Why you should remove metadata before emailing documents
Every file on your computer carries information you did not type. A Word document remembers who created it, when it was last edited, and how many revisions it went through. A PDF might contain the name of the software that generated it, the operating system, and sometimes the file path on the author's hard drive. Photos are worse — they can include the exact GPS coordinates where the picture was taken, the phone model, and a timestamp accurate to the second.
None of this shows up when you open the file normally. It sits in the metadata — a hidden layer of information that anyone with the right tool can read in seconds. When you email a file, all of that metadata goes with it.
What metadata actually travels with your files
The specifics depend on the format, but here is what each common file type typically carries:
Word documents (.docx) store the author name (usually pulled from your Microsoft account or OS username), the company name if one is set, the total editing time, the number of revisions, the date of creation and last modification, and the name of the person who last saved the file. If Track Changes was ever enabled, deleted text and comments may still be embedded in the file even after you "accepted" all changes.
PDFs store the author, the creation and modification dates, the software used to create them (which often reveals the operating system), and sometimes the original file title, which might differ from the filename. PDFs created from Word documents often retain the Word metadata as well.
Photos (JPEG, HEIC, PNG) can carry EXIF data including GPS coordinates, camera make and model, lens information, exposure settings, the date and time the photo was taken, and a unique camera serial number. Some phones also embed altitude, direction the camera was facing, and the speed at which the device was moving.
When this matters
For a casual email to a friend, it probably does not. But in professional and personal contexts, metadata leaks cause real problems.
Freelancers and consultants often create documents on behalf of clients. If the metadata reveals your personal name, your home username, or a different company name, it looks unprofessional at best and raises questions at worst.
Journalists and researchers working with sensitive sources can accidentally reveal their identity or location through document metadata. A PDF sent to a source might contain the reporter's full name and the newsroom's software stack.
Anyone selling or renting property who sends listing photos by email is potentially attaching the exact GPS coordinates of their home to every image. This is publicly available information in a listing, but the metadata also includes the date, time, and device — details that go beyond what a listing needs.
Legal and HR professionals sending contracts or employment documents may not realise that Track Changes history is still embedded in a file they thought was finalised. Opposing counsel finding deleted negotiation notes in a contract's metadata is not hypothetical — it has happened in real cases.
How to clean metadata before sending
The approach depends on the file type.
For Word documents: in Word, go to File, Info, Check for Issues, Inspect Document. The Document Inspector will show you every category of hidden data — comments, revisions, personal information, hidden text — and let you remove each one. This is thorough but requires Word to be installed.
For PDFs: Adobe Acrobat Pro has a "Remove Hidden Information" feature under the Protection tools. If you do not have Acrobat, browser-based tools like MetaScrub's PDF metadata remover can strip metadata without uploading your file anywhere.
For photos: on Windows, right-click the file, go to Properties, Details, and click "Remove Properties and Personal Information." On Mac, Preview does not have a built-in metadata removal feature — you need a third-party tool or a browser-based option like MetaScrub's photo metadata viewer to check and strip EXIF data.
The simplest rule
If a file is leaving your control — by email, by upload, by shared link — spend ten seconds checking what metadata it carries. The information is invisible in normal use, which is exactly why it catches people off guard. A file that looks clean on screen can carry your name, your location, and your edit history behind the scenes.
Removing it takes less time than writing the email it is attached to.