How to Stop a PDF From Being Forwarded (7 Methods, Ranked by What They Stop)

Send the next one as a tracked link instead of an attachment: create a free tracked link — email gate, password, expiry and a download switch on every link, with 12 months of reading history and no card — or open the live demo to see the per-reader readout on sample data first. The rest of this page is the comparison.

1. The tools behind these methods, and what each one really stops

Six tools sit in the grid below. Read the third column before the second: several of these restrict access well and report almost nothing about what happened inside it, which is the combination that leaves a sender feeling protected and knowing nothing.

Digify's three “not established” cells and Locklizard's price cell are statements about our evidence rather than claims that the products lack the feature. We hold a dated read of Digify's pricing cards and nothing else, and none of Locklizard's pricing. A shorter grid with sourced cells is worth more than a complete one with guessed ones.

2. Method 1 — send a link, not the file

This stops the attachment travelling, and nothing else. An email attachment is a copy the moment it arrives; forwarding it is one click and leaves no trace anywhere you can see. A link is a door you still own, so every later decision — expiry, revocation, a password, a gate — remains available to you after the message has been sent.

It does not stop the link itself being forwarded, and it should not be sold as though it does. What changes is that the second reader arrives at a door you control instead of opening a file you have already lost. Every other method on this page depends on this one having been done first, which is why it ranks first despite preventing the least.

3. Method 2 — turn downloading off

This is the strongest control that costs the reader nothing. With downloading off, the document renders in the browser and there is no file to attach to a forwarded email. The reader can still photograph the screen, and on most machines can still print to PDF, so treat it as removing the easy copy rather than every copy.

It is also the control most senders skip. In our own data 29% of accounts with a share link on record have used it on at least one link, which leaves the majority sending documents that can be saved and passed on in two clicks. The mechanics, and what happens to reading depth on those links, are set out at how to disable downloads on a shared PDF link.

4. Method 3 — ask for an email address before it opens

An email gate prevents nothing. It is on this list because it is the cheapest way to find out that a forward happened: the second reader types their own address, and an address you never sent to appears in your reader list. That is the detection half of the problem, and almost every answer to this query leaves it out.

Be precise about what a gated address is worth. It is typed by the reader and not verified, so somebody determined to stay anonymous types something else — it is an audit trail and a follow-up list, not proof of identity. It is free on our plan, free on Papermark's, and free on Peony's, so there is no reason for a document that matters to go out without it.

5. Method 4 — restrict the link to named people

This is the first method that makes a forwarded link fail. An allow list means the link opens only for addresses you nominated; a one-time code sent to that address means the reader has to be able to read the mailbox, not merely know it. A forwarded link then arrives at a door that will not open. Nothing tells you it was tried: the rejection happens before a reading session exists, so this method prevents without reporting.

What it does not stop is a nominated reader forwarding the document itself once it is open, or passing on the code. Both PDFTrackr and Peony gate this behind a paid tier — ours on Pro, and Peony's on Business ($30/admin/month), not the $52 Data Room — so a free plan on either gives you the gate but not the guest list.

6. Method 5 — give every recipient their own link

One link per recipient prevents nothing at all and identifies everything. If eleven people get eleven links and a twelfth reader appears, you know which of the eleven passed it on, without asking anyone. On a single shared link the same event is invisible: opens accumulate against one row and there is no way to attribute the extra one.

The cost is the setup. Doing this by hand for a list of any size is why most senders do not bother, which is what bulk personalised links are for — one tracked link per recipient generated in a single pass. It sits on Pro here, and it is the method that turns “this leaked” into a name.

7. Method 6 — expire it, or revoke it

An expiry date ends every copy of the link at once, including the forwarded ones, which makes Method 6 the only one on this page that works retrospectively. Revocation does the same on demand: the moment you learn a document has travelled, one switch closes the door on everybody holding the address.

It does nothing about what already happened, and nothing about a file that was downloaded before you closed it. Treat expiry as a way of limiting the window rather than the audience — a proposal that stops opening after thirty days cannot be circulated in a competitor's office in month four.

8. Method 7 — DRM and a controlled viewer

DRM is the only method here that keeps enforcing after the document leaves. The file is encrypted to a viewer the reader installs, and opening it on an unlicensed machine fails, so a forwarded copy is inert rather than merely traceable. Locklizard says of its own product: “Print requests can be logged so you can see who has printed a document, when this took place and from what location.” — which is the one event a browser-based viewer genuinely cannot observe.

The price is paid by the reader. An investor, a client or a journalist has to install software before they can read your document, and a meaningful share of them will not. It is also a different measurement. No per-page reading data appeared in any Locklizard material we have read — so the trade is enforcement in exchange for the page-by-page picture. Which side of that trade you want is the whole of DRM versus document tracking.

9. What none of the seven stop

A photograph of the screen defeats every method on this page, including DRM, and no tool in this category claims otherwise. So does a reader who re-types the important sentence into a message. If the document must not be seen by a second person under any circumstances, the honest answer is not to send it.

A password on the file rather than on the link is also worth naming, because it looks like an answer and is not. The password travels with the file: forwarding the PDF and the password in the same thread defeats it completely, and nothing anywhere records that it happened. A password on the link is a different control: it can be changed or revoked after sending, and the opens are recorded.

10. Where these tools beat us

Three specific things across three tools, each bounded to the dimension it wins on.

Peony beats us on reader-side prevention. Business ($30/admin/month), not the $52 Data Room includes screenshot protection and download prevention. Only one of those two is a gap on our side: turning downloading off is on our free plan, and screenshot protection is what we do not build at any price. That win is bounded to what happens on the reader's screen; it does not extend to how long either product keeps the record, where its free-tier retention is 30 days against our 12 months.

Locklizard beats us on the copy that has already left. Its licensed viewer keeps refusing to open on machines you did not authorise, and its own material markets print logging — in the vendor's words, “Track print use – see how often PDFs are printed, when and where”. PDFTrackr records no print event at all. That win is bounded to enforcement after delivery, and it is bought with software the reader has to install.

Papermark beats us on deployment control. Its open-source code lets a firm that cannot put reader data on a third party's server read exactly what the software does and license a deployment of its own — we hold no dated read of its licence terms. PDFTrackr is hosted only, which for a regulated firm is a disqualification rather than a preference. That win is bounded to where the software runs; it does not extend to what either tool reports about a reader.

Where PDFTrackr wins is narrower and, for this particular worry, the part that matters: of the tools here that report page-by-page reading on a permanent free plan, ours keeps 12 months of that history where Papermark's free tier keeps 30 days and Peony's keeps 30 days. A forward is usually discovered late, and a record that has already rolled off cannot answer the question.

11. When Pro becomes the right choice

Free is the product here, not a trial of it. The download switch, the email gate, the password, the expiry, the virus scan, page-by-page reading and 12 months of history are all on the free plan, and so is the per-reader verdict on your first document — the plain sentence saying how far one named person got. Four of the seven methods above are free, and for one document sent to a handful of people they are enough.

Upgrade to Pro when a typed address stops being good enough — when the link has to open only for people you nominated, verified by a code, so a forwarded link fails instead of quietly succeeding. The second trigger is volume: once you are sending the same document to more than a handful of people at a time, one link per recipient is what turns “ somebody passed this on” into a name, and generating those by hand costs more than $9 a month in your own time. Full limits are on the pricing page.

12. How we evaluated these — and who is missing

Every competitor price, tier and retention cell above renders from a stored vendor fact, read from that vendor's own pricing or help page on 12-18 Aug 2026, in a browser or from raw HTML rather than a summarised fetch — a summary flattens exactly what a compare grid needs read precisely: which column a tick sits in, and whether a headline price is billed monthly or annually. The behaviour cells — what each tool stops and what it cannot stop — are written from those same sourced pages rather than from a stored fact, with two exceptions disclosed rather than glossed. The two Google Drive cells rest on no listed source at all: none of the pages listed below covers sharing with named recipients. The Locklizard cells are the second exception: locklizard.com refuses connections from this network, so two of the three Locklizard claims above — who a print log names, and the absence of per-page reading — were read through search retrieval of the vendor's own pages rather than by opening the URL, and they are recorded that way in our fact layer. The print-frequency quotation was read from raw HTML and is not covered by that disclosure.

What is missing, and why. The live results for this search also include HelpRange, Pitchwise, Ellty and a 2010 Adobe blog post. None is compared here: we hold no dated vendor fact for HelpRange, Pitchwise or Ellty's tracking cells, and this run had no route to fetch one through a channel this project's rules accept for a price or a tier. A shorter table beats a row we could not source. For the wider free-tool ranking see the free PDF tracking tools we compared.

What is out of scope, on purpose. Enterprise rights-management suites bought per seat across a whole company are excluded: they answer an IT question rather than a sender's. So are e-signature platforms, where the transaction is a signature rather than a document you need read, and encrypted email gateways, which stop at delivery.

Keep reading: how to disable downloads on a shared link, DRM versus document tracking, and PDFTrackr's free tracking plan. Or start from the free plan and send one closable link today.