To anonymize a resume PDF, you need to do two things: destroy the identifying content on the page (name, photo, contacts) and strip the invisible metadata that names the file's author anyway. Both run in your browser with the Redact PDF tool and the Metadata Viewer — free, no signup, and the candidate's document never touches a server.
Why anonymize CVs at all
Blind hiring works. Removing names and demographic proxies from the first screening stage measurably reduces bias in shortlisting — it's why orchestras audition behind screens and why a growing share of employers run name-blind first rounds.
Data protection law cares. A CV is a bundle of personal data. Recruiters who circulate candidate documents internally or to clients have obligations about what they share and through which processors. Sharing less, and processing it locally, makes both easier.
Candidates have their own reasons. Posting a CV publicly, sharing it in communities for feedback, or sending it into ambiguous pipelines doesn't require handing over your phone number, address, and face.
The blind-screen checklist
For a standard anonymized first-round CV, remove:
- Name — everywhere it appears: header, footer, filename, email address
- Photo
- Contact details — email, phone, address, personal site if it names them
- Date of birth, nationality, visa status
- Graduation years (age proxy) — keep degrees and institutions or not, per your process
- Identifying URLs — a linked portfolio or profile defeats the rest
Keep: skills, experience descriptions, responsibilities, achievements — the content actually being assessed.
Step by step
- Open the Redact PDF tool and drop the CV in. It loads into browser memory; nothing is uploaded.
- Draw boxes over every item on the checklist. Headers and footers repeat — check each page.
- Apply. Affected pages are rebuilt as flattened images with the boxed content destroyed first. The name is not recoverable by selection, search, or extraction — unlike a white rectangle in an editor, which hides text while leaving it in the file.
- Strip the metadata. This is the step most processes miss: the PDF's author field very often contains the candidate's full name, restoring everything step 3 removed. Run the file through the Metadata Viewer, inspect what it carries, and strip it.
- Rename the file. "jane-doe-cv-anonymized.pdf" is a self-defeating filename. Use a candidate ID.
- Verify. Ctrl+F the output for the candidate's name. Check the metadata again. Empty means done.
For recruiting teams: the batch reality
Anonymizing one CV is two minutes. Anonymizing forty for a hiring round is a workflow — and the version of that workflow where each CV is uploaded to a web service is forty separate transmissions of candidate PII to a processor nobody vetted. Browser-based processing keeps the whole batch on the recruiter's machine, which is the kind of detail data-protection reviews like to see. Process them one at a time through the redaction tool, or standardize earlier: anonymize in the source documents, export clean PDFs, and use the metadata stripper as the final gate.
The part nobody checks: metadata
It bears repeating, because it undoes everything else: a CV with the name flawlessly redacted from every page and "Author: Jane Doe" in its document properties is not anonymized. Document properties travel with the file, display in every PDF reader, and are read by software automatically. Strip them, verify they're gone, and only then call the document blind.