PDF Privacy: Redact , Protect PDFs (2026)

PDFs travel. Contracts, invoices, tax forms, medical records, legal filings, offer letters, ID scans. Every one of them probably contains information the sender would not want public: addresses, phone numbers, account details, dates of birth, sometimes signatures or passport numbers.

Most people assume that password-protecting a PDF, or drawing a black box over sensitive text, actually hides it. It almost never does. The underlying text is still in the file, and any competent reader can select and copy it. Hiding text under a black rectangle is the PDF equivalent of covering a word with a sticker and hoping nobody lifts it.

This guide explains how PDFs actually store information, which tools protect which parts, and how to do all of this for free in your browser without uploading sensitive documents to a third-party server.

Why uploading PDFs to random sites is risky

The convenient path for any PDF task is to search for a free online tool, upload the file, download the result, and move on. This works, and millions of people do it every day. But for sensitive documents, it is a real risk.

• Uploaded files are often stored on the server for a period of time, sometimes indefinitely.
• Terms of service often allow the provider to use uploaded content for training or analytics.
• A single breach can expose every PDF that has ever been uploaded.
• Even if the tool claims to delete files after 1 hour, you have no way to verify this.

For payroll slips, medical letters, legal filings, or any document with names and addresses, that risk is not worth saving 30 seconds. Modern browsers have enough compute to do all of this locally. That is exactly what the tools below do.

Properly redacting sensitive text

Real redaction removes the underlying text entirely. It does not just cover it. After a proper redaction, if someone copies and pastes the page, they should see only the parts you allowed. If they select all and paste, they should never see the hidden data.

Open Redact PDF, drop the file, draw black rectangles over everything you want to remove, then click Apply. The tool rewrites the PDF so the redacted text and images are literally deleted from the file. Nothing is uploaded, nothing is cached on a server.

For maximum safety on documents that will be shared widely, do two more things. First, run the redacted PDF through Flatten PDF to lock annotations and form fields into fixed page pixels. Second, run it through PDF Metadata Remover to strip author name, software version, and creation date, which are surprisingly revealing.

Cleaning metadata: the hidden part of every PDF

Every PDF contains metadata that most people never see. Common fields include the author name, the software that created it (with version number), the date it was created, the date it was last modified, and sometimes the original filename.

That metadata can be a real privacy leak. A contract signed by a legal assistant will still carry that assistant name in the author field even after being sent to the client. A government form created by a specific employee will show that name in the metadata forever. An invoice exported from an accounting tool will expose the tool version and sometimes the account owner name.

PDF Metadata Remover strips all of this in one click. It removes Author, Subject, Keywords, Creator, Producer and modification tracking, leaving only the visual content of the pages themselves. For any document sent to a third party, this is a one-click habit worth adopting.

Passwords and permission locks

Two different protections get called "password protect a PDF". Understanding the difference matters.

• Open password. The file cannot be opened without a password. This is real encryption, and it is what Protect PDF applies.
• Permission password. The file opens freely, but editing, printing or copying may be blocked. This is weaker. Many readers ignore the permissions, so treat it as a polite request, not a security control.

For sensitive documents, always use an open password. Use a long passphrase rather than a short password, and share it through a different channel than the file itself. If someone sends you a PDF that will not open because it has a password you own (a bank statement, an old insurance policy, a purchased ebook), Unlock PDF removes it locally, letting you open the file without sending it anywhere.

Signing without leaking information

Electronic signatures are now standard for contracts, NDAs, tax forms and rental agreements. Most online services require an account and upload the file to their server. That is unnecessary in 2026.

Sign PDF lets you draw, type or upload a signature image, place it precisely on any page, and download a finished PDF. Everything happens on your device. Combine it with Flatten PDF if you want to lock the signature into the page so nobody can move or delete it later, and PDF Metadata Remover if you want to avoid leaking your device or software information into the finished document.

A complete PDF privacy workflow

Here is the workflow I recommend for any PDF that is going to leave your device.

1. Open the file locally in a browser tool, not a cloud service.
2. Redact any sensitive text or images with Redact PDF, and apply the redaction.
3. Flatten form fields and annotations with Flatten PDF so nothing is editable after export.
4. Strip metadata with PDF Metadata Remover.
5. Add an open password with Protect PDF if the file is confidential.
6. Sign with Sign PDF if the document requires a signature.
7. Share the file only through channels you control, and share the password separately.

The whole pipeline takes a few minutes per document and can be run entirely offline once the browser tab is open. No file ever leaves your laptop, and no account is required.