fileformer
search⌘KtranslateENexpand_moreupload_fileConvert
Converters8 file families · 44 direct conversions
What changes in a conversionarrow_forward
home/image-tools/redact-image

Hide the private bits before you share the screenshot.

Drag boxes over names, card numbers, faces or number plates, and choose how each is hidden. The saved image contains only the hidden version, and the photo's location and camera details are removed. Everything stays on your browser.

order-screenshot.png · 1920 × 1200
123
drag on the image to add a box · click a box to select it
new boxes · hide with
rectangleSolid boxsafegrid_onPixelateweakblur_onBlurweak
hidden areas
1Solid box540 × 150 px at 190, 352permanentclose
2Solid box590 × 80 px at 220, 800permanentclose
3Pixelate340 × 54 px at 1090, 400reversibleclose
No boxes yet. Drag across anything you want to hide.
check_circle3 areas hidden in the saved pixelswarning1 box uses blur or pixelate; use a solid box for card or phone numberscheck_circleNo hidden photo details to remove; the saved file has none eitherdownloadSave redacted image
~/blur-is-not-enough

A light blur can be read. A solid box can't.

Blurring and pixelating keep some information from the original. For short, predictable text like a card or phone number, someone can try every possibility until the blur matches. Here's the same card number hidden three ways at the strength you chose.

Solid boxcan’t be undoneThe pixels are replaced with one colour. There is nothing left to recover, whatever the strength.
Pixelatecan be reversedEach block averages the pixels under it. With known fonts, short numbers can be matched by trying every combination.
Blurcan be reversedBlurring spreads pixels rather than removing them. A light blur can often be sharpened back into legible text.
~/what-else-is-in-the-file

The pixels aren't the only thing a photo gives away.

Phone photos carry hidden details written by the camera. Covering a street sign achieves little if the file still records the exact GPS position. Saving from this tool writes a fresh image with none of it.

stored in the originalexampleafter saving
location_onGPS position53.7997° N, 1.5492° Wblockremoved
photo_cameraCamera and lensiPhone 15 Pro · 6.8 mmblockremoved
scheduleDate and time taken2026-09-29 18:42:07blockremoved
badgeOwner or author nameMaya Chenblockremoved
photoEmbedded thumbnaila small, unedited copyblockremoved
edit_noteEditing softwarePhotos 9.0 · Lightroomblockremoved
~/guess-and-compare

Breaking a pixelated PIN by trying all 10,000.

An attacker doesn’t need to “unblur” anything. If they know the font and roughly where the text sits, easy for a screenshot, they render every possible value, hide each one the same way, and keep the one that matches best. This runs that attack for real in your browser.

Hidden with
Block size6 pxDigits are about 18 px wide at this size.
Assumes the attacker knows the font, size and position: true for most screenshots of a known app. Real tools such as Depix and Unredacter also search over unknown offsets and scaling. Blur here is a three-pass box approximation of a Gaussian.
What you hidsecret 7392
What you publishedpixelate · 6 px
Attacker’s best guess…
true PIN rank…
tied with it…
time…
guesses / s…
RankGuessMatch distance (lower is closer)RMS levels
hourglass_topRunning the attack…
~/almost-black-is-not-black

A 97% box looks solid. One levels adjustment says otherwise.

A cover drawn at less than full opacity, or a dark marker in multiply mode, scales the text down instead of removing it. The difference may be only a few brightness levels: invisible to you, but stretching the covered area to full contrast brings it straight back. Saving as JPEG adds noise, which helps a little but not reliably.

Cover
Opacity97%
Saved as
Originalbefore covering
As publishedblack box at 97% · PNG
After a levels stretch…
hourglass_topMeasuring…
~/reference

Nine ways to hide something, and how each fails.

Most redaction failures aren’t clever maths. The original was simply still there: under a layer, under a low-opacity box, in a thumbnail or past the end of the file.

MethodVerdictWhat is leftHow it is undone
Opaque box, flattened into the pixelssafeNothing: every covered pixel is one flat colour.It isn’t.
Pixelate (mosaic)weakThe average of each block, which still depends on the text.Render guesses and compare (above); Depix, Unredacter, hidden Markov models.
Gaussian blurweakAll the information, spread out; only the finest detail is lost.Guess-and-compare, or deconvolution when the radius is small.
Swirl, twirl or other warpundoableEvery pixel, moved to a new place.Apply the opposite warp.
Box below 100% opacityundoableThe text, scaled down by the opacity.Levels or curves on the covered area (above).
Multiply-mode marker or highlighterundoableThe text, darkened along with the background.Levels stretch; often visible as is.
Box as a separate layer, shape or PDF annotationundoableThe full original underneath.Delete or move the layer; copy the text in a PDF.
Erased to transparentdependsSome encoders keep the colour of fully transparent pixels.Set alpha to 255 in any editor.
Saved over the original filedependsThe old file’s tail if the tool doesn’t truncate; an EXIF thumbnail if it copies metadata.Parse past the end marker; extract IFD1: see Image Crop.
Timeline
2005The NSA publishes guidance on redacting documents before converting them to PDF, after several leaks through black boxes.
2007Interpol publishes un-swirled photos of a suspect who had hidden his face with a swirl filter.
2009A screening manual is posted online with black boxes over text that could still be copied.
2016Hill, Zhou, Saul and Shacham recover mosaiced and blurred text with hidden Markov models.
2016McPherson, Shokri and Shmatikov identify faces and digits behind mosaics and blur using neural networks.
2019A court filing in the United States leaks text under black boxes that could be copied and pasted.
2020Depix is released, recovering pixelated text from screenshots by matching rendered reference text.
2022Bishop Fox releases Unredacter, which recovers the challenge text Depix could not.
2023aCropalypse: edited screenshots on Pixel phones and Windows keep the original’s tail (CVE-2023-21036, CVE-2023-28303).
2026This page runs the 10,000-guess attack in a few seconds in an ordinary browser.
Incident dates are from general knowledge of press coverage; check primary reports before citing.