BASALT · JOURNAL
PDF redaction vs encryption: what each protects
Redaction and encryption solve different problems. Redaction changes what the document contains; encryption controls who can open or modify it. A password-protected PDF can still expose sensitive content to every authorized reader, while a redacted PDF can be shared more safely but remain readable.
Use redaction to minimize disclosure
Remove names, identifiers, signatures, and confidential passages that the recipient does not need. Verify that the removal is permanent across text, images, OCR, forms, annotations, and attachments. Do not confuse a visual overlay with content deletion.
Use encryption for access control
Encrypt a file when the remaining content itself should be limited to approved recipients. Use a strong, separately communicated password and confirm that the recipient’s viewer supports the required encryption. Encryption does not repair a redaction that was never made permanent.
Decide whether both are needed
A sensitive release often needs minimization first and access control second. Redact unnecessary data, verify the result, then encrypt the final copy if the channel or policy requires it.
Frequently asked questions
Does encryption hide text from the recipient?
No. Anyone with access and the password can generally read the content. Remove data the recipient should not see.
Can I redact an encrypted PDF?
Usually after opening it with the required permissions. Export and verify a new release copy before re-encrypting it.
Is a password a substitute for redaction?
No. It controls access; it does not minimize the information inside the file.
Doing it in Basalt
Basalt focuses on local content removal and verification so you can minimize a PDF before applying any separate access-control policy. Download Basalt.
Redaction that proves itself
Basalt destroys the content you mark, then re-opens the file it wrote and proves the content is gone before it saves anything. Your documents never leave your Mac.