Free forever · Privacy-first

    Free PDF Redaction

    Free burn-in redaction for pages you cannot upload. Find sensitive info suggests boxes over emails, phone numbers, card numbers, IBANs, US SSNs, dates of birth, links, IP addresses and street addresses; you keep or drop each one and draw your own. Boxes become pixels, not removable overlays, and the work stays on your device. Automatic finds miss things, so check every page.

    • Looks paidActually free
    • No uploadRuns on your device
    • No accountNothing to sign up for
    • No watermarkYour file, untouched

    More free PDF tools

    Same quality bar. Still free. Still no upload.

    Your files never leave your device

    Free to use, with no account, no usage limit and no watermark, because the work runs on your device rather than on our servers.

    This is not a promise about how carefully we handle your upload. There is no upload. The file you choose is read into memory by your own browser, processed there, and handed back as a download — the tool has no server component and makes no network request with your data.

    • Nothing is stored. We never receive the file, so there is no copy to retain, no retention period to disclose, and nothing to delete on request.
    • Nothing is transmitted. No upload endpoint, no analytics payload carrying file contents, no third-party processor.
    • You can verify it. Load this page, disconnect from the internet, and use the tool. It still works, because everything it needs is already on your machine.
    • Nothing persists after you close the tab. Files are held in page memory only — not in local storage, not in a cache, not in a database.

    A note on wording, because it matters: we do not describe these tools as “encrypted.” Encryption protects data that travels to somebody else's computer. Your file does not travel, so there is nothing to encrypt and nothing to intercept — which is a stronger guarantee than encryption, not a weaker one. The page itself is served over HTTPS like the rest of the site.

    This makes the tools safe for material you are contractually barred from uploading to third-party services — client footage under NDA, unreleased campaign assets, anything covered by a confidentiality clause.

    How it works

    1. 1. Drop a PDF

      Up to 150 MB and 500 pages, rendered page by page in your browser.

    2. 2. Find sensitive info (optional)

      Pages with selectable text are checked straight from the text layer by pdf.js: emails, phone numbers, card numbers (Luhn-checked), IBANs (checksum-checked), US SSNs, dates of birth, links, IP addresses and street addresses or postcodes. Pages that are only a picture are read by Florence-2 base (Microsoft, onnx-community ONNX build, MIT licence, about 360 MB on WebGPU or 230 MB on WebAssembly, first run only), and faces on them are found with YuNet (OpenCV Zoo, MIT licence). Find names too adds BERT-base NER (dslim/bert-base-NER, Xenova ONNX build, MIT licence, about 110 MB, WebAssembly), which is trained on English.

    3. 3. Review and draw boxes

      Suggestions show as outlined boxes; tap one to keep or drop it, switch whole categories, or drag black boxes over anything else. Only kept suggestions and your own boxes are burned in.

    4. 4. Download the redacted PDF

      Every page is rebuilt as a PNG image, so the covered text is gone, not hidden.

    Questions

    How is this different from drawing a black rectangle on the PDF?

    A rectangle is just another drawing command sitting on top of the text. The letters are still in the file; anyone can delete the rectangle or copy the hidden run. This tool rasterises the page and fills your boxes in the bitmap, then writes only that image. The glyphs do not survive.

    Why is the result a PNG-backed page, not a JPEG?

    JPEG ringing at the edge of a black box can carry faint traces of the original pixels. a known forensic leak. PNG stores the filled region as flat black. The file is larger, and that is the cost of not leaking what you just covered.

    Does every page become an image, or only the ones I redact?

    Every page. The whole document is re-rendered as PNG images, redacted or not, so no text layer survives anywhere and nothing is selectable or searchable afterwards. The resolution slider runs from 1.25x to 2.5x.

    Does Find sensitive info catch everything?

    No. It checks the text layer for fixed patterns, so a number split across two lines, an unusual date or phone format, or an address without a street word can be missed. Names are only found with the optional English name model. A page that has any selectable text is read from its text layer only, so text inside a picture on that page is not read. Scanned pages depend on how well Florence-2 reads them. Check every page before you share the file.

    Related tools

    Stay in the same job cluster. Free tools stay on-device; paid tools are labelled as such.

    These rearrange files. Versely makes new ones.

    Everything on this page works on a file you already have, which is why it costs nothing. Generating something that did not exist (video from a prompt, a voice, a score) runs a model, and that costs credits.