Sending Microsoft Word documents to external clients, journalists, opposing legal counsel, or regulatory agencies introduces serious cybersecurity and data compliance risks. Word files store substantial hidden metadata that is completely invisible on the printable page: previous document revisions, deleted paragraphs, internal reviewer comments, author usernames, file paths, company names, and template configurations. Overlooking these hidden records has led to high-profile corporate leaks and embarrassing compliance breaches. To thoroughly scrub confidential metadata before distribution, Microsoft provides the Document Inspector in Microsoft Word. This built-in sanitisation utility scans documents for hidden properties and removes them permanently with a single click.
What Types of Hidden Data Does Microsoft Word Store?
A standard .docx document file is an XML archive that contains numerous layers of background telemetry:
- Comments and Revision Markups: Even if you turn off “Track Changes” or hide comments in the markup view, historical tracked revisions and internal reviewer commentary remain encoded within the document payload.
- Document Properties and Personal Information: Metadata attributes including the author’s full name, email address, company name, document creation date, total editing time, and the local file system path where the document was saved.
- Headers, Footers, and Watermarks: Hidden or transparent watermarks and suppressed headers on section breaks.
- Hidden Text: Text formatted with the “Hidden” font attribute that does not render on display or print out.
- Custom XML Data: Embedded business metadata injected by SharePoint, enterprise DMS platforms, or ERP extensions.
- Embedded Objects and Macro Code: Linked OLE objects, embedded Excel spreadsheets, and legacy VBA scripts.
Step-by-Step: Running Document Inspector in Word
To inspect and scrub a document in modern desktop versions of Microsoft Word (Windows and macOS):
- Open the document you plan to inspect in Microsoft Word.
- Important Security Best Practice: Save a duplicate backup copy of your file first (e.g., Contract_Master_Internal.docx). Because Document Inspector permanently removes metadata that cannot always be restored via Undo, work on a copy intended for external release.
- Click the File tab in the top-left corner of the Word window.
- Select Info from the left-hand navigation column.
- Click the large Check for Issues button and select Inspect Document from the dropdown menu.
- The Document Inspector dialogue window opens, presenting checkboxes for all inspectable categories.
- Ensure all relevant inspection boxes are checked (including Comments, Revisions, Document Properties, Custom XML Data, Headers/Footers, and Hidden Text).
- Click the Inspect button in the bottom-right corner.
Reviewing and Removing Detected Sensitive Data
Within a few seconds, Document Inspector displays an audit report with red exclamation mark badges identifying every category where hidden data was discovered:
- Review the findings: for example, “Comments, Revisions, and Versions – Document contains revisions and comments” or “Document Properties and Personal Information – Author: Sarah Jenkins, Company: Acme Corp”.
- Click the Remove All button next to each flagged category you wish to sanitize.
- Word instantly purges the metadata, unlinks personal identifiers, and wipes hidden revisions from the file’s underlying XML schema.
- Click Reinspect to verify that all flagged categories now display clean green checkmarks.
- Click Close, then save the document (press Ctrl + S). Your file is now safely sanitized for public or external distribution.
Automating Metadata Removal upon File Save
If your organization routinely handles sensitive documentation, you can instruct Word to automatically strip personal information every time the document is saved:
- Go to File > Options.
- Select Trust Center in the left sidebar, then click the Trust Center Settings… button.
- Click Privacy Options.
- Under the Document-specific settings section, check the box labelled: “Remove personal information from file properties on save”.
- Click OK twice to confirm. Every subsequent save operation will automatically scrub author and revision tags.
Document Inspector vs Converting to PDF vs Printing to Image
| Sanitisation Method | Document Inspector (.docx) | Standard Export to PDF | Print to Rasterized Image |
|---|---|---|---|
| Editable Text Preserved | Yes (remains functional Word doc) | Yes (selectable vector PDF) | No (flattened pixel image) |
| Revision History Scrubbed | Yes (purged from XML) | Usually (unless PDF markup enabled) | Yes |
| Author & File Path Metadata | Completely removed | Often preserved in PDF metadata | Completely removed |
| Hidden Text Scrubbed | Yes | Can be leaked if not verified | Yes |
| Speed of Execution | Fast (10 seconds) | Fast | Slow (multi-step print process) |
Troubleshooting Common Document Inspector Issues
To avoid accidental layout disruption when scrubbing files:
- Loss of Document Formatting on Headers/Footers: Clicking “Remove All” on Headers and Footers will delete all running headers and page number counters across the entire document. If you wish to retain page numbering whilst only removing text, manually audit your header blocks instead of using bulk removal.
- Revisions Automatically Accepted: Clicking “Remove All” on Comments and Revisions automatically accepts all pending tracked revisions in their current state before deleting the historical log. Ensure all edits are in their finalized desired form before running the inspector.
- Macintosh Feature Parity: In Word for Mac, Document Inspector is located under Tools > Protect Document > Remove personal information from this file on save.
Frequently Asked Questions
Can an external recipient recover metadata stripped by Document Inspector?
No. Document Inspector deletes the actual XML elements and historical string nodes from the .docx archive package. Third-party forensic hex editors cannot reconstruct revisions that have been physically excised from the container.
Does Document Inspector work on Excel and PowerPoint files?
Yes. Microsoft Excel and PowerPoint include an identical Document Inspector tool accessible via File > Info > Check for Issues > Inspect Document, tailored to spreadsheets (scrubbing hidden rows, formulas, and workbook author info) and slide decks.
Does Document Inspector remove digital signatures?
Yes. Modifying or inspecting a signed document will invalidate cryptographic digital signatures. Apply digital signatures only after running Document Inspector as the final pre-publishing step.