Can AI read blurred or pixelated text?
Short answer: sometimes. Long answer: depends on the mask, the image, and the attacker. Here's the realistic picture.
What modern tools can do
- OCR engines are aggressive. They will try to read text even with significant noise. Light blur over big letters is often readable.
- Deblur networks trained on similar fonts can recover blurred text well enough to extract digits or short strings.
- Pixelation reversal works when the same content appears multiple times (e.g. a known font on a known background) — researchers have demonstrated full recovery on heavily pixelated screenshots in published work.
- General LLMs with vision can also guess at obscured text, especially if the surrounding context is intact.
What still works
- A solid black box is not recoverable. Once the pixels are replaced, there is no signal to invert. This is the only redaction style that's safe by construction.
- Black-box-with-some-margin is even better — extending the mask a few pixels past the text boundary prevents partial-character recovery from edge information.
When blur or pixelate is "safe enough"
- Background content that's not sensitive
- Faces in casual photos (pixelation is usually fine)
- Decorative text where the goal is visual deemphasis, not secrecy
When blur or pixelate is not safe enough
- Credit card numbers
- Passwords, tokens, API keys
- Government IDs, SSNs, passport numbers
- Any short string with a known format that an attacker could brute-force
A simple decision rule
If you would care that someone might recover the content, use a black box. If you would not care, blur or pixelate looks nicer.
How Redacted handles this
The default mask for auto-detected PII is the black box, because the auto-detected items (emails, phones, credit cards, IDs) tend to be high-risk. You can switch any individual mask to blur or pixelate after detection.
FAQ
Does Redacted's black box really destroy the underlying pixels?
Yes. The export rasters the mask into the image; the pixels under the mask are overwritten before download.
Can blur be reversed in practice or only in research papers?
Both. Off-the-shelf deblur tools can recover light blur. Research papers have shown recovery from heavier blur. Don't rely on blur for secrecy.
What about emoji masks — are they safe?
Emoji masks are visual stickers and the underlying text is overwritten on export, similar to a black box. They're safe for content; they're just less serious-looking.