Why Black Marker Redaction Doesn't Work — on Paper or in PDFs

The black marker is the universal symbol of redaction — and almost always the wrong tool for the job. On paper it fails physically; in a PDF it fails digitally. Here is exactly how each failure happens, why the "obvious fixes" don't fix anything, and what real redaction looks like.

Failure 1: marker on paper, then scan

The physical approach feels safe: print the document, scribble over the secrets with a thick black marker, scan it back. It fails in two ways.

Show-through. Most markers don't fully block light. Flatbed scanners and phone cameras push a bright light or a long exposure at the page, and the text under a single marker layer can be recovered by boosting contrast and levels in any image editor. One pass of a Sharpie is rarely opaque enough; even three passes can fail against a determined scan.

Bleed and edge gaps. People underline-sized redact: the marker covers the middle of the word but leaves ascenders, descenders or the first and last letters peeking out. Combined with context, partial words are often fully recoverable — and even thelength of a redacted word is information.

Failure 2: the digital black box

The digital version is worse, because it fails silently and at scale. In most PDF editors, drawing a black rectangle adds anannotation — a separate object layered on top of the page. The text underneath is untouched. Anyone who receives the file can:

• select across the box and copy the text out (30 seconds),
• delete or move the rectangle itself in any PDF editor,
• run pdftotext and read everything, boxes ignored.

This is not a theoretical risk. It is exactly how the Manafort filing was unredacted by journalists in 2019, and how the TSA's screening manual leaked in 2009. Both documents looked perfectly redacted.

Failure 3: the clever workarounds that aren't

White text on white background. Changing the font color hides text from the eye, not from the file. Selection, search and extraction all still find it — and it fools even fewer people than the black box.

The highlighter tool. A "black highlight" in Word or Google Docs is just character formatting. It exports to PDF as live text with a black background — copy-paste reads straight through it.

Cropping the page. Cropping in many editors only changes the visible viewport; the content outside the crop box stays in the file and can be recovered by resetting the crop.

Covering with an image. Pasting a black JPEG over the text is the annotation problem again: one object on top of another. Delete the image, read the page.

And one subtle failure that survives even competent digital covering:the width leak. A black bar reveals exactly how long the hidden word is. Combined with the sentence context and a dictionary, short redacted words — names, countries, amounts — can often be guessed with uncomfortable accuracy. Proper redaction tools that replace content with fixed-width blocks or remove it entirely leak nothing at all.

Try the digital failure yourself

This page has a working miniature of the black-box failure. Select across the "redacted" SSN and copy it — then switch modes to see what true redaction does instead.

Why the failures keep happening

Every marker method shares one mental model: redaction asmaking something hard to look at. But a document is not what it looks like — it is what it contains. A PDF carries text in content streams, names in metadata, titles in bookmarks, attachments in embedded files and old versions in incremental saves. Covering the visual layer addresses one container out of many. The full map of hiding places is in our guide to proper PDF redaction.

How to check a redacted document you received

Sometimes you are on the receiving end: a court filing, a government release, a contract from a counterparty. Before trusting — or forwarding — a "redacted" PDF, run this five-minute audit:

1. Select all and copy. Ctrl/Cmd+A, paste into a text editor. If the redacted text appears, the file was decorated, not redacted.
2. Search for the obvious terms. Names, amounts, case numbers that should have been removed.
3. Open the properties dialog. Document metadata (author, title, company) leaks what the pages hide.
4. Check the bookmarks panel and attachments. Section titles and embedded files are classic survivors — the AstraZeneca contract leaked its numbers through bookmarks.
5. Try to move a black box. In any PDF editor, click a redaction rectangle. If it selects, moves or deletes — there is live content underneath.

If the document passes all five, the sender knew what they were doing. If it fails any of them, handle it accordingly — and if you are the sender next time, you now know better.

What actually works

For digital documents: use a tool that performs true redaction — deleting the content under each marked region from the PDF's structure, scrubbing metadata, annotations, bookmarks and attachments, and rebuilding the file. Then verify like an attacker: select-all, copy, search for the redacted terms. Our free redaction tool does the delete-and-rebuild in your browser and runs that verification automatically — "Verified: 0 matches remain" means the terms are gone, not covered.

Need to fill a PDF form instead? Fill government forms online — W-9, I-9, passport, Schengen and more — free, no sign-up, no upload.

For paper: if you must redact physically, don't mark — remove. Cut the section out, or cover it and photocopy the page (then destroy the marked original; the copy contains no hidden layer). Never scan a marked-up original and treat the scan as redacted.

The one-sentence test: if you can get the secret back without asking the sender, it was never redacted.