How to Share a PDF Securely Without Email Attachments: Password, Watermark, Tracking
Email attachments get forwarded, copied and lost. Here’s a step-by-step way to share a PDF with a password, a per-viewer watermark and view tracking, all behind one link. You hit send on a confidential PDF. Ten seconds
Email attachments get forwarded, copied and lost. Here’s a step-by-step way to share a PDF with a password, a per-viewer watermark and view tracking, all behind one link.
You hit send on a confidential PDF. Ten seconds later it’s out of your hands.
It can be forwarded, downloaded, saved to a personal drive or printed. You won’t know who opened it, and you can’t take it back.
That’s the core problem with email attachments. This post covers a better pattern: one link instead of a file, with a password, a watermark and tracking attached to it.
Why email attachments are a weak way to share a PDF
No control after sending. A copy of the file now lives in every inbox it reached.
No visibility. You don’t know if anyone opened it, or if they read page 1 or all 40 pages.
No traceability. If it leaks, you can’t tell which copy leaked.
No expiry. The file is valid forever.
The pattern: share a link, not a file
Instead of attaching the PDF, you upload it once and share a link. The rules (who can open it, for how long, with what protections) belong to the link. You can then change them without re-sending anything.
I’ll walk through it using SendNow, the tool I’m building for this. The steps apply to any tool that supports these features.
Step 1: Upload your PDF
Upload the file once. It stays in one place instead of being copied into many inboxes.
Step 2: Lock it down before you share
This is where most of the value is. Decide the rules first:
Link settings: password, watermark, downloads, screenshot protection, expiry
Require email. Viewers enter their email before opening. Now every view has a name attached to it.
Password protection. Add a password so the link alone isn’t enough. Send the password through a different channel than the link (for example, link by email, password by message).
Dynamic watermark. The viewer’s email and the date and time are stamped across every page. This is the most underrated control. It doesn’t stop someone from leaking a page, but it makes a leak traceable to a specific person.
A PDF page with a per-viewer watermark
Allow downloads: off. If viewers can only read it in the browser, there’s no loose copy to forward.
Screenshot protection. This makes casual capture harder on confidential documents.
Expiry date. The link stops working automatically, for example after 7 days.
Step 3: Share one link
Once the rules are set, you get a single link to send, or you can invite specific people by email.
Your secure link is ready
Everything you configured travels with that link. There’s nothing extra to attach and nothing to remember.
Step 4: Track what happens next
After sharing, you see who opened it, how long they spent, how many times they came back and how far they read.
Analytics: total views, unique viewers, time per viewer
This is useful beyond security. If a prospect read 90% of your proposal across 3 visits, that’s a very different follow-up than someone who opened it for 51 seconds.
What this can and can’t do
Being honest about limits matters in security:
No tool can make a PDF un-forwardable. If someone can see a page, they can photograph their screen.
What you can do is make leaks harder, make them traceable (watermark plus required email) and shrink the window (expiry, revoking access).
A password is only as strong as how you share it. Don’t put it in the same email as the link.
Think of it as turning “hope nobody forwards it” into “I know who opened it, and I can trace a leak.”
Quick checklist before you send any confidential PDF
Share a link, not an attachment
Require the viewer’s email
Add a password and send it separately
Turn on a per-viewer watermark
Turn off downloads if they only need to read it
Set an expiry date
Check who opened it afterwards
Try it
If you want to try this flow, you can set up a secure link in a couple of minutes at SendNow.
Your turn
How do you share confidential PDFs today: email, a shared drive, or something else? And what’s the one control you wish every tool had?
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.


