PDF Bench

Sanitize vs redact: which tool do you need?

Sanitize and Redact solve different problems. Sanitize strips out hidden metadata and risky extras that you can't see on the page. Redact permanently removes visible text or areas that shouldn't be shared. Sometimes you need both.

Use Sanitize when the risk is hidden

  • Your PDF might contain author names, timestamps, embedded files, or JavaScript that you don't want to share.
  • You're sending a file externally and want to make sure nothing hidden goes along with it.
  • You want a quick cleanup, or a stronger flattened copy for higher-risk situations.

Use Redact when the risk is visible

  • The page itself shows names, account numbers, addresses, or other sensitive information.
  • You need more than a black box — you need the underlying text actually destroyed.
  • You're preparing legal, compliance, or public-facing documents where sensitive areas must be permanently removed.

When to use both

If a document has both visible secrets and hidden metadata, redact the visible content first, then run Sanitize on the result. The exact order matters less than making sure you verify the final file before sending it.

Common mistakes to avoid

  • Using Sanitize alone when the page still visibly shows sensitive text — Sanitize doesn't touch what's on the page.
  • Drawing a black box in another editor without removing the underlying text — it can still be copied out.
  • Assuming a quick metadata clean gives you the same protection as a flattened copy.
  • Skipping a final review of the output file before sharing it.

Related pages

Open Sanitize · Open Redact · Remove PDF metadata