How to Disable Downloads on a Shared PDF Link

Oleh Tsyupa · Founder, PDFTrackr

8 min read

What the switch actually does

Three things get filed under “disable download”, and separating them is most of the answer: the control, the download button your reader is looking at; the file, the bytes that must reach a browser before anything appears on screen; and the screen itself, which only a DRM viewer attempts and no method beats a phone camera at.

Switching downloading off addresses the first and nothing else. The viewer stops offering a download control and the document is served for display rather than saving — a change in what an ordinary reader is invited to do, not a lock. The exception is a category, not a better setting: a DRM container will not open until a licensed viewer has checked in with a licence server, and every reader must install that viewer.

So the question is not whether the switch is a lock but whether its users get anything for it — which our own production data answers.

29% of senders have turned downloading off on at least one link — 56 of 193 accounts with a link on record. On the links where it is off, 40.4% of reading sessions reach the last page, against 30.8% where downloading is available.

Read this as who turns the switch on, never as its effect: different senders, different documents, different audiences, not the same link measured twice. The obvious objection is that locked-down documents are shorter. The medians say otherwise — 16 pages in both groups — but a median settles a group's middle, not its shape, and completion is not monotonic in length, so the confound is not ruled out. Per link rather than per sender the rate is 33.3%, concentrated enough to distrust: three senders hold 53 of the 147 links.

Based on 441 share links from 193 senders across 362 documents, created 20 Aug 2025 – 4 Aug 2026, extracted 10 Aug 2026; the 446 and 2,479 reading sessions inside it run 22 Sep 2025 – 4 Aug 2026. The per-link rate is 33.3% — 147 of 441, and Apr 2026 alone accounts for 65 of them, 73.9% of that month's 88 new links against a 0–36.7% band across every other month, the zero being Sep 2025, whose nine links all left downloading on. One visit is excluded, the same one Set G drops: a single visitor on a single link produced 210 sessions and 180 download clicks on 29 Jul 2026, a pre-deploy test burst rather than a reader. Validated means at least one page rendered and the session was not classified as automated. The two completion figures are measured on MULTI-PAGE DOCUMENTS ONLY, because a one-page document is finished by being opened: that restriction gives 438 of the 446 sessions on download-off links and 2,434 of the 2,479 on the rest, of which 177 and 750 reached the end — finished meaning the furthest page rendered is at least the document's page count. The median document is 16 pages in both groups, which matches their middles and does NOT control for the length confound: completion is not monotonic in length.

Method 1 — a tracked link with downloading switched off

This fits the situation most people are in: one document, one audience, outside your own organisation, read rather than filed. Host the PDF, share it as a link, turn the download permission off. The reader is never offered a copy — on a wide screen a quiet Download disabled chip sits where the button would be, and on a phone the button is simply absent.

Two properties are worth knowing. The switch is reversible on a link you have already sent: edit the link and the next person to open it gets the new setting. That is not a PDFTrackr differentiator: Drive and SharePoint change their sharing settings afterwards too, and a DRM licence can be withdrawn from a copy already delivered. What cannot be taken back is a permissions password or an attachment — those travel with the file. And downloading and viewer identification are independent: turning one off does nothing to the other. If identity is what you are after, seeing who downloaded your PDF covers that side.

The download permission, the reading data behind the numbers above and 50 active share links are all free, no card. To try it on a document you already have, create a free account; to see the reporting first, there is a live demo dashboard.

The free plan stops being the right answer at a specific point, not a volume threshold. Pro becomes worth the $9 when what worries you is the screen rather than the download: the viewer watermark tiles a string you choose across every page, so a screen capture carries a mark saying where it came from. Be clear what that is — an overlay drawn in the viewer, never a stamp written into the file, present only while the document is inside the viewer, which on a download-off link is the whole time.

Method 2 — block download on cloud storage

If the document already lives in SharePoint or OneDrive and the recipient is inside your tenant, the closest equivalent is Microsoft's Block download option on a sharing link, which Microsoft describes plainly:

“When you select Block download, people who access the file you shared won't see options to download, print, or copy the file. They can only view the files on the web, and won't be able to open them in desktop or mobile apps.”— Microsoft, Block downloads for view-only files in SharePoint and OneDrive

It takes copying with it, where our viewer leaves the text layer selectable: Microsoft wins on copy, and if stopping a reader lifting your text matters more than knowing what they read, that is the honest recommendation. On printing the two are closer than they look — our print stylesheet blanks the page, so the ordinary routes produce nothing. Its limits are a storage platform's: the control belongs to a link inside a tenant, so it is best with colleagues and awkward with a prospect who has no account, and what comes back is storage telemetry rather than a reading record.

All six methods, compared on what each one stops

Comparisons here usually rank by price. The deciding axis is narrower: of the things a sender imagines preventing, which does each method actually prevent?

Compared on what each method stops — no cell here is a price or a plan tier. The Microsoft, Google and Adobe rows come from those vendors' own help pages, read 2026-08-10 — Google directly, Microsoft and Adobe through search retrieval, because those two hosts are unreachable from where this was written; the DRM row describes that category rather than any one product. PDFTrackr's row is its own share-link permissions.
MethodRemoves the download control?Stops printing?Stops a screenshot?Works for someone outside your organisation?Reader must install something?
Tracked link, downloading off (PDFTrackr)YesThe print stylesheet blanks the pageNoYesNo
SharePoint or OneDrive, Block downloadYesYes — print and copy go with itNoAwkward — tenant-bound linkNo
Google Drive sharing settingsYes, for viewers and commentersYes — print and copy go with itNoAwkward — signed-in accountsNo
Acrobat permissions passwordNo — the recipient holds the fileOnly in readers that honour itNoYesNo
PDF DRMYes — it will not open unlicensedYes, where the licence says soNot reliablyYes, once licensedYes — a licensed viewer
Plain email attachmentNo — nothing to removeNoNoYesNo

Methods 3 to 6, and what each one leaves standing

Method 3 — Google Drive sharing settings. Drive has the equivalent control one level down in the share dialog, under the heading Google gives it — People who can download, copy, and print — where clearing the box for viewers and commenters greys those options out for them. Google is unusually direct about its ceiling, on the same help page:

“You can't stop how others share the file content in other ways.”— Google, Drive Help: stop, limit, or change sharing

One neighbouring limitation gets confused with this. The control above does apply to a PDF; Drive's activity dashboard — which would tell you who opened it — is documented for Docs, Sheets and Slides, PDFs not covered. On Drive you can switch downloading off for a PDF and have no reading record to show for it.

Method 4 — an Acrobat permissions password. The one people reach for first, and it answers a different question. It restricts printing, editing and copying inside the file, and Adobe is explicit that recipients need no password to open the document, only to change the restrictions. The copy is theirs, so it stops casual editing, not distribution.

Method 5 — PDF DRM. The only method here that enforces rather than discourages: the copy will not open until a licensed viewer checks in. Locklizard and the DRM category win on enforcement after the file leaves, and nothing on a tracked link approaches it. The reader pays, installing and licensing a viewer first. For a counterparty with a reason to comply that trade is worth making; for a proposal to someone who has not agreed to read it, asking them to install software is how it goes unread.

Method 6 — a plain email attachment. Nothing to disable: a copy handed over when you press send, with no hosted original to attach a permission to. The answer to “how do I stop them downloading it” is that the question had to be asked before sending — the same reason it reports nothing back, which what PDF tracking is covers.

What none of the six can stop

The limits are more useful than the capabilities, because the marketing here overreaches.

  • A photograph of the screen. No method here beats a phone camera, DRM included. Software screen capture is a different case and DRM is the one method that attempts it: Locklizard documents Safeguard disabling Print Screen and blocking screen-capture tools on Windows, Mac and Android. On a tracked link a watermark makes a capture attributable, not impossible.
  • Retrieving the file from the browser that is displaying it. A browser-rendered document has already been sent to that browser — that is what rendering means. Switching downloading off changes what an ordinary reader is offered, not what a determined one can obtain. The one exception is the DRM container described above, and you would know you were dealing with one because every reader had to install a viewer before opening it.
  • Printing, reliably. Our print stylesheet blanks the page, so Ctrl+P and the browser menu produce nothing — but a stylesheet is a deterrent, not a block: turn CSS off and it prints. Microsoft's and Google's are the same class of thing. A viewer withholding an option is not a file that cannot be printed.
  • Forwarding the link itself. A link anyone can open can be pasted to anyone. A password or viewer identification is the control — both separate switches on the same link.

Setting it up on a document you are about to send

  1. Upload the PDF and create a share link. The file itself is not modified. You are giving it a hosted home, which is the only place a download permission can exist.
  2. Switch downloading off on that link. The viewer stops offering a download control, with a Download disabled chip in its place on screens wide enough for one. The link is served for display rather than saving.
  3. Decide separately whether you also want a name. Downloading and viewer identification are independent switches. Turning one off does nothing to the other.
  4. Change your mind later if you need to. The download permission is editable on a link you have already sent, and the next person to open it gets the new setting.

All four steps are on the free plan — 500MB, 50 files, 50 active share links, download control, viewer identification and 12 months of history, no card. The switch buys not a lock but a document that stays where you can see it read, and tracking downloads and views for a shared PDF covers what that record contains.

Share it view-only, and still see how far they got

Switch downloading off on any share link and the document stays in the viewer — with page-by-page reading data for every session. Free — 500MB, 50 files, 50 links, no credit card.

Start tracking free

Frequently asked questions

How do I disable download on a shared PDF link?

Host the PDF as a tracked link and switch the download permission off. The viewer then offers no download control and serves the document for display rather than saving. On PDFTrackr it is a per-link setting on the free plan, changeable on a link you have already sent — the next person to open it gets the new setting.

Can you really stop someone downloading a PDF?

Not in the sense most people mean. Any viewer that draws a PDF in a browser tab has to send that browser the file first, so switching downloading off removes the button rather than the bytes. The exception is DRM, a different category rather than a stronger setting: it will not open the copy until a licensed viewer has checked in, and every reader must install that viewer.

Does disabling download also stop printing?

All three web viewers try and none truly stops it. Microsoft and Google withhold the print and copy options; PDFTrackr blanks the page in its print stylesheet, so Ctrl+P and the browser menu produce nothing. All three are restrictions inside a viewer rather than properties of the file, so none survives a reader who disables CSS. The real difference is copying: Microsoft and Google block it, our text layer stays selectable.

How many senders actually turn downloading off?

In our own production data, 29% of accounts with a share link on record have turned downloading off on at least one — 56 of 193. Per link the rate is 33.3%, concentrated in a few heavy senders, which is why the per-sender rate is the more reliable one. (441 share links, 20 Aug 2025 – 4 Aug 2026.)

Do people read more when downloading is switched off?

On the links where it is off, 40.4% of reading sessions reach the last page, against 30.8% where downloading is available — multi-page documents only. That is an association, not an effect: different senders, different documents, different audiences. The median document is 16 pages in both groups, which matches their middles and does not control for the confound, because completion is not monotonic in length. Part of the gap is mechanical: a reader who takes a copy often stops reading in the viewer, so the session ends where the download begins.

Is a view-only PDF link secure?

It is a control, not a security boundary. View-only sharing stops an ordinary reader filing a copy and keeps the document where you can see it read. It does not stop a photograph of the screen, a software screen capture, or someone determined to retrieve the file their browser has already been sent. If you need enforcement after the file leaves, DRM is the category that provides it — and the one that attempts screen capture — at the cost of every reader installing a licensed viewer.

Sources

  1. Microsoft — Block downloads for view-only files in SharePoint and OneDrive (read via search retrieval; the host is unreachable from this network) (accessed 2026-08-10)
  2. Google — Drive Help: stop, limit, or change sharing (download, print and copy) (accessed 2026-08-10)
  3. Adobe — Restrict PDF printing, editing, and copying in Acrobat (permissions password) (read via search retrieval; the host is unreachable from this network) (accessed 2026-08-10)
  4. Google — Activity dashboard help (Docs, Sheets & Slides only; PDFs not covered) (accessed 2026-07-14)
  5. Locklizard — Safeguard screenshot protection: Print Screen and screen-capture blocking on Windows, Mac and Android (read via search retrieval; the host is unreachable from this network) (accessed 2026-08-10)
  6. Locklizard — PDF DRM security viewer: the licensed-viewer requirement (read via search retrieval; the host is unreachable from this network) (accessed 2026-07-29)
  7. Locklizard — Revoking document access: withdrawing a licence from a copy already delivered (read via search retrieval; the host is unreachable from this network) (accessed 2026-08-10)

Keep reading: how free PDF tracking works and how to see who downloaded your PDF.

Oleh Tsyupa

Founder, PDFTrackr

Has analysed over 3,000 tracked document-viewing sessions on PDFTrackr.