Files are processed in your browser, not uploaded. Privacy →
Deckle
Open a PDF
Skip to guide

Document security

Password protection vs redaction: which does your PDF need?

By DeckleUpdated

Use a password when the whole document is meant for the recipient but must be kept from everyone else. Use redaction when the recipient may read the document but must not see particular details in it, such as another person's name or an account number. A password hides the file from outsiders; redaction removes content from the pages for everyone, including the recipient. Add a password with Password protect PDF and Protect this PDF.

Password protect PDF

Three different privacy tasks

Password

Controls access

Metadata

Document properties

Redaction

Selected page content

Choose the change; inspect the saved copy

Conceptual comparison · access, properties and content require separate checks. No single task certifies complete privacy.

Password vs redaction

Password protection Redaction
Who it keeps out Anyone without the password Everyone, including the recipient
What it hides The whole file Only the marked areas
Reversible Yes, by anyone with the password No, the content is removed from the copy
Recipient sees Everything, once they enter the password Everything except the redacted areas
Typical use Sending a payslip, contract or medical letter to its owner Publishing a report, disclosing a document, sharing a case file
In Deckle Password protect PDF Not covered by Password protect PDF

When to use a password

  • The recipient is entitled to see the whole document.
  • The risk is the file reaching someone else: a mistyped email, a forwarded message, a lost laptop.
  • You want the file to stay unreadable in storage or in transit.

Example: an accountant sends a client their tax return. The client should see every line, so nothing is redacted. The file is protected, and the password is given by phone.

When to redact

  • The recipient is entitled to most of the document, but not all of it.
  • The document will be published or widely shared.
  • A detail must not be readable by anyone who receives the file, ever.

Example: an employer answers a data request with an email thread that names other staff. The requester may see the thread, but the other names and their contact details must be removed from the pages.

When to use both

Redact first, then protect. Example: a solicitor sends a bundle to a client's expert with third-party names removed. The expert should see the rest, nobody else should see any of it. Redact the names, remove metadata with Remove PDF metadata, then protect the copy with a password.

How to add a password with Deckle

  1. Open Password protect PDF and choose your PDF, or drop it onto the page.
  2. Type a password of at least six characters in Password and again in Confirm password.
  3. Choose Protect this PDF.
  4. Download the copy with "(protected)" in its name and check that it asks for the password.
  5. Send the password separately from the file.

The file is encrypted with AES-256 in your browser and is not uploaded.

Mistakes to avoid

  • Treating a password as redaction. The recipient sees everything once the file is open, and can save an unprotected copy.
  • Drawing black boxes over text. The text stays in the file and can be selected, copied or searched. Real redaction removes it.
  • Redacting only the visible page. Check the metadata and attachments too: the author field or an embedded spreadsheet can hold the same details.
  • Sending the password with the file. One forwarded email then opens it.

How to check a redacted PDF

Open the redacted copy, try to select the blacked-out area, and search for a word that was redacted. If either finds it, the content is still in the file. Then check its document properties for the same details.

Tips

  • Decide what the recipient may see before choosing either control.
  • Remove whole pages that the recipient does not need with Organize PDF pages; it is simpler than redacting them.
  • Keep the unredacted original private. Deckle never changes the files you choose.
  • Use a strong password. See how to choose a strong password for a PDF.

Frequently asked questions

Is password protection the same as redaction?

No. A password keeps people without it out of the whole file. Redaction removes chosen content from the pages for everyone.

Can a redaction be undone?

Not in a properly redacted copy, because the content is no longer in the file. Keep the original if you may need it.

Can the recipient remove my password?

Yes. With the password they can open the file and save an unprotected copy. Redact anything they must not see.

Is it enough to black out text in a PDF editor?

Only if the editor has a redaction tool that removes the content. A drawn rectangle or highlight only covers it.

Related tools

Sources