You’re about to share a screenshot of a text conversation, a bank statement, a medical document. Some of it should stay private. Here’s how to redact it — and the mistakes that turn “redacted” screenshots into leaked data.
The three types of redaction
Most apps that hide content in images use one of three techniques. They are not equally safe.
1. Blur (least safe)
Blur smooths the redacted area by averaging nearby pixels. It looks redacted to the human eye, but the original information is partially preserved in the smoothed signal. For short, predictable text — phone numbers, ZIP codes, names in standard fonts — researchers have demonstrated that the original characters can be recovered in many cases by guess-and-check against re-blurred candidates.
Don’t use blur for: Bank account numbers, medical record IDs, social security numbers, anything that’s short and follows a known format.
OK to use blur for: Profile pictures, irrelevant background imagery, low-stakes “I just don’t want this readable at a glance” content.
2. Pixelate (medium safety)
Pixelation replaces the redacted area with large, chunky pixels. It’s a little harder to reverse than blur, but not by much — Bishop Fox published a tool called Unredacter in 2022 that recovers pixelated text for known fonts using the same guess-and-pixelate technique, and Positive Security demonstrated similar attacks on pixelated video. The chunkier the pixelation, the safer, but you can never quite trust it for short, format-known text.
Don’t use pixelate for: Anything truly sensitive at default pixelation levels.
OK to use pixelate for: General-purpose redaction where solid overlay would look too aggressive.
3. Solid color overlay (safest)
This replaces the redacted area with a flat color (usually black or white). The original pixels are completely gone — there’s nothing to reverse. This is what court documents, news outlets, and security professionals use.
Use solid overlay for: Anything truly sensitive. When in doubt, use this.
How to redact screenshots on iPhone (or Android)
The simplest way is a stitching/editing app with built-in redaction. Most apps in this space ship one mode (usually just blur). Stitch It is one of the few that ships all three industry-standard modes — blur, pixelate, and solid overlay — so you can pick the right one for the content. It’s also the only stitching app available on both iOS and Android, and every redaction runs on-device:
- Open Stitch It, import the screenshot.
- Tap the redact tool.
- Choose blur, pixelate, or solid overlay.
- Drag to mark the area you want to redact.
- Save or share.
For sensitive info, always pick solid overlay. The other modes look fine but can leak.
Common redaction mistakes
Mistake 1: Cropping isn’t redaction
If you crop a screenshot to hide private info, the metadata might still contain the original full image (depending on the app). Always export a fresh image after cropping, not just edit and re-upload the original.
Mistake 2: Redacting one screenshot but not another
If you’re sharing a stitched screenshot of a conversation, redact every appearance of the sensitive info — not just the first one. People scroll. Bots index. Don’t leave a needle anywhere in the haystack.
Mistake 3: Light blur on standard fonts
Blurring a phone number in iMessage’s standard font is roughly equivalent to publishing the phone number with a fancy filter on it. Light blur on known fonts is reversible. Use solid overlay for any short, format-known sensitive text.
Mistake 4: Trusting the preview
Before sharing, view the final exported image at full resolution and zoom in on every redacted area. If you can read anything through the redaction, the recipient can too. This step takes 10 seconds and prevents the most common leaks.
Mistake 5: Sharing the original by accident
After you’ve done the work to redact, double-check you’re sharing the redacted file, not the original. iOS Photos sometimes shows the most recent version next to the original — easy to share the wrong one.
What “private info” actually means
When in doubt, redact:
- Names (yours, theirs, anyone tagged)
- Phone numbers (including area codes — they identify regions)
- Email addresses
- Profile pictures (face recognition is a thing)
- Account numbers (bank, medical, loyalty programs)
- Addresses and ZIP codes
- Timestamps (combined with other info, they can identify you)
- Device identifiers (UDIDs, Apple IDs, account names)
If the screenshot ends up shared widely, anything that can be combined to identify a person becomes a privacy risk. Be conservative.
The privacy-first answer
Stitch It processes every screenshot entirely on your device. Your screenshots never touch a server. We don’t run AI on them, don’t analyze them, don’t see them. All three redaction modes — blur, pixelate, and solid overlay — run locally on your phone. Free on iOS and Android, and the only stitching app that ships on both.