Redact a Password-Protected PDF — Unlock First, Then Burn In
A password on a PDF encrypts the file. It does not hide strings from someone who has the password. HidePDF’s viewer needs to parse the pages; a locked file will fail to load until you open it with the password elsewhere and save an unlocked working copy. Then redact that copy in this tab.
Password-protected PDFs show up in the same inboxes as unmarked ones: tax packets from a CPA, medical portals, HR offer letters, court exhibits someone zipped with a shared passphrase. The lock feels like privacy. It is access control. The person you send the passphrase to can copy every string. The person who never gets the passphrase cannot open the file — and neither can HidePDF’s local viewer, which has to parse page content to let you draw boxes.
This page is only about that lock. Browser-only processing in general is redact a PDF browser-only. A generic how-to is how to redact a PDF online free. Stay here for the encrypted-file workflow: why the tool will not ingest a locked document, how to make a working copy without sending the file to a stranger’s ‘PDF unlocker’ site, and why you should still burn in identifiers after you unlock.
What encryption does — and what it does not
PDF encryption (typically a user/open password, sometimes a separate owner/permissions password) wraps the file so a viewer must supply a credential. That is useful when the channel is messy: a shared drive, an email that might be forwarded, a USB stick. It is not a black box over an SSN. Once the file is open, the text layer and images are there. ‘Printing disabled’ and ‘copy disabled’ flags are ignored by many tools. Treat them as hints to polite software, not as redaction.
Two passwords are easy to confuse. An open password stops casual opening. An owner password is often about permissions. You may be able to open a file and still be asked for a second credential to change it. HidePDF is not a password-recovery product. If you do not have the credential that lets you decrypt the bytes, you cannot ethically or practically redact that file here. If you do have it, use it in a reader you already trust, not a random ‘remove PDF password’ website that takes the file.
Encryption also does not replace verification after redaction. An unlocked, burned-in export should fail search for the hidden string. A locked original that you also attach ‘for the lawyer’ is still the unredacted document plus a password.
Why HidePDF will not load the locked file
The editor draws pages with a local PDF.js-style engine and later rasterizes pages with boxes burned in. That pipeline needs decrypted page content. There is no password field on this page. If you drop an encrypted PDF, the load error is the engine refusing to parse ciphertext. That is expected, not a bug you should work around by sending the file to a cloud unlocker.
The working sequence is boring and correct:
Unlock in a reader you already use
Desktop Reader, Preview, or the portal’s own viewer — wherever the password is supposed to be entered. Confirm you can read the pages. You are not redacting yet.
Save an unlocked working copy
Print-to-PDF or ‘save a copy’ without the open-password, using a filename that says working-unlocked. Keep the encrypted original. Do not use a website that asks for the file and the password together unless you already trust that host with the plaintext.
Redact the working copy here
Open the tool on this page, draw boxes over identifiers, download the burned-in PDF. Search that download.
Send the burned-in file
If the recipient still needs a password, encrypt the redacted export in software that can do that. Do not send the unlocked unredacted working copy because ‘they already know the password.’
Scenarios
A CPA emails a tax PDF with password ‘last4SSN.’ Anyone who can guess that opens everything. Unlock locally, burn in account numbers you are not required to forward to a roommate who only needed one form, send the burned-in copy. The lock was never the redaction.
An HR portal downloads an offer letter as encrypted PDF. You want to share a salary-hidden copy with a mentor. Unlock, cover the compensation lines, send the export. Do not forward the portal file plus the portal password.
A medical record zip with one passphrase for the whole packet. Unlock, redact per recipient, keep the encrypted originals for yourself. The passphrase does not travel with a flattened HidePDF export unless you add encryption again.
Common mistakes
Taking the locked file to an online ‘PDF password remover.’ That host gets the ciphertext and often the password. Unlock in the reader you already have.
Believing ‘password protected’ means the SSN is gone. Open it. Search it. If the string is there, it is there for anyone with the credential.
Redacting the unlocked copy, then attaching the encrypted original as well ‘in case they need the real one.’ You just sent the secret.
Assuming HidePDF will prompt for the password like Acrobat. It will not. Make a working copy first.
Leaving the unlocked working copy in Downloads next to the export. Attach by filename. The working copy is plaintext.
How HidePDF fits after you have plaintext pages
Once the working copy loads, the job is the same as any other PDF on this site: boxes, burn-in, search the download. Browser-only processing is redact a PDF browser-only. Step-by-step cover technique is how to redact a PDF online free. Encryption was only the gate. It is not a substitute for burn-in.
Related guides
See also:
Frequently asked questions
Can HidePDF open a PDF that still asks for a password?
Not while it is locked. The tool uses a local PDF engine in the browser. If the file is encrypted and no password is supplied, load fails. Unlock it in a reader you already use (Adobe Reader, Preview, a password prompt you trust), save a working copy without the open-password, then choose that copy here.
Does the password itself redact anything?
No. Encryption controls who can open the file. Anyone with the password sees the full text. Permissions such as ‘no copy’ are a viewer courtesy, not deletion. Redaction is destroying the marked region in the file you will send.
Will the HidePDF download still be password-protected?
The export is a new PDF of flattened page images. It is not the original encrypted container with boxes painted on. If the recipient still needs a password, that is a separate step in software that can encrypt a PDF. Do not assume the lock traveled with the burn-in.
Does HidePDF send my encrypted PDF to a server to unlock it?
No. Nothing is sent to HidePDF. A locked file either fails locally or, after you unlock it yourself, is processed in this tab’s memory.