Your files never leave your device. All processing happens locally in your browser.
How do I mask my Aadhaar and merge my KYC documents into one PDF?
Upload your identity proof, PAN, address proof and photo into AnyTool’s KYC Mask & Merge Pack, draw black masks over the sensitive numbers (cover the first 8 Aadhaar digits, keep the last 4), reorder the documents, then export one merged PDF with a cover/index page — plus a ZIP of each masked file. Everything runs in your browser, so your ID documents are never uploaded.
Upload Aadhaar / passport / PAN / address proof / photo as images or PDFs
Draw black masks over sensitive numbers (e.g. first 8 Aadhaar digits, keep last 4 — the UIDAI / RBI norm)
Reorder the documents and add an auto-generated cover / index page
Export one merged masked PDF, or a ZIP of each masked file
100% client-side — your KYC / ID documents are never uploaded
What is
KYC Document Pack
A KYC document pack is a single, ordered bundle of your Know-Your-Customer proofs — proof of identity (Aadhaar, passport, voter ID or driving licence), PAN, proof of address (utility bill, bank statement or rent agreement) and a photo — with sensitive numbers masked, often merged into one PDF for submission. AnyTool’s KYC Mask & Merge Pack builds one entirely in the browser: it masks the documents by flattening, merges them into a single PDF with a cover page, and never uploads them. You place the masks and follow your institution’s rules; it does not verify or validate the documents.
Document Processing
Related terms
Masked AadhaarProof of IdentityProof of AddressPAN CardRedactionPDF MergeOfficially Valid DocumentCover Page
Frequently Asked Questions
No. Your Aadhaar, PAN and proofs are rendered, masked and merged entirely in your browser. There is no server, API or CDN call for your files, and only the PDF or ZIP you export ever leaves the page.
No — this is the whole point for ID documents. Your KYC files are opened, rendered with pdfjs, masked and merged with pdf-lib entirely on your device, with no server, no API and no CDN call for your documents; the page even works offline once cached. Nothing is sent, logged or stored. That is exactly why you should never use a random online “merge KYC” or “mask Aadhaar” site — those upload your identity proofs to a stranger’s server. Here, only the merged PDF or ZIP you choose to export leaves the page, and closing the tab discards everything.
Under the UIDAI / RBI masking norm, mask the first 8 digits of the Aadhaar number and keep only the last 4 visible — a masked Aadhaar still works for KYC.
The standard is a masked Aadhaar: the first 8 digits are hidden and only the last 4 remain visible (shown as “xxxx xxxx 1234”). RBI’s KYC guidance and UIDAI both back masking the first eight digits, and a masked Aadhaar is still valid for KYC. In this tool you draw a black box over the first 8 digits (and the QR code, if present) and leave the last 4 showing. Always follow the exact rule of the institution you are submitting to — some want a fully masked number, some want the last 4, and PAN is sometimes masked partially too.
It is real. Each mask is painted onto the page image and the PDF is rebuilt from those images, so the hidden numbers are physically gone — there is no text layer to copy or recover.
It is true masking, not just a black rectangle drawn in a PDF editor (which leaves the text underneath and can be copied or lifted back out). This tool renders each page to an image, paints your black boxes onto the pixels, and rebuilds the PDF from those flattened images, so the masked numbers are physically removed with no recoverable text layer. The responsibility is on you, though: you must place a box over every sensitive number and zoom in to review each page before exporting.
Yes. Upload each document into the checklist, reorder them, and export one merged PDF with an optional cover/index page — or a ZIP of each masked file separately.
Yes. Many banks, brokers and portals want all your KYC proofs in a single PDF in a particular order. Upload your identity proof, PAN, address proof and photo (images or PDFs), arrange them with the up/down arrows, set the name on the cover page, and export one merged masked PDF that starts with an auto-generated cover/index page listing every document. If a portal instead wants each file separately, export the ZIP, which contains each document flattened (masks baked in) on its own. Both are built entirely in your browser.
Detailed Explanation
📖How It Works
In-Browser KYC Document Pack (Checklist, Mask Sensitive Numbers, Merge to One PDF + ZIP)
AnyTool’s KYC Mask & Merge Pack assembles a Know-Your-Customer submission entirely in the browser. The user uploads each proof into a checklist of slots — proof of identity (Aadhaar, passport, voter ID or driving licence), PAN, proof of address (utility bill, bank statement or rent agreement) and a passport-size photo, plus any custom slot — as an image or a PDF. Each file is rendered to one or more page bitmaps (PDFs with a lazily-imported pdfjs whose worker is bundled with the app, so there is no CDN call; images straight to a canvas). The user then draws solid-black masks over the sensitive numbers on each page, guided by a per-slot hint (for example, cover the first 8 Aadhaar digits and keep only the last 4, the UIDAI / RBI masking norm). Documents can be reordered, the user sets a name for the cover page, and the pack is exported either as one merged PDF that opens with an auto-generated cover/index page or as a ZIP containing each masked document on its own.
Accepts images and PDFs; PDFs rendered with a bundled pdfjs worker (no CDN)
Draw black masks over sensitive numbers, with a hint to keep only the last 4 Aadhaar digits
Reorder documents and merge into one PDF with an auto-generated cover / index page
Export the merged masked PDF or a ZIP of each masked file
⚙️Methodology
How the Masking and Merge Work: Flatten-Then-Rebuild via a Reusable Document-Pack Engine
The tool is built on a reusable document-pack engine. Loading a file renders every page to a high-DPI canvas; each mask is stored in that page’s rendered-pixel coordinate space. Masking is true redaction by flattening: for every page the engine draws the page bitmap onto an off-screen canvas, fills each mask rectangle with solid black so the underlying pixels are physically replaced, and exports the flattened canvas as a PNG — there is no text layer left under the masks to copy, search or recover. To build the merged PDF, pdf-lib creates a new document; when the cover is enabled it first lays out an A4 cover/index page with the title (for example “KYC Documents — <name>”), a subtitle and a numbered list of the included documents (with page and mask counts), drawn with embedded Helvetica fonts and greedy word-wrap measured against the font metrics. It then embeds each document’s flattened pages as image pages in order, so the masks are baked in. The ZIP export reuses the same flattening: a single-page image document is written as one PNG, while any multi-page or PDF document becomes its own flattened PDF. The engine is generic, so other document-pack tools (visa, scholarship, tenant-KYC, loan, job, medical, property, gov-exam) can reuse the same load / mask / merge / zip core.
True redaction by flattening: page bitmap + solid-black masks burned in, no recoverable text layer
Masks stored in rendered-pixel coordinates; pages rendered at high DPI for a crisp export
pdf-lib builds the merged PDF; optional A4 cover/index page with embedded Helvetica and word-wrap
ZIP reuses the same flattening — PNG for single-image docs, a flattened PDF for multi-page docs
Built on a reusable, generic document-pack engine other pack tools can import
🔒Privacy & Security
Privacy and Honest Limits: ID Documents Never Uploaded, You Place the Masks, Not a Verification Service
Every step runs on the device: files are rendered with a bundled pdfjs worker, masked by flattening on a canvas, and merged with pdf-lib, with no server, API or CDN call for the documents, and the page works offline once cached. This matters most for identity documents — the user’s Aadhaar, PAN and proofs are never uploaded, nothing is sent, logged or stored, and only the merged PDF or ZIP the user chooses to export ever leaves the page; closing the tab discards everything. The page makes this the headline message and warns explicitly against random online “merge / mask KYC” sites, which receive the user’s identity proofs on a stranger’s server. It is also prominently honest about scope. The user places the masks: they must cover every sensitive number and zoom in to review each page before exporting, and they must follow the exact KYC requirements and masking rules of the institution they are submitting to (for example, the masked-Aadhaar last-4-only norm). The masking flattens the page so hidden content cannot be lifted back out, but accuracy of placement is the user’s responsibility. The tool prepares and packages documents; it does not verify, validate or guarantee acceptance of them.
No upload: documents rendered, masked and merged on-device; offline-capable
Identity documents never leave the page — only the exported PDF / ZIP does
Warns against online merge/mask KYC sites that receive your ID proofs
You place the masks: cover everything sensitive and review every page before sharing
Follow your institution’s exact rules; the tool does not verify or validate documents
Preparing a KYC pack: AnyTool KYC Mask & Merge Pack vs an online merge/mask KYC site vs a desktop PDF editor
Capability
AnyTool KYC Mask & Merge Pack
Online merge/mask KYC site
Desktop PDF editor
Processing
Runs in your browser, no CDN
Server-side (cloud)
Local
Are your ID documents uploaded?
No — never uploaded
Yes — to their server
No
Mask sensitive numbers (true redaction)
Yes — flattened, no recoverable text
Varies
Often a black box only (recoverable)
Aadhaar-masking guidance (keep last 4)
Yes, per-slot hint
Rarely
No
KYC checklist of document slots
Yes
No
No
Merge into one PDF in your order
Yes
Sometimes
Yes (manual)
Auto cover / index page
Yes
No
Manual
ZIP of each masked file
Yes
Rarely
Manual
Verifies / validates the documents
No (prepares only)
Sometimes claims to
No
Cost / signup
Free, no signup
Often paid / signup
Paid licence
AnyTool prepares and packages your KYC documents locally so your identity proofs never leave your device; you place the masks and follow your institution’s rules, and it does not verify or validate the documents.
