Redaction Checklists
Pick a document. Get a checklist of what to redact, what to keep visible, and the mistakes that get rental applications, mortgage packets, and HR submissions rejected. Print it and walk through your file line by line.
Rental Application / Lease
Sharing a signed lease or filled-out rental application with a landlord, property manager, or roommate.
Always redact
Social Security Number (full)
Landlords never need your full SSN; last 4 is enough for credit-check authorization.
Driver’s license / state ID number (full)
Identity verification uses the photo + expiry, not the DL number itself.
Bank account & routing numbers
Required for the deposit transfer step, not the application step. Wait until you sign.
Date of birth (full)
Year alone is sufficient for age-related credit checks; the day + month enables identity theft.
Previous landlord’s personal phone or email
Share their leasing-office contact, not their personal number.
Coworker / personal-reference home addresses + personal phones
Work contact info is enough for a reference check; their home address is not the landlord’s business.
Sometimes redact
SSN last 4
Keep visible only if the landlord explicitly states they need it to authorize a credit pull.
Previous addresses
Keep if the landlord runs an eviction check (most do). Redact only if you’re sharing the application as a sample/example.
Employer’s federal EIN
Only required if the landlord verifies employment through a third-party service that needs it (rare).
Current monthly income figures
Keep visible — landlords need this to verify the 3x-rent rule. Redact only if attaching a separate proof-of-income doc.
Keep visible
Your full legal name
The application is meaningless without it.
Your signature + date
Proves intent to apply.
Requested move-in date + lease term
The landlord’s primary scheduling input.
Property address being applied for
Confirms which unit the application is for.
Employer name
Verifies you have a job — redact the EIN, not the employer.
Common mistake
Blacking out the entire "previous addresses" section. Landlords use this for the eviction screening — full redaction tanks your application.
Targets the search query what to redact on a rental application. Last reviewed 2026-05-26.
Pay Stub
Proving income to a landlord, lender, leasing office, or rental-furniture company.
Always redact
Full SSN (leave last 4 if requested)
Many pay stubs print the full SSN at the top — almost no recipient needs more than the last 4 digits.
Bank account & routing numbers (direct deposit details)
A landlord needs to see that you got paid, not which account it landed in.
Employer federal EIN
The recipient can verify your employer by name + address; the EIN is sensitive employer data.
Employee ID / payroll ID
Internal identifiers that can be used for HR-system fraud later.
Health-insurance & retirement deduction line items
Reveals health conditions, retirement-account balances, dependents — not income-related.
Garnishment line items
Reveals legal proceedings that aren’t the recipient’s business.
Sometimes redact
Year-to-date earnings
Keep visible if the landlord/lender is verifying annual income. Redact if only current-period income is needed.
Pay rate (hourly or salary)
Keep visible — landlords compute the 3x rule from this. Redact only when sharing a pay stub as a sample document.
Pre-tax / post-tax breakdown
Some landlords care about take-home; some about gross. Keep whichever they asked for and redact the other if you’d rather not share both.
Keep visible
Your full name
Matches the lease application.
Employer name + address
Lets the landlord call to verify employment.
Pay period start + end date
Proves the income is recent (most landlords want the last 2-3 stubs).
Pay date
Confirms the stub isn’t outdated.
Gross pay (this period)
The income figure landlords care about.
Net pay (this period)
The take-home figure landlords care about.
Common mistake
Redacting the employer name. Landlords need to call to verify employment — if they can’t see who you work for, your application gets filed in the "no" stack.
Targets the search query how to redact a pay stub for a landlord. Last reviewed 2026-05-26.
Bank Statement
Sharing a statement as proof-of-funds, proof-of-rent-payment history, or for an underwriter.
Always redact
Full account number (keep last 4 only)
Last 4 is the bank-industry standard for identification without enabling fraud.
Routing number
Account + routing together is everything an attacker needs to draft from your account.
Joint account holder’s personal info (SSN, contact, address)
Even if you’re willing to share yours, you can’t consent on their behalf.
Auto-pay merchant account numbers
Lines that show partial card numbers or sub-merchant IDs in transaction descriptions.
Venmo / Zelle / Cash App recipient personal names + emails
Reveals your relationships and contact graph; not relevant to "do you have money".
Sometimes redact
Individual transaction descriptions
Most recipients only need balances. Redact merchant detail if comfortable; keep if asked to demonstrate spending patterns.
Your home address
Keep if the recipient is verifying address-on-file. Redact if you’re sharing the statement with a third party (e.g. an underwriter through a broker).
Branch address / branch phone
Keep if the recipient may call to verify; redact otherwise.
Keep visible
Bank name + logo
Recipient needs to know which bank issued the statement.
Statement period (open + close date)
Proves the statement is recent.
Beginning balance
The proof-of-funds number for the start of the period.
Ending balance
The proof-of-funds number for the end of the period.
Your name (as it appears on the account)
Matches your application.
Common mistake
Black-rectangle "redaction" in Preview or Word doesn’t remove the underlying text — the recipient can still copy your account number out of the PDF. Use a true redaction tool. Verify the output at /verify.
Targets the search query how to redact a bank statement for landlord. Last reviewed 2026-05-26.
Driver’s License / State ID
Sending a DL to a hotel, rideshare service, age-restricted purchase, or as a "knowledge factor" for support.
Always redact
License number (DL number)
A photo + DL number is everything an identity thief needs for most "low-effort" fraud.
Date of birth
DOB + photo unlocks most knowledge-based-authentication systems.
Home address
Not needed for most verification flows; high abuse value if leaked.
Medical / restriction codes
Often signal disability status — protected info that no verifier needs.
Organ-donor designation
Medical info; never required for ID verification.
Signature
Reusable for forgery on contracts.
Barcode + magnetic stripe area on the back
Encodes everything on the front in machine-readable form — easy to decode and abuse.
Sometimes redact
Photo
Keep if the recipient is verifying you visually (e.g. hotel check-in). Redact if uploading to a service that doesn’t need a face match.
License class + endorsements
Keep if relevant (e.g. CDL verification). Redact otherwise.
Issue date
Usually safe to keep; redact if the recipient only needs the expiry.
Keep visible
State + state seal
Recipient needs to know it’s a real, current state ID.
Name
The whole point.
Expiration date
Proves the ID is still valid.
Common mistake
People redact the photo but leave the DL number. That’s backwards — the DL number is the high-value PII; the photo is what makes it useful as ID. If you’re unsure whether the recipient needs the photo, ask.
Targets the search query how to redact a drivers license online. Last reviewed 2026-05-26.
Passport
Sending a passport copy to a hotel, visa-application service, KYC flow, or employer for I-9 List A.
Always redact
Passport number
Unique global identifier; high-value for impersonation fraud.
Date of birth
Combined with the number, enables most authentication systems.
Place of birth
Often used as a security-question fallback.
Machine-Readable Zone (the two lines of <<< symbols at the bottom)
The MRZ encodes the passport number, DOB, and expiry in a single OCR-friendly block. Most people forget to cover it. THIS IS THE MOST-MISSED FIELD.
Bearer’s signature
Reusable for forgery.
Personal number / national-ID number (where present)
Some countries print a separate national identifier on the data page.
Sometimes redact
Photo
Keep for visual verification (hotel check-in). Redact when not needed (most online KYC flows don’t need both photo and number).
Issuing authority
Usually safe to keep; redact if the recipient only needs to verify the country.
Issue date
Keep if recipient is verifying recency; redact otherwise.
Keep visible
Country of issue
The whole reason you’re sending a passport.
Nationality
Often the verifier’s only required field.
Expiration date
Proves the passport is still valid.
Name (surname + given names)
Matches your application.
Common mistake
Forgetting the MRZ. The two lines at the bottom of the data page contain the passport number, DOB, and expiration in machine-readable form. Black out the photo + number on the visible portion and the MRZ still leaks everything. Always cover the MRZ.
Targets the search query how to redact a passport online. Last reviewed 2026-05-26.
Utility Bill
Using a utility bill as proof-of-residency for a bank, employer, DMV, or visa application.
Always redact
Account number
Used by utility-account social-engineering attacks.
Auto-pay bank info
Same risk as the bank-statement case — account + routing visible on the back of many bills.
Phone number on file
Often used as the verification channel for utility account changes.
Itemized usage history (if showing consumption patterns)
Reveals when you’re home; not relevant to address verification.
Sometimes redact
Meter / service-point number
Identifies the physical premises; redact if the recipient only needs to see your name + address.
Amount due / payment history
Reveals payment behavior — redact if not requested.
Keep visible
Utility company name + logo
Recipient must verify the bill is genuine.
Your full name
The whole point of proof-of-residency.
Service address
The whole point of proof-of-residency.
Statement period or issue date
Proves the bill is recent (most verifiers require within last 90 days).
Common mistake
Redacting the service address. The whole reason you’re sending the utility bill is to prove you live at that address — covering it defeats the purpose. Redact the account number instead.
Targets the search query how to redact a utility bill online. Last reviewed 2026-05-26.
I-9 (HR onboarding)
For HR sharing a completed I-9 internally (e.g. to a payroll provider or compliance auditor), NOT for the employee filling it out.
Always redact
Employee SSN (when forwarding to non-HR recipients)
Only the HR or hiring manager who completes the I-9 has a "need to know" — payroll providers may need it, compliance auditors typically do not.
Alien Registration / USCIS Number
Highly sensitive immigration identifier.
Foreign passport number + country of issuance combo
Enables identity reconstruction for non-US workers.
I-94 admission number
Tied to specific entry record; sensitive immigration data.
Attached List A/B/C document numbers (DL, passport, etc.)
Same rules as the underlying documents. Redact per their respective checklists above.
Date of birth
Not required to verify employment eligibility once the I-9 is signed.
Sometimes redact
Home address
Keep for payroll-provider forwarding; redact for compliance-auditor forwarding.
Phone number + email
Keep if the recipient is the payroll system or onboarding workflow; redact for audit purposes.
Keep visible
Employee name
Required for the I-9 to function as proof.
Date of hire
The legal trigger for the I-9 requirement.
Employer name
Required for compliance.
Section 1 + Section 2 signatures + dates
Proves the I-9 was completed on time.
Common mistake
Forwarding the un-redacted I-9 to a payroll vendor or auditor "because it’s an internal system". The I-9 is the highest-PII document in a new-hire packet. Always redact before any internal forwarding outside the immediate HR-of-record.
Targets the search query how to redact an I-9 for HR. Last reviewed 2026-05-26.
Ready to redact?
RedactID runs entirely in your browser — your document never leaves your device. After you redact, run the file through the Redaction Verifier to confirm the text is actually gone (most “black rectangle” redactions in Preview or Word are reversible).