Photo Verification for PDFs: The First Free Tool That Makes You Show Your Face Before It Unlocks

Password-protect a PDF and you've raised the bar slightly — now whoever opens it needs the password too. But the password travels with the file just as easily as the link does. Forward the email, and the password usually goes right along with it. Neither a link nor a password was ever designed to answer the actual question that matters most of the time you're sending something sensitive: is the person about to read this actually who I think it is?

That question matters enormously more for some documents than others — a severance letter, an NDA before a deal closes, a financial disclosure meant for one specific person, board materials that shouldn't circulate past the room they were discussed in. For those, "anyone with the link" isn't good enough, and until now, nothing in the free PDF tool space tried to fix it.

Turn on photo verification for any document sent through Guarded — it's a toggle available on every tool that produces a PDF, from Word to PDF to Password Protect PDF. Here's what happens when someone opens the share link:

• They land on a consent screen explaining exactly what's about to happen: a photo will be taken and sent to the document owner for a one-time approve/deny decision, nothing more.
• Accept and decline are shown with equal visual weight — no dark pattern making one option harder to find than the other. Decline, and the document simply stays locked.
• If they accept, the camera opens with a 3-second countdown and captures automatically — no separate shutter button to explain to someone who's never used this before.
• The photo is encrypted and sent to you. You review it, in-app, and approve or deny. The moment you decide, the document either unlocks or stays locked for that visitor.

This is deliberate, and worth being precise about: there's no facial recognition here, no AI model claiming to "confirm identity" with some invisible confidence score. That kind of tech has a long, well-documented history of getting it wrong — false positives, bias across skin tones, and a false sense of certainty that a document owner has no way to actually verify themselves.

Instead, a real photo goes to a real person — you — and you make the call the same way you'd recognize a colleague walking into a room. It's a lower-tech approach on purpose. It's also a more honest one: nobody's pretending a black-box algorithm did the verifying when really nothing did.

Once you open the photo to review it, a 60-second countdown starts. Decide within that window, or the request is automatically denied and the document locks itself — no follow-up needed from you, and no risk of a photo sitting in limbo indefinitely while a recipient waits on the other end.

That deadline is enforced on the server, not just as a countdown in the interface. Every request that touches the photo re-checks the clock first, so there's no way to bypass it by simply not interacting with the page — the timeout applies regardless of what happens client-side.

The photo is encrypted the moment it's captured and never leaves the app to be emailed, pushed as a notification, or stored anywhere you'd have to go dig it out of later — you view it in-app, and only there.

The instant you approve or deny, the photo is deleted. Not archived, not kept "just in case" — deleted. And if you never open the review request at all, it doesn't sit around forever either: it automatically expires and gets wiped within 24 hours regardless of what you do. The whole design leans toward the photo existing for the shortest possible window it can, given the job it has to do.

Photo verification earns its place on documents where knowing exactly who opened it isn't a nice-to-have — it's the point:

• Severance agreements and other sensitive HR paperwork going to one named individual
• NDAs and term sheets shared before a deal is public
• Financial statements or disclosures meant for a specific recipient, not "whoever has the link"
• Confidential board materials or investor updates
• Legal documents in active discovery, where accountability for who accessed what genuinely matters

A password proves someone knows a secret. Secrets travel — forwarded in the same email, read aloud over the phone, pasted into a chat. A live photo doesn't travel the same way. Someone can share a password with a colleague in five seconds without you ever knowing. Handing over your own face, on camera, in the moment, to open a document that isn't yours, is a different and much more visible act — and it leaves you, the sender, with an actual moment of accountability to review, not just a string of characters that either matched or didn't.

Photo verification is one layer of Guarded, and it's built to combine with the rest of it. Pair it with burn-after-read so the link locks itself after a set number of views or a set time — meaning even an approved viewer only gets a limited window. Add "View only, no download" so there's no raw file to forward once someone's inside. Turn on a tracking beacon to know if the file itself is later opened outside the platform entirely. None of these are exclusive — a genuinely sensitive document can run all of them at once.