A PDF is not a picture of a page. It is a list of instructions for drawing one. Put this text here. Draw this box there. Fill it with black.
The instructions run in order. Later ones paint over earlier ones. A black box is just one more instruction, added at the end.
The text underneath is not touched. It is still in the file. Anything that reads the file, rather than looking at the picture, can still read it. That includes search engines, screen readers, and anyone who drags a cursor across the black.
The box is drawn on top of the secret. Not instead of it.
This keeps happening to people who should know better
It is tempting to call this a beginner's mistake. It is not. Court papers, government files and company documents have all been published with black boxes over names and figures that anyone could recover in minutes.
The reason is simple. You cannot see the failure. You draw the box, you look at the page, and the information is gone. Everything about it says the job is done. Nothing warns you, because as far as the software is concerned nothing went wrong. You asked for a box and you got one.
Things that look like redaction and are not
- A black box drawn over text.
- A white box, which is the same thing but harder to spot.
- The black highlighter in most PDF readers. It is a drawing tool, nothing more.
- Covering text with a picture or a sticker.
- Turning the text white. It is still there and still copyable.
They all change how the page looks. None of them change what the page contains. Real redaction has to delete the text itself.
How to check, in ten seconds
Do not take anyone's word for this, ours included. Open your redacted file. Drag across the black area as if selecting text. Copy it. Paste it somewhere.
If letters appear, the redaction failed. It is worth doing this to old files too, not just new ones.
One case where a box is all you have
If your page is a scan, there is no text to delete. The words are part of a picture. Drawing over them does cover them, but the original picture can still sit underneath.
For a scan, save the page as an image, paint over the area in a photo editor, then build a new PDF from that. Slower, and safe.
The part everyone forgets
Taking words off the page does not clean the file. A PDF also stores a title, an author name, the software that made it, and dates. None of that shows on any page. Redact first, then clear those details. Two jobs, both needed.