Redact image details permanently

Redact image pixels instead of covering them with a layer

A black rectangle can mean two very different things. In an editor it may be a movable shape sitting over an untouched photo. In a flattened raster it is the photo: the covered pixels no longer exist in the exported file. This tool takes the second route. Every marked rectangle is painted into a new full-resolution canvas before PNG or JPEG encoding.

That boundary is why the page does not return an editable design document. Editable layers are useful during review but unsafe as the final redaction artifact. Keep the original separately if policy allows, inspect the flattened download, and share only that new file.

Draw slightly beyond the sensitive detail

Drag across a face, name, serial number, address, screen, license plate or other region. The mark list reports each rectangle in source pixels and lets you remove one, undo the last, or clear everything. A mark must have real area; a tap cannot accidentally become a microscopic box that looks complete while leaving the detail exposed.

Give text and faces a small margin. Anti-aliased letter edges, shadows and reflections can reveal shapes outside a tight rectangle. For a document photograph, cover the whole field label as well as its value when the label itself discloses what kind of information was present.

PNG and JPEG rebuild the entire file

PNG is lossless and keeps screenshot text, interface edges and diagrams crisp. JPEG at high quality usually creates a smaller photograph but recompresses all visible pixels. Neither export copies the original container or attaches a black overlay. The receipt reports the actual new file size and format.

The browser canvas also leaves the original metadata behind. EXIF camera details, GPS coordinates, XMP, embedded thumbnails and provenance blocks are not copied into the new raster. If metadata removal is the only task and visible pixels should remain byte-for-byte as close as the format allows, use the EXIF remover instead; it can preserve orientation explicitly and reports what it found.

Redacting a photo is different from redacting a PDF

A PDF can contain live text, vector paths, annotations, form fields and hidden objects behind what looks like a page. A flattened image has only pixels. Use Redact PDF for a document file because it rebuilds pages and handles the PDF-specific layers. Taking a screenshot and painting over it may be acceptable when the screenshot itself is the intended output, but it is not a safe way to return an editable PDF.

Manual boxes are deliberate, not a missing animation

Automatic face blur is a separate problem. A detector can miss a face turned sideways, small in the background, covered by a mask or rendered on a screen inside the image. It can also mark a portrait, poster or pattern that is not a person. A reliable product must show every proposed region and require review before export.

This page therefore promises only what it can prove: rectangles you draw are opaque in the final raster. It works equally for faces and details that no face model understands, such as parcel labels, medical screens and identification numbers.

When keeping the visual context matters more than opaque removal, Blur faces uses a self-hosted detector for reviewable suggestions and lets you add every missed region before flattening strong pixelation or blur.

Check the downloaded file, not only the preview

Open the PNG or JPEG after download and zoom into every edge. Confirm that the file name ends in -redacted, the black areas are present, and no detail remains in another part of the image. If a platform later crops, enhances or replaces the upload with an original cloud copy, that is outside this file; upload the flattened download intentionally.

Compression can change size without changing the redaction. The image compressor can reduce a final photograph after review, while format tools such as JPG to PNG and PNG to JPG handle a deliberate handoff. Do not compress the source first if it makes small details harder to mark.

The source image stays in this tab

Decoding, preview drawing, rectangle geometry and final encoding happen in browser memory. No source pixels or redaction coordinates are sent to an API. The guide to verifying local processing shows how to confirm that with the Network panel.

Local processing protects the editing step, not the destination. A recipient can still infer context from whatever remains visible, so inspect the full frame rather than only the area that first drew your attention.