qpdf / MAT2 Guide
Learn how qpdf and MAT2 fit into local metadata checks, what each tool handles, and why rechecking and visual review still matter.
When checking and removing metadata from PDFs and document files, local tools such as qpdf and MAT2 are possible options.
However, remembering tool names alone does not protect anonymity.
What matters is understanding which tool handles what and what it does not handle.
This article organizes the roles of qpdf and MAT2, where they fit in the context of anonymity, and their limits when used.
What qpdf is
qpdf is a tool used for checking PDF file structure and performing conversions.
Because it handles the internal structure of PDFs, it appears in workflows for inspecting and regenerating PDFs.
The official documentation explains its features and usage.
URL : https://qpdf.readthedocs.io/
In the context of anonymity, qpdf is not a tool that automatically makes PDFs safe.
It is a tool for handling PDF structure.
Use it together with work to check creators, annotations, embedded items, hidden text, and similar elements.
What MAT2 is
MAT2 is a metadata removal tool published as the Metadata Anonymisation Toolkit. Before using it, check the official repository for its current maintenance status and supported formats.
It is used when handling metadata removal across multiple formats, such as images, documents, and audio.
The official repository explains supported formats and usage.
URL : https://0xacab.org/jvoisin/mat2
MAT2 is convenient because it can handle multiple formats together, but you need to check its maintenance status and distribution source before using it.
However, passing a file through MAT2 does not make clues in the file content or appearance disappear.
Differences between qpdf and MAT2
qpdf and MAT2 are not tools for the same purpose.
| Item | qpdf | MAT2 |
|---|---|---|
| Main target | Metadata removal across multiple formats | |
| Strength | PDF structure processing and conversion | Automation of metadata removal |
| Role for anonymity | Supports checking and regeneration that handle PDF internals | Supports metadata removal for publication files |
| Caution | Separate judgment of PDF content is needed | Rechecking after removal is needed |
Neither tool guarantees anonymity by itself.
For anonymity, checking before removal, processing, rechecking after removal, and visual review are done as a set.
Which one to use
Choose qpdf or MAT2 based on the purpose.
| Purpose | Candidate | Reason |
|---|---|---|
| Check PDF structure | qpdf | Suitable for handling PDF internals |
| Regenerate a PDF | qpdf | Can handle PDF processing such as conversion and linearization |
| Remove metadata from multiple formats | MAT2 | Can handle images, documents, and similar files together |
| Check what remains after removal | Also use tools such as ExifTool | To check from a different perspective |
| Handle high-risk documents | Check by multiple methods | To avoid overtrusting one tool |
The first thing beginners should think about is not the tool name.
It is the file format and which information they want to remove.
Choose from the purpose: qpdf if you want to look at PDF structure, MAT2 if you want to remove metadata from multiple formats.
The trust model that matters when introducing tools
The advantage of local tools is that files can be processed without handing them to external web services.
However, local tools also have a trust model.
| What you trust | Caution |
|---|---|
| The tool itself | The official site and distribution source need to be checked |
| The device used to run it | Logs may remain on workplace devices, shared PCs, or managed devices |
| Storage location | History remains if it is a cloud-sync folder |
| Processing result | You need to recheck whether removal succeeded |
| Work records | Screenshots and notes can themselves become traces |
Avoiding external services does not mean your own device environment is safe.
For anonymity, think about where, on which files, and in which storage location you use the tool.
What to consider before use
Before using a tool, decide what you want to protect.
| Check | Reason |
|---|---|
| What file format is it? | The items to inspect differ for PDF, image, Office, and audio |
| What do you want to remove? | Separate author, GPS, date and time, annotations, and similar information |
| Will you keep the original? | To avoid mixing it with the publication copy |
| Which device will you work on? | To avoid workplace devices and cloud sync |
| What will you use to check after removal? | To inspect the processing result |
If you run a removal tool immediately, you lose track of what disappeared.
First check, then process, and finally recheck.
What tools cannot remove
Some things do not disappear even if you use qpdf or MAT2.
| What remains | Example |
|---|---|
| Body content | Proper nouns, timelines, internal terms |
| Image appearance | Backgrounds, reflections, signs, faces |
| Audio or video content | Voices, environmental sounds, announcements |
| Filename | Real name, department name, case name |
| Transmission route | Upload time, IP, account |
Metadata removal tools are tools for reducing some information inside files.
They do not judge document content or publication methods for you.
Recheck after processing
After using qpdf or MAT2, always recheck.
When rechecking, use not only the same tool but also other perspectives.
| Check | Reason |
|---|---|
| View with ExifTool | Check metadata within the range ExifTool can see |
| Open the file | Look for display breakage and remaining text |
| Try search and copy | Check whether text under redaction remains |
| Look at the filename | Check whether names or case names remain |
| Open in another environment | Confirm it is not only hidden in your own environment |
The moment you think removal succeeded is the moment when oversights are easiest.
Treat rechecking after processing as part of the same task.
Do not add too many tools
When anonymity feels uncertain, it is tempting to use many tools one after another.
However, the more tools you add, the more chances there are for mistakes and file mix-ups.
First, it is important to separate the original file, the publication copy, and the processed file.
After that, use tools with different roles, such as qpdf, MAT2, and ExifTool, only to the extent needed.
Create a state where you can explain not "which tool you used," but "which file you checked and what did not remain in it."
Cautions for high-risk documents
For documents containing whistleblowing, reporting materials, activity records, or personal information, the work environment matters as much as the tool usage.
If you process them on a workplace device, device logs and file access histories may remain.
If you work in a personal cloud-sync folder, sync history and account information are involved.
If you keep check results as screenshots, file paths or user names may appear in those screenshots.
Before using tools, separate the work environment, storage location, publication destination, and consultation path in your thinking.
Summary
qpdf is a tool used for checking PDF structure and performing conversions.
MAT2 is a tool that handles metadata removal across multiple formats.
Both can help with anonymity checks, but neither guarantees safety by itself.
Before using tools, decide what you want to remove.
After processing, recheck with another method such as ExifTool, and also check the body text, backgrounds, filenames, and transmission route.
For anonymity, what matters is less using a tool and more preserving the flow of checking, processing, rechecking, and publication judgment.
Related tools
ExifTool
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
URL : https://exiftool.org/
MAT2
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
qpdf
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
