Use Preview’s built-in Redact tool, never black rectangles, when you need to hide sensitive PDF content on a Mac. A rectangle drawn over text may look safe, but the text underneath can often still be selected, copied, searched, or recovered. Redaction must remove the data from the PDF, not just cover it visually.
TLDR: Open a duplicate of the PDF in Preview, choose Tools > Redact, select the text or area to remove, then save and verify the result in a separate PDF reader. For example, if a 12-page medical invoice contains 18 patient identifiers, search the final file for each name, date of birth, and account number before sending it. In internal document reviews, most redaction mistakes come from using visual cover-ups instead of true redaction, so the safest habit is simple: redact, save, reopen, search, and test-copy.
Why Preview Can Be Safe, If You Use the Right Tool
Apple Preview is a serious PDF viewer and editor for everyday redaction work. Its Redact feature is designed to remove selected content from the file after saving. That makes it very different from drawing a black box with Markup.
The problem is that both methods can look identical on screen. That is where people get burned. You may see a clean black block, send the file, and later learn the hidden text was still present underneath. Honestly, it feels like Preview should warn users more aggressively when they use shapes over readable text, because that mistake can cost far more than a few seconds.
Use redaction for:
- Names, addresses, phone numbers, and email addresses
- Social Security numbers and tax IDs
- Bank details, payment card numbers, and invoice IDs
- Medical record numbers and claim references
- Legal notes, signatures, and private comments
Before You Redact: Make a Safe Working Copy
Do not edit the only copy of a PDF. Redaction is meant to be permanent. Once the file is saved, the removed content may be hard or impossible to restore from that document.
Start with a clean process:
- Open Finder.
- Right-click the PDF.
- Choose Duplicate.
- Rename the copy with a clear label, such as Client Contract Redacted Draft.pdf.
- Keep the original in a secure folder with limited access.
This small step prevents a painful mistake. It also gives you a record of what was removed, which may matter for legal, HR, financial, or compliance work.
How to Redact a PDF in Preview on Mac
Follow these steps carefully. Do not rush through the save and verification stages.
- Open the duplicate PDF in Preview. If it opens in another app, right-click the file, choose Open With, then select Preview.
- Go to the menu bar and choose Tools > Redact. Preview may show a warning that redacted content will be permanently removed.
- Select the sensitive content. For searchable text, drag across the text you want to remove. For scanned documents or images, drag a box around the area.
- Repeat the process for every page that contains private information.
- Use the sidebar thumbnails to move through the PDF page by page.
- When finished, choose File > Save.
- Close the PDF, reopen it, and inspect every redaction again.
Expect to waste time on page-by-page review. Preview does not think for you, and it will not always catch repeated names or account numbers. If the same person’s name appears 27 times, you need to find all 27 instances.
Never Use Markup Shapes as Redaction
This is the most common PDF privacy failure. Preview’s Markup tools let you draw rectangles, lines, and highlights. Those tools are useful for comments. They are not safe for redaction.
Unsafe methods include:
- Drawing a black rectangle over text
- Using a thick black line
- Changing text color to match the page background
- Adding an image layer over private content
- Covering text with a white box
These methods may only add a layer above the original text. Someone may still select the text, copy it, remove the overlay, or search for it. That is not redaction. That is decoration with risk attached.
Verify the Redacted PDF Before Sending
Redaction is not finished when the black boxes appear. It is finished only after testing the file. Verification is the part people skip because it feels boring. It is also the part that catches embarrassing leaks.
Use this checklist:
- Search the PDF. Press Command + F and search for each removed word, name, number, and phrase.
- Try to select redacted text. Drag your cursor over the blacked-out area. You should not be able to copy the original content.
- Copy and paste nearby text into a plain text editor. Check that removed content does not appear in the pasted result.
- Open the file in another app, such as Chrome, Safari, Adobe Acrobat Reader, or another PDF viewer.
- Review all pages at 100% zoom and again using page thumbnails.
If the PDF has scanned pages, use extra care. A scan can contain an image layer and an OCR text layer. Preview’s redaction tool should remove the selected area, but testing search and copy behavior is still necessary.
Exporting and Saving: Pick the Safer Option
After redaction, save the file with a name that clearly marks it as redacted. Do not overwrite the original unless your records policy says to do so.
A good file name looks like this:
Smith Employment Agreement Redacted 2026 08 28.pdf
A poor file name looks like this:
final final send this one.pdf
Use File > Export if you want to create a separate final copy. This helps avoid confusion between drafts and approved versions. If you are handling confidential material, store drafts in a secure location and delete temporary copies when the work is complete.
Watch for Metadata and Comments
Redacting visible text is only one part of safe PDF editing. PDFs can also contain metadata, annotations, form fields, embedded titles, author names, version history, and hidden comments.
In Preview, you can inspect some file details by choosing Tools > Show Inspector. This may show the document title, author, creation date, file size, page size, and other information. Preview is not a full forensic cleanup tool, so do not rely on it for high-risk sanitization.
For sensitive legal, medical, government, or financial files, use a dedicated PDF redaction tool or a vetted internal workflow. If your organization has a data protection officer, compliance team, or records manager, follow their process. It may feel slow, but it is better than sending a “redacted” file that still contains private data.
Safe Redaction Workflow for Work Documents
Use a repeatable workflow for any document that leaves your team. A simple routine reduces errors.
- Classify the document. Decide whether it contains personal, financial, health, legal, or business-sensitive data.
- Make a duplicate. Keep the source file untouched.
- Redact in Preview using Tools > Redact.
- Save a redacted draft.
- Search for removed terms.
- Open the PDF in another viewer.
- Ask a second person to review if the document is high risk.
- Send through a secure channel. Avoid casual attachments for highly sensitive files.
Common Mistakes to Avoid
- Redacting only the first appearance of a name or number.
- Missing headers and footers, especially in contracts and reports.
- Forgetting file names that contain private client or patient details.
- Sending the wrong version from Downloads, Desktop, or an email draft.
- Trusting screenshots instead of clean PDF redaction.
- Skipping OCR checks on scanned documents.
When Preview Is Not Enough
Preview is appropriate for many routine PDF redaction tasks. It is not always enough for regulated or high-volume work. If you are redacting hundreds of pages, processing discovery files, cleaning medical records, or preparing government submissions, use professional redaction software with audit trails and batch search.
You should also avoid Preview as the only tool when you need proof of process. Some workplaces require logs showing who redacted the file, when it happened, and what terms were searched. Preview does not provide that kind of record.
Final Safety Check Before You Send
Before sharing the PDF, pause for one minute. Confirm the file name. Reopen the attachment from the exact email or upload window you plan to use. Search again for the most sensitive term. If nothing appears, and the blacked-out areas cannot be selected or copied, the PDF is far safer to send.
The rule is simple: use Preview’s Redact tool, protect the original, verify the final file, and never trust a black box unless the hidden content is truly gone.