How to remove personal data from a PDF before sharing

Sharing a PDF usually leaks more than the visible page: the author name, the software that made it, timestamps, and any text you merely drew a black box over.

No upload. No watermark. No sign-up. Every tool mentioned here runs inside your browser.

Step 1 — see what is actually in there

Run the file through the Privacy Risk Scanner. It reports identifying metadata and any personal-data patterns in the text layer, and links you straight to the fix.

This is the step people skip, and it is the one that catches surprises.

Step 2 — redact the text, do not just cover it

Drawing a black rectangle over text in most editors leaves the text underneath perfectly copyable. Use Redact PDF (or Auto-Redact PII for Aadhaar/PAN/cards/emails/phones) and turn on burn-in: the pages are rasterised so the hidden text is physically gone.

Burn-in means the text is no longer selectable. That is the trade-off for genuinely unrecoverable redaction.

Step 3 — strip the metadata

Strip Metadata clears title, author, subject, keywords, creator, producer and the creation/modification dates.

Do this last, after redaction, so the redaction step cannot re-add a producer string.

Step 4 — verify

Run the Redaction Checker with the terms you redacted. If any term is still found in the text layer, the redaction failed and you should not share the file.

This verification step is what separates "looks redacted" from "is redacted".

Questions

Is covering text with a black box enough?

Almost never. Unless the text object is deleted, it can be copied out. Use burn-in.

What about Aadhaar and PAN?

Auto-Redact PII detects both patterns (plus cards, emails, phones, IFSC and SSN) and covers every match in one pass.

Scan a PDF for risks →

All guides & comparisons · All 69 free tools

Don't Hate PDF

Loading your local toolbox…