Burn-After-Read PDFs: How to Send a Document That Locks Itself After It's Been Opened

This is the single most important thing to understand before turning it on: burn-after-read controls the share link. It has no reach at all over a copy of the file that's already left iGuardPDF's servers — downloaded to someone's device, saved as an email attachment, forwarded onward. Once bytes are out in the world, no tool, ours or anyone else's, can reach back and un-send them.

That's not a limitation we're hiding — it's the honest boundary of what any link-based sharing system can ever promise. Burn-after-read is genuinely powerful for controlling the link itself. Set expectations around that, and it does exactly what it says.

Turn on burn-after-read for a Guarded document and you get two independent limits, either or both:

• Max views — leave it blank for unlimited, or set an exact number. Set it to 1 for a genuinely single-use link.
• Expires after — Never, 1 hour, 1 day, 1 week, 30 days, or a custom window.

Set both a view limit and an expiry, and the link locks the moment either condition is met — a document set to expire in a week but with a max-views of 1 will lock after its first open, well before the week is up, if that's what happens first. It's a floor, not an average: the first trigger to fire ends it.

Nobody hits a broken link or a generic 404. A burned document shows a clear, branded page explaining exactly what happened — that it hit its view limit or its expiry, as set by the sender — with a note to ask the sender for a fresh link if they still need access. It's built to look intentional, because it is.

A document already sitting open in someone's browser tab still gets checked continuously — not just once, when that tab first loaded. If you hit Revoke, or a burn-after-read limit fires, while someone already has the document open, their tab locks within seconds, not the next time they happen to refresh. "Instant" means instant, even for a viewer who was already in.

Burn-after-read and Revoke only fully do their job when download is turned off. If downloading stays allowed, anyone who saves a copy before the burn condition hits keeps that copy forever — the link burning afterward changes nothing for them, because they're no longer relying on the link at all. This is the exact same boundary as above, just worth repeating at the setting where it actually bites: if the whole point of burn-after-read is that access should genuinely stop, turn on View only, no download alongside it. Otherwise you're locking a door after the file already walked out a window.

View-only documents render as flattened page images with no underlying selectable text layer, rather than relying on the browser's own PDF viewer and a hidden toolbar. There's genuinely nothing to select or copy out while the document is still open and readable — and unlike a hidden-toolbar approach, this holds up the same way on a phone as it does on a desktop browser.

Max views of 1 is the strictest setting available — a link that works exactly once and then is gone. Good fit for a single confidential figure, a one-time access code, or any document where a second read genuinely shouldn't be possible through that link.

A few concrete cases where a self-expiring link earns its place over an ordinary attachment:

• A severance or offer letter with a response deadline built in
• A time-limited price quote that shouldn't be forwarded once it's expired
• A one-time financial disclosure or confidential figure
• An internal memo that shouldn't still be circulating weeks later
• A document tied to one specific meeting or negotiation window

Burn-after-read is automatic — it fires on its own once a limit is hit. Revoke is the other half: a manual, instant kill switch you can hit at any point, even before any limit would otherwise have triggered, right from your dashboard. Together they cover both cases — the ones you can plan for in advance, and the one where you just need it gone right now.

Burn-after-read controls how long a link stays open. It doesn't, on its own, tell you who opened it. Pairing it with photo verification covers both questions on the same document — who's allowed in, reviewed by you personally, and exactly how long the door stays open once they are.