How to Remove Hidden Data from a PDF Before You Share It

In January 2019, lawyers for Paul Manafort filed a court document with several passages blacked out. Reporters selected the black bars, copied them, pasted them into a text editor and read every word underneath. The bars were just shapes drawn over the text. The American Bar Association’s Judges’ Journal later used it as a textbook example, alongside more than a decade of similar failures in court filings.

Most of us aren’t filing in federal court. But we do send CVs with our old employer’s name in the properties, quotes with a colleague’s comments still attached, and “final” PDFs that quietly contain the previous draft. Here is what can hide in a PDF and how to clean it out.

What can hide inside a PDF

None of this is visible when you simply read the PDF. That is precisely why it gets missed.

How to check what your PDF is carrying

1. Look at the properties. In most desktop readers this is under File → Properties (Ctrl+D in Adobe Reader). Or open the file in Edit PDF Metadata, which shows the title, author, subject, keywords, creating application, producer and dates in one place.
2. Search for names. Use Find (Ctrl+F) for your own name, your client’s name and any word you think you removed.
3. Open the comments panel. If your reader shows a comments or annotations list, make sure it’s empty.
4. Do the copy-paste test. Select across any blacked-out area, copy, and paste into a plain text editor. If words appear, the redaction failed.

Step 1: Clean the source document

The easiest hidden data to remove is the data that never makes it into the PDF. Before exporting from Word or another editor:

• accept or reject all tracked changes, and delete every comment,
• delete confidential text rather than colouring it white or covering it,
• check the file’s own properties (in Word: File → Info), and
• use Word’s Inspect Document feature to find hidden content and personal information.

Then export a fresh PDF. A new export also avoids carrying old revisions forward.

Step 2: Strip the metadata from the PDF

Open the PDF in Remove PDF Metadata. It:

• clears the title, author, subject, keywords, creator and producer,
• resets the creation and modification dates to a neutral value,
• deletes the XMP metadata stream completely, and
• removes review comments, sticky notes, highlights and files attached to pages, while keeping links and form fields, and
• rebuilds the file from its pages, so earlier saved versions, bookmarks, files attached to the document and document-level scripts are not carried over.

The tool shows you what it found before cleaning, which is a useful (and occasionally alarming) look at what you would have sent. Everything happens in your browser, so the document you are trying to keep private isn’t uploaded anywhere in the process.

Sometimes you don’t want empty metadata but correct metadata, for example a proper title so the PDF shows a sensible name in search results and browser tabs. In that case use Edit PDF Metadata instead: set the title and author you want and clear the rest.

Step 3: Redact properly

Drawing a black rectangle over text, or highlighting it in black, is not redaction. The text is still there; it’s just covered. There are two reliable ways to do it instead.

Option A: remove it at the source

Delete the sensitive words in the original document, replace them with “[REDACTED]” or a black bar character if you want the gap to show, and export a new PDF. This is the cleanest method and keeps the rest of the text searchable.

Option B: flatten the pages to images

If you only have the PDF, draw your black boxes, then turn the pages into pictures and back into a PDF. Converting with PDF to JPG and then JPG to PDF throws away everything except what is visible: hidden text, comments, form data and layers all disappear. The trade-off is that the text is no longer selectable or searchable, and the file may get bigger. Use it for the pages that need it, and keep the original somewhere safe.

Filled forms are data too

If you filled in a PDF form, your answers are stored in the form’s fields, and anyone who opens the file can edit, copy or extract them. That is fine when you are sending the form to its intended recipient. If you are sharing a completed form as an example, or forwarding it beyond that, flatten it first with Fill PDF Form so the answers become part of the page, or remove the answers altogether.

Don’t forget the photos inside

Photos taken with a phone can contain their own metadata, sometimes including the GPS location where they were taken. When a photo is placed into a document, that information can come along inside the image. If you are publishing photos of your home, your children or a confidential site, strip the photo’s metadata before you put it in the document, or flatten the final pages as in option B.

A quick checklist before you hit send

• Comments and tracked changes removed in the source
• Fresh export, not an edited old PDF
• Metadata removed, or set to what you actually want
• Redactions done by removal or flattening, never by boxes alone
• Copy-paste test passed and a search for sensitive words finds nothing
• File name says nothing you wouldn’t want seen

Common mistakes

• White text on a white background. Invisible on screen, perfectly readable when copied or searched.
• Cropping out a section and assuming it’s gone. Cropping often only hides content.
• Editing a PDF several times and sending the last save. Incremental saves can keep earlier text.
• Trusting a “Redacted” stamp from a tool you haven’t tested with the copy-paste check.
• Cleaning the PDF, then editing it again. The new edit can add fresh metadata. Clean last.

Frequently asked questions