The instinct on a Mac is to open the file in Preview and draw a black box. That covers the text — it usually doesn't remove it, which means the words can still be copied straight back out. Here's the honest version: what Preview does and doesn't do, the tools that truly redact on macOS, the exact steps, and a thirty-second test to prove your redaction held.
Preview is the app most Mac users reach for, and it's genuinely good at a lot of things. But the common move — open the PDF, click Tools → Annotate → Rectangle, fill it black, and drag it over a name or number — does not remove the text underneath. You've added a shape on top of the page. The original characters are still in the PDF's text layer, sitting right beneath the black.
That matters because the hidden text comes back out trivially. Anyone can open your file, run Edit → Select All → Copy, and paste the "redacted" words into Notes or TextEdit. A PDF editor can delete the black rectangle as an object and expose the page. And the document's metadata — author, title, edit history, original filename — survives untouched, because a drawn shape changes none of it.
To be fair and current: recent versions of macOS added a dedicated Redact markup tool in Preview, which is meant to remove content rather than just cover it. That's a real improvement — but the safe habit is the same regardless of which button you press: never trust a black box until you've confirmed the text is actually gone. Whatever tool you use, verify the output (the test is in section 04). Covering text and removing text look identical on screen, and only one is safe to send.
Setting aside the Preview rectangle, here are two routes that reliably destroy the content on macOS rather than masking it — one in your browser, one a desktop install.
BlackoutPDF runs in any Mac browser — Safari or Chrome — with nothing to install and nothing to upload. It re-renders each page to flat pixels, burns the black boxes into those pixels, and rebuilds a brand-new PDF from the images. There's no text layer left under the black and the original metadata doesn't survive — nothing to select, copy, or extract.
Because it's all client-side, you can prove it: turn Wi-Fi off, or open DevTools and watch the network tab while you work — the file never leaves your machine. Free for short documents. The honest trade-off is that rasterized output is not text-selectable, which for a redacted file is usually exactly what you want.
Acrobat Pro for Mac has a true Redact tool that removes the marked content, plus a separate Sanitize Document step that strips hidden metadata, layers, and scripts. It's the long-standing desktop benchmark and the right pick if you also need OCR, text editing, or forms.
The trade-off is cost and setup: a desktop install, an Adobe account, and a subscription around $19.99/month. Overkill if all you need to do is black out a few lines on one document.
Using BlackoutPDF in the browser — the same steps work identically in Safari and Chrome on macOS.
Go to blackoutpdf.co and drop your PDF onto the page (or click to choose it from Finder). The file loads locally — it is not uploaded anywhere. You'll see your pages render right in the browser window.
Click and drag to draw black boxes over anything you want gone — names, account numbers, addresses, signatures. For a scanned document, use Auto-Redact or the OCR option to find and cover text patterns automatically. Adjust the boxes until the page looks right.
Hit export. BlackoutPDF flattens each page to pixels, burns in the black, and rebuilds a fresh PDF that downloads straight to your Mac's Downloads folder. There's no text layer or metadata left under the marks — then run the verification test below before you send it.
Never trust a redaction because the page looks right — and this applies no matter which tool you used, Preview included. Spend thirty seconds proving it in apps you already have on macOS.
Open the exported file in Preview, then run Edit → Select All → Copy and paste into Notes or TextEdit. If any "redacted" words show up in the paste, the text layer survived — it wasn't redacted, and you need to redo it destructively.
In Preview, open Tools → Show Inspector and look at the document info tabs for leftover author, title, or history fields. Stray names or original filenames mean metadata wasn't stripped — a separate leak even when the visible page looks clean.
If you want certainty, use any "extract text" feature or a command-line tool to pull every character out of the file. A truly redacted page yields no recoverable text where the black boxes are. This catches what the eye and a casual copy-paste can miss.
BlackoutPDF removes the content instead of covering it: pages are re-rendered to pixels and rebuilt into a fresh PDF, so there's no text layer left under the black and metadata is stripped. It runs entirely in Safari or Chrome on your Mac — your document never leaves your machine, and you can confirm that with Wi-Fi off. Free for short files; verify the result with the test above before you send.
Related reading: why a black box isn't redaction digs into how "redacted" files keep leaking, and redact a PDF without uploading it explains the no-upload architecture in depth.
It depends on what you do. If you draw a black rectangle over text using Preview's annotation/markup shapes, that only covers the text — the original words stay in the PDF's text layer and can be copied straight back out, and the metadata survives. Recent macOS versions added a dedicated Redact tool in Preview that is meant to remove content rather than mask it, which is a genuine improvement. Either way, the safe rule is the same: verify the output before you trust it, because covering text and removing text look identical on screen.
Open the PDF in your browser at blackoutpdf.co — it works in Safari and Chrome on macOS with nothing to install. Drag black boxes over the sensitive content (or use Auto-Redact / OCR for scans), then export. BlackoutPDF re-renders each page to pixels and rebuilds a new PDF, so there's no text layer or metadata left under the black to recover. The whole thing runs locally — your file is never uploaded — and it's free for short documents.
Open the finished file in Preview and run Edit → Select All → Copy, then paste into Notes or TextEdit — if any hidden words appear, the text wasn't removed. Next, open Tools → Show Inspector to check for leftover author, title, or history metadata. For a strict check, use a text-extraction tool to pull all characters from the file; a true redaction yields no recoverable text where the black boxes are. If any test surfaces the hidden content, redo the redaction destructively.
If the box was drawn as an annotation shape, usually yes. The characters remain in the file's text layer beneath the rectangle, so anyone can select and copy them, delete the black shape as an object to expose the page, or run text extraction to read them. To prevent this, you need true redaction that removes the content — either Preview's dedicated Redact tool (verified), Adobe Acrobat Pro's Redact plus Sanitize, or BlackoutPDF, which rebuilds the page from pixels so nothing remains underneath.