SwitchPDF
All articles
Security July 8, 2026 4 min read

White-Out for Redacting PDFs: When It's Enough and When It Isn't

Drawing a white rectangle over sensitive content looks like redaction. It usually isn't safe redaction. Here's the difference.

You need to share a contract but remove the dollar amounts. Or send a memo with names obscured. White-out works — most of the time. For high-stakes redaction, it doesn't.

What white-out does

SwitchPDF Edit PDF's white-out tool draws an opaque white rectangle over the content you want to hide. On export, the rectangle is part of the page's content stream — fully visible-white when viewed.

For most viewers (Adobe Reader, Preview, Chrome, Firefox), the original content is no longer visible. You can't select it, can't see it at any zoom level, can't print it.

When white-out is enough

  • Casual sharing where the recipient is trusted but you want to hide sensitive numbers
  • Templates where you're scrubbing personal data before reusing
  • Internal handoffs between teams where you want to focus attention away from irrelevant fields
  • Drafts shared with reviewers who don't need to see certain data

For these, draw the white box, export, send. Done.

When white-out fails

Several attacks can recover content hidden under a white rectangle:

Layer inspection. A determined viewer with advanced PDF tools can sometimes see the underlying text content stream, which still exists behind the rectangle. The visual obscuring doesn't actually remove the data.

Copy-paste. In some viewers, selecting "Select All" and copying can grab the underlying text — even if the visual display shows white.

Search. Find-in-PDF may match text that's covered by white-out. The text is still in the document; it's just not visible.

OCR re-extraction. Running OCR on a "redacted" PDF can sometimes recover the obscured text if the original character data is intact.

When you need real redaction

For genuinely confidential information that must be unrecoverable:

  • Legal discovery responses — redacted documents become evidence; recovery from a "redacted" doc is sanctionable
  • FOIA / public records releases — the public has a right to expect redactions can't be reversed
  • Medical records — HIPAA requires actual removal of PHI, not visual obscuring
  • Financial filings — SEC and similar regulators expect true redaction

For these, you need:

  1. Acrobat Pro's Redact tool — actually removes the underlying content
  2. Print the white-out version to PDF — re-rasterizes the page so the original text is gone (loses text searchability)
  3. Convert white-out version to JPG and back to PDF — same effect, also rasterizes

The last two are workarounds for free tools. Acrobat Pro's redact is the only "approved" approach for legal/regulatory use.

A quick "rasterize" workflow for free redaction

If you don't have Acrobat:

  1. White-out the sensitive content with Edit PDF
  2. Export the PDF
  3. Open PDF to JPG, convert at 300 DPI
  4. Open JPG to PDF, convert back
  5. Result: a flat PDF where the original text is no longer recoverable

This is destructive (loses text selectability) but provides actual redaction.

Bottom line

White-out is fine for casual hiding. For documents where recovery would be a problem, rasterize the page after white-out, or use Acrobat Pro's Redact tool. Never assume a white rectangle in a PDF is true redaction without verifying.

Related articles