concealed, the original text remains in the PDF's data layer and can be easily extracted using a script. The author's tool addresses this issue by rebuilding the page entirely, replacing the original text with a flattened image, erasing all extractable data. This ensures that the information is truly gone, rather than just obscured. The process involves rendering the page at a higher scale, encoding it as a JPEG, and embedding it back into the PDF, removing all text, annotations, and other editable elements. The author emphasizes the importance of this approach, as it provides a level of structural certainty that no other redaction tool currently offers. To further validate the results, the tool checks its own output before allowing users to download the file. If any errors are detected, such as malformed PDF signatures, changed page counts, or remaining extractable text, the tool will not allow the user to proceed. However, this verification only applies to the pages that have been explicitly marked for redaction. If a user forgets to mark a page, the tool will simply copy that page through unchanged, leaving the original text intact. This limitation highlights the common human error of overlooking pages that need redaction, which can render the tool ineffective. The author clarifies that blurring or pixelating sensitive information is not true redaction either, as these methods are deterministic and can potentially be reversed or brute-forced. For genuine irrecoverable redaction, the author recommends the rebuild-and-verify process used in their tool. The tool is free and runs entirely in the user's browser, with no data uploaded or transmitted. The redaction tool itself can be accessed at filotool.com/redact-pdf. By using this method, users can gain a better understanding of the limitations and proper techniques for securely redacting sensitive information from PDFs.",
  "summary": "I built a PDF redaction tool , and the thing that surprised me most wasn’t how to draw a black box over text. It was how many “redaction” tools out there stop right at the drawing part — and ship it as if that’s the same thing as actually removing the information. It isn’t. And once you understand why, you’ll never trust a black box on a PDF again. The problem with covering text Most online PDF…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}