How to Edit, Sign, and Redact Sensitive PDFs Without Uploading to Servers
PDFs carry the most sensitive paperwork in most people's lives: tenancy agreements, payslips, medical letters, invoices, bank statements, identity scans and signed contracts. They are also the file type people most casually drag onto the first free website a search engine offers. That mismatch between sensitivity and handling is exactly what this guide is written to fix.
Everything below can be done without a single byte leaving your device, using a PDF engine compiled to WebAssembly and running inside the browser tab. No account, no upload, no watermark, no page limit.
Step 1 — Combine and split before you do anything else
Most document tasks begin with getting the right pages into one file. Merging lets you assemble a contract, its annexes and a signed cover letter into a single deliverable; splitting lets you extract just the three pages someone actually asked for instead of sending the whole 60-page bundle.
Splitting is a privacy control in its own right. The safest redaction is the page you never send. Before reaching for a black box, ask whether the recipient needs that page at all — extracting a range is faster and leaves nothing behind to recover.
Open the merger and splitter, add your files in the order you want, drag to reorder if needed, and download. Page counts are read locally, which is why it happens instantly even on large bundles.
Step 2 — Fix the page order, rotation and stray scans
Scanners produce sideways pages, duplicate sheets and blanks. The page organiser renders thumbnails of every page directly in the browser so you can rotate, reorder and delete visually, then rebuild the document. Because the rendering uses the same engine your browser uses to display PDFs, what you see is what the recipient will see.
Delete blank separator pages and duplicate scans at this stage. Smaller documents are quicker to review, cheaper to email and contain less incidental information — a scanned blank page can still carry a header with an internal reference number.
Step 3 — Sign without printing or emailing to a signing service
The common 'print, sign, scan' loop degrades quality, wastes time and often ends with the signed copy sitting in a multifunction printer's memory. A better route is to draw your signature once in the signature generator, export it as a transparent PNG, and keep that file somewhere safe on your own machine.
You can then place it into an invoice, a letter or a form. Practical advice: draw larger than you need and scale down, since a large stroke path renders more smoothly; use a slightly imperfect stroke rather than a font-based script, because a real hand movement is much harder to imitate convincingly; and never post the signature image publicly or store it in a shared cloud folder.
Step 4 — Redact properly, which is not the same as drawing a black box
This is where most people get burned. In many editors, drawing a filled rectangle over a name adds a graphic on top of the text layer. The text is still in the file. Anyone can select it, copy it, or run a text extraction tool and read every 'redacted' value. There have been genuine, high-profile leaks of exactly this kind, in court filings and government releases.
Real redaction removes the underlying content, not just the view of it. The GetToolix redactor works by rendering each page to a raster image inside your browser, painting the opaque redaction boxes into those pixels, and rebuilding the PDF from the flattened result. There is no text layer left under the box because the page is rebuilt without one. Extraction tools return nothing.
Workflow: load the document, draw boxes over each sensitive region, choose a redaction colour, preview, then download. Verify your own output by opening the downloaded file and trying to select text under a box, or by running it through a text extractor. A correct redaction survives that test.
- Redact names, addresses, account numbers, national ID numbers, dates of birth and signatures.
- Remember headers, footers, page numbers and reference codes — they leak more than people expect.
- Check the last page: contact blocks and internal routing stamps often live there.
- Flattening also removes form fields and annotations, which frequently contain old values.
Step 5 — Watermark, number and protect the final file
For drafts and circulated copies, a diagonal 'CONFIDENTIAL' or 'DRAFT' watermark plus page numbers makes provenance obvious and discourages casual forwarding. Page numbers also make review calls far easier.
Password protection adds an encryption layer so the file cannot be opened without the passphrase. Use it for anything you are emailing, and send the passphrase through a different channel — a password in the same email as the document protects nobody.
Step 6 — Compress last, and check the result
Compression should be the final step, because every earlier operation changes the page content. Reducing the render scale and image quality typically cuts a scanned document dramatically while keeping text perfectly readable. Always open the compressed version and read a paragraph at 100% zoom before sending it.
Run through a short final checklist: correct pages only, correct order, redactions verified by attempting text selection, signature in place, watermark if needed, size acceptable, and the original untouched on your disk in case you need to start over.