Privacy & Protection

How to redact a PDF on Mac

Drawing a black box is not redaction. Verso takes the content out of the file.

This is the feature people most often get wrong, and getting it wrong has consequences. Documents have been disclosed with names, addresses, account numbers and medical details sitting underneath black rectangles, perfectly readable to anyone who selected the text and pasted it into a note.

This one is Premium

Redaction is part of Premium, so it carries a small lock in the document actions panel and in the menu bar. The lock is a label rather than a barrier — you can open the feature and see what it does before deciding to unlock it. Reading and every page operation stay free.

Redaction removing content. The bars go on and what was underneath is gone from the file, not hidden by it.

Why a black rectangle is not enough

A PDF page is a set of drawing instructions. Adding a filled rectangle adds one more instruction: draw a black box here. It does not remove the instruction that says draw the word “Henderson” at this position. Both instructions are in the file. The box is on top on screen — and the word is still there to be selected, copied, searched for, or read by any tool that looks at the text rather than the picture.

Redaction removes the content itself.

Redact a document, step by step

  1. Work on a copy

    Redaction is destructive by design. Keep the unredacted original somewhere you can find it, because you may need it and you will not get it back from the redacted version.

  2. Find everything that has to go

    ⌘+F and search for the names, numbers and terms you are removing. Search finds every occurrence, including the ones on page 34 that you would not have scrolled to.
  3. Mark the regions

    Choose Redact from the tool pill along the bottom and mark each region. Take the whole thing — a partly redacted account number with four digits showing is often enough to identify it.

  4. Choose how the result is produced

    Verso lets you choose, depending on whether you need to keep working on the file afterwards or want it locked down as far as it can be.

  5. Apply

    The content is removed. This is the point of no return, which is why you are working on a copy.

  6. Verify

    Search the redacted document for the terms you removed. Try selecting where the marks are. Both should come back with nothing.

  7. Clear the document's own details too

    Sanitize removes the title, author and keywords, which frequently contain the very name you just spent an hour removing from the body.

Verifying, properly

Always check the result before it leaves

Search the redacted copy for every term you removed. Select across the redacted areas and try to copy. Look at the document's own details. Five minutes of checking is the difference between a redaction and an incident, and it is the step that gets skipped when a deadline is close.

The four places sensitive information hides

Where sensitive content hides
WhereWhy it gets missed
The document's own detailsTitle, author and keywords travel with the file and are never visible on the page. Sanitize clears them.
Annotations and commentsA note from an internal review can be more revealing than the text. Sanitize clears these too.
Headers, footers and stampsA client name in a footer repeats on every page and is easy to stop seeing.
Images on the pageA name inside a photograph, a screenshot, or a signature block image is not text and will not be found by searching for it.

Redacting a scan

A scanned page has no text, so there is nothing for a text search to find and nothing for text removal to remove. You have two options, and they are genuinely different:

  • Redact the image region. Mark the area and remove that part of the picture. This works and it is what you want for a scan.
  • Recognise the text first, then redact as normal. This lets you search for what needs removing rather than hunting by eye — worth it on a long document — but it also means the recognised text is now in the file and must be removed along with the image.

Either way, verify the result. On a scan, the verification is visual: look at every redacted page.

Redacting to a standard

If you are redacting for disclosure, under a freedom of information regime, or as part of litigation, there is usually an organisational standard for how it must be done and recorded. Follow it. This guide tells you how the tool works; it does not tell you what your obligations are, and the two are not the same.

Frequently asked questions

How do I redact a PDF on a Mac?

Work on a copy, search for everything that must go, mark the regions with the Redact tool in Verso, apply, and then verify by searching the result. The content is removed from the file rather than covered.

Is drawing a black box the same as redacting?

No, and this is the single most common way confidential documents leak. A rectangle is another mark on the page; the text underneath is untouched and can be selected and copied straight back out.

How do I check my redaction worked?

Search the redacted copy for every term you removed, try selecting across the redacted areas, and check the document's own title and author. All three should come back with nothing.

Can I undo a redaction?

No. It removes content permanently, which is the point. Always work on a copy and keep the original.

How do I redact a scanned document?

Redact the image region — mark the area and remove that part of the picture. Recognising the text first lets you search for what needs removing, but then the recognised text has to be removed as well.

Does redaction happen on my Mac?

Yes. The document is never uploaded, which matters a great deal for the kind of document anyone is redacting in the first place.

Do I still need to sanitize after redacting?

Usually yes. The document's own title, author and keywords are not on the page and frequently contain the very name you just removed.