Security

The 'Black Bar' Myth: How to Properly Redact Sensitive Info

Drawing a black rectangle doesn't remove data. We analyze the 'Paul Manafort' error and referencing NSA guidelines on document sanitization.

James D., Legal Tech Consultant
2026-02-02
7 min read
The 'Black Bar' Myth: How to Properly Redact Sensitive Info

The Paul Manafort Error

In 2019, lawyers for Paul Manafort released a court filing with sensitive sections "redacted." Reporters simply copied and pasted the text under the black bars to read the hidden secrets.

This highlights the failure to understand Object Layering in PDFs. A black bar is just a new object drawn over the text object. The text object remains in the underlying code.

The NSA Standard

The NSA specification ("Redacting with Confidence") explicitly states that you must sanitize the digital media, not just obscure it.

True Sanitization

True redaction requires:

  1. Identification: Locating the text coordinates.
  2. Destruction: Removing the character codes from the content stream.
  3. Rasterization: Placing a non-text image element (the black bar) in the void.

Our PDF Redactor performs this structural surgery. Before you send a redacted document, always attempt the "Ctrl+F Test". If your computer can find the word, the redaction has failed.

Ready to use this tool?

Experience the power of client-side processing. Fast, secure, and free to use.

Try the Secure Redactor