Can you unblur an image?
Not in the Hollywood "enhance" sense. But blurred or pixelated text can often be guessed, and that is enough to leak a PIN, a card number or a password. Here is the attack, running in your browser.
Watch a pixelated PIN get cracked
The left panel is what you would share: a four-digit PIN hidden with blur or pixelation. The attack on the right knows only what the screenshot shows (the font, the size, the effect). For each digit it renders 0 to 9, applies the same filter, and keeps the one whose pixels match best.
Why the attack works
Blur and pixelation are deterministic: the same input always produces the same output. They also work locally: each output pixel depends only on nearby input pixels. Together that means an attacker can attack one character at a time. Ten digits per position is a tiny search; even letters and symbols are only around 95 options per position.
Once you see that mechanism, "always use a box" stops being a rule to memorise. Curious about the mechanism behind other everyday rules? ahaboo has narrated explainers on why the Moon has phases and how photosynthesis works.
What makes it harder: long strings, unknown fonts, heavy strength, JPEG compression noise, and text that was scaled or rotated. What makes it easy: screenshots, which have crisp, standard system fonts at pixel-exact positions.
What about AI "unblur" and upscaling?
AI enhancers generate detail that looks right. On a face they produce a face, not necessarily the face; on text they produce letters that fit the shape. That makes them unreliable for recovery, but it does not make your blur safe, because the guessing attack above does not need them.
So what should you use?
| Content | Blur / pixelate OK? | Use instead |
|---|---|---|
| Faces, backgrounds, crowd photos | Yes, at high strength | — |
| Long paragraphs you only want unreadable | Usually | Solid box if it matters |
| PINs, card and account numbers, codes | No | Solid box |
| Passwords, API keys, tokens | No | Solid box, and rotate the secret |
| Names and emails in legal or medical documents | No | Solid box |
Questions people ask
Can you unblur an image?
You cannot restore a blurred photo to the exact original, because blur throws away fine detail. But for text in a known font, an attacker does not need to restore anything: they blur or pixelate every candidate the same way and pick the one that matches. That is how pixelated PINs and short strings have been recovered.
Do "unblur" and AI enhance tools reveal hidden text?
AI upscalers and deblur tools invent plausible detail; they do not recover the real text. That is why their output cannot be trusted for evidence. The real risk is the guess-and-compare attack, which checks candidates against the pixels you left behind.
Can pixelated text be read?
Often, if it is short and the font is known. Researchers have recovered pixelated text since at least 2016, and the open-source Unredacter project (Bishop Fox, 2022) showed it working on pixelated screenshots. Larger blocks make it harder but not provably impossible.
What is safe then?
A solid, fully opaque box, exported as a flat image. The original pixels are replaced, not transformed, so there is nothing to invert or match against.
Can I sharpen a blurry photo of my own?
For slight camera shake or focus blur, sharpening filters and deconvolution in photo editors can help. BlurShot is a privacy tool and does not try to reverse blur.