Redact in Word by deleting the sensitive text, replacing it with fixed placeholders, and cleaning the file before you share it. Do not just draw black rectangles over words. Do not change text color to black. Those tricks only hide content visually, and the original words may still be copied, searched, recovered, or exposed in metadata.
TLDR: True redaction means the confidential content is gone, not covered up. For example, if a contract contains “Client will pay $425,000,” replace it with “[REDACTED]” or “████████,” then inspect the document for comments, tracked changes, author data, and hidden text. In one common office scenario, a five-page Word file can contain 20 to 50 extra pieces of hidden information, including reviewer names, deleted paragraphs, and internal notes. Always test the final file by searching for the removed names, numbers, and phrases before sending it.
Why Black Boxes in Word Are Risky
Word is built for editing, not secure redaction. That small detail causes a lot of trouble.
If you place a black shape over text, the text usually remains underneath. If you highlight text in black, the letters may still exist. If you change the font color to white, anyone can select the area, copy it, and paste it elsewhere. It drives me crazy that these “redactions” can look official while doing almost nothing.
Real redaction removes the information from the document structure. That includes the visible page and the hidden parts: comments, tracked changes, metadata, previous versions, headers, footers, fields, and embedded objects.
The Safest Basic Method
For most Word users, the safest manual method is simple. It is not fancy. It works because it removes the original text.
- Make a copy of the document. Keep the original in a secure folder. Work only on the copy.
- Turn off Track Changes. Go to Review and make sure tracking is off before editing.
- Accept or reject all existing changes. Do not leave redline history inside the file.
- Delete the sensitive text. Remove names, addresses, account numbers, pricing, medical details, or legal notes.
- Replace it with a marker. Use “[REDACTED]” or solid block characters such as “████████.”
- Search the document. Use Ctrl + F to look for the original terms you removed.
- Run Document Inspector. Remove hidden data before sharing.
- Export to PDF only after cleaning. Then check the PDF too.
This process sounds slow, but it is faster than explaining why a client’s bank details appeared in a shared file.
Use Placeholders Consistently
Do not replace sensitive text with random spacing. It can create confusion. It may also show the length of a name, ID, or account number.
Use a consistent label instead:
- [REDACTED NAME]
- [REDACTED ADDRESS]
- [REDACTED ACCOUNT NUMBER]
- [REDACTED MEDICAL DETAIL]
- [REDACTED INTERNAL NOTE]
For legal or compliance work, this can help readers understand what kind of information was removed without revealing the content itself.
Clean Track Changes Before You Share
Track Changes is one of the biggest redaction traps in Word. Deleted text can remain in the file as revision history. That means a sentence you “removed” may still be visible to anyone who turns markup back on.
Go to Review, then check the tracking controls. Accept or reject every change. Also review the display setting. If it says No Markup, do not relax. That view may only hide the edits. It does not remove them.
Use Accept All Changes only if you are sure the visible version is correct. If not, review each change one by one. Expect to waste time on this if the document has passed through six reviewers and three tense email chains. Still, it is worth doing.
Remove Comments and Internal Notes
Comments often contain the worst material. People write things like “Do not show this number to the vendor” or “Client may sue if this date is missed.” Those notes are not meant for the final reader.
Open the Review tab and inspect every comment. Delete all comments before sending a redacted file outside your team. Do not mark them resolved and assume they are gone. Resolved comments may still remain in the document data.
Run Microsoft Word’s Document Inspector
Document Inspector is one of the most useful tools in Word for this job. It checks for hidden material that may not appear on the page.
To use it:
- Open the redacted copy.
- Choose File.
- Select Info.
- Click Check for Issues.
- Choose Inspect Document.
- Select all inspection categories.
- Click Inspect.
- Remove anything that should not be shared.
Pay close attention to these categories:
- Comments, revisions, and versions
- Document properties and personal information
- Headers, footers, and watermarks
- Hidden text
- Custom XML data
- Invisible content
Check Headers, Footers, and Watermarks
Sensitive data likes to hide in boring places. Headers and footers may contain matter numbers, client names, draft labels, employee IDs, or office locations. Watermarks may show “Confidential,” “Internal Only,” or an old project name.
Double-click near the top or bottom of the page to inspect those areas. Check every section of the document, not just page one. Word documents can have different headers and footers across sections, which is deeply annoying when you are in a hurry.
Watch for Tables, Text Boxes, and Images
Word files are not always plain paragraphs. Sensitive details may sit inside tables, shapes, charts, SmartArt, text boxes, screenshots, or embedded Excel sheets.
If a screenshot contains private information, covering part of it with a shape is not enough. Crop does not always destroy the cropped content either. The safer route is to edit the image outside Word, flatten it, and insert the clean version back into the document.
For embedded spreadsheets, open the object and check all tabs, formulas, hidden rows, hidden columns, and comments. A single embedded workbook can expose far more than the Word page shows.
Search Like a Skeptic
After redacting, search for every sensitive term you can think of. Use names, initials, email domains, phone number fragments, account endings, dates of birth, case numbers, and project codes.
Try variations too. If you removed “Jonathan Miller,” search for:
- Jonathan
- Miller
- J. Miller
- jmiller
- the email address
- the phone number with and without spaces
Also search the final PDF if you export one. Open it and try copying text from the redacted areas. If anything sensitive appears when pasted into Notepad, the redaction failed.
Convert to PDF Carefully
PDF is often better for sharing, but it is not magic. If the Word file still contains hidden material, the PDF may carry some of it forward. Clean the Word file first, then export.
After export, inspect the PDF properties. Search for removed words. Try selecting text around redacted areas. If the document is high risk, use a dedicated PDF redaction tool after the Word cleanup. Those tools are designed to remove content, not merely cover it.
Create a Redaction Checklist
A short checklist prevents mistakes. Use this before sharing any redacted Word file:
- Original saved separately in a secure location.
- Sensitive text deleted, not covered.
- Placeholders added where needed.
- Track Changes cleared by accepting or rejecting edits.
- Comments deleted, not just resolved.
- Headers and footers checked across all sections.
- Images and embedded files reviewed.
- Document Inspector run with issues removed.
- Search performed for names, numbers, and phrases.
- Final PDF checked before sending.
When to Use Professional Redaction Software
Manual redaction is fine for low-risk drafts, internal handouts, and simple documents. Use professional redaction software for court filings, medical records, financial reports, HR files, government records, and anything involving personal data at scale.
Specialized tools can detect patterns such as Social Security numbers, credit card numbers, and email addresses. They can also remove content from PDFs more reliably. Word can help prepare a clean source file, but it should not be your only defense for serious redaction work.
The Simple Rule
If the sensitive information still exists anywhere in the file, it is not redacted. It is only hidden. Delete it, replace it, inspect the document, and test the final version like someone is trying to recover the secret. Because someone might be.
