What Happens to a PDF After You Hit Send?

You password-protect a contract, email it over, and move on. The moment the recipient opens it and types the password in, though, something changes: the file is now just a regular, readable PDF on their machine. It can be forwarded, copied, screenshotted, or uploaded somewhere else — and the password that got them in does nothing to stop any of that.

The gap nobody talks about

Most document security tools focus entirely on the moment of access — who's allowed to open the file. That's necessary, but it's not the whole problem. Once access is granted, the protection is effectively over. There's no password strong enough to control what someone does with a document after they've legitimately opened it.

This is why "is this document leak-proof?" is the wrong question — nothing sent to another human being ever fully is. The question that actually has a useful answer is: if it leaks, can you tell, and can you do anything about it?

Two things that still work after the fact

Traceability. If every copy of a document carries a unique, invisible marker tied to who it was sent to, a leaked copy isn't just evidence something went wrong — it's evidence of who. That changes the incentive calculus for a recipient considering forwarding something they shouldn't, and it gives you something concrete if you ever need to act on a leak.

Revocation. If the document was shared through a system that renders it on request rather than handing over a portable file, access can be cut off after the fact — even from a copy that was already opened. The recipient never held a key they could use offline forever; every open was mediated by a server that can simply stop cooperating.

What this doesn't solve

Being straight about the limits: a determined person with a camera can photograph a screen. No software fix changes that, and any tool claiming otherwise isn't being honest with you. What traceability and revocation change is the cost of leaking — it stops being anonymous and stops being permanent, which is a meaningfully different risk than "impossible to leak" while still being achievable.

Where this fits with the free tools

Everything upstream of this — converting, merging, compressing, signing — is free and stays free on iGuardPDF. Fingerprinting and revocation are Pro features, because they require an actual server-mediated access system to work, not just a one-time file operation. See our Pricing page for what's live today versus what's still rolling out.