Private Redaction

Guide · 4 min read

Blur vs black box: why blurring isn't safe redaction

Blur and pixelate look like they destroy information. For anything that matters, they don't. Here's why, and the one method that actually works.

When people want to hide a name, a number or a face in an image, the instinct is often to blur or pixelate it. It looks obscured, so it feels safe. The problem is that blurring and pixelation don't remove the information, they transform it in a way that can be undone.

Pixelation is reversible

Pixelation (the mosaic effect) replaces a region with a grid of averaged blocks. That's a fixed, repeatable transformation. If an attacker knows the font and roughly how the pixelation was applied, they can render every possible character, pixelate each one the same way, and match it against your blocks until they find what fits. Security researchers have built tools that do exactly this and recovered "redacted" text from real documents and screenshots. Because normal text uses a small, known alphabet in a known font, it's especially easy to reconstruct.

Blur is safer, but not safe

A Gaussian blur spreads each pixel into its neighbours. It's harder to invert cleanly than pixelation, but it still leaves structure behind, and machine-learning models have been shown to recover blurred faces and text with unnerving accuracy, particularly when the content is constrained (digits, a name from a known list, a limited set of possibilities). "Hard enough to obscure at a glance" is not the same as "impossible to recover", and you can't tell which side of that line you're on just by looking.

Swirls, warps and other effects

The same logic sinks the creative options. A swirl or twist is a reversible geometric transform; famously, one was undone years later to identify a person in a photo. Any effect that rearranges the original pixels rather than replacing them can, in principle, be rearranged back.

The one thing that works: remove the pixels

Safe redaction doesn't disguise the content, it deletes it. Cover the region with solid, fully opaque black (or crop it out entirely), and flatten the result so the black pixels have replaced the originals and there's nothing underneath. Now there's no signal left to recover, because the information is genuinely gone. This is why a proper redaction tool outputs a flat image or a rebuilt document rather than an editable overlay. For the mechanics of getting that right on a screen grab, see how to black out text on a screenshot.

Quick reference

Private Redaction only ever uses solid, flattened black, so there's nothing left to reverse, and it runs on your device so nothing is uploaded. Free for documents, or as a Chrome extension for images and screenshots.

Takeaways

Related: how to black out text on a screenshot · how to redact a PDF properly