Adding a password to a PDF can be useful. It may stop someone who finds the file casually from opening it, and it can reduce accidental access when the password is delivered separately.
What it cannot do is tell you which authorised copy became the source of a leak.
One password often means identical copies
If five people receive the same encrypted PDF and the same password, all five hold an identical document. Once any recipient opens it, they may be able to save, print, photograph or screenshot the content. A surfaced image no longer carries the password prompt or the email that delivered it.
Even when every recipient receives a different password, that password usually protects access rather than changing the visible document into a recipient-specific copy. If someone exports or captures the opened content, the resulting pixels may still look the same.
Access control and provenance are different
A password answers a preventive question: “Can this person open the file?”
Recipient attribution answers an investigative question: “Which distributed copy is this evidence connected to?”
Strong information-sharing workflows often need both. Encryption, secure links and authentication reduce unauthorised access. Recipient-linked marking preserves a hidden identity after an authorised person can see the content.
Where ExactMark Imprint fits
ExactMark Imprint creates a separate image or PDF for each intended recipient. The output opens normally, while a hidden signal links it to the recipient record retained in ExactMark.
If a protected copy later surfaces, an authorised investigator can submit the artifact to Evidence Lab and search the Imprint records. The resulting confidence score and candidate information provide a source lead that an ordinary shared PDF does not contain.
Use layers rather than choosing one control
A sensible workflow may include:
- Remove information the recipient does not need.
- Create an individual Imprint copy for that person.
- Deliver it through a secure, authenticated channel.
- Apply a password where it is useful and manageable.
- Send credentials separately.
- Remove portal or link access when the purpose ends.
- Retain the attribution record according to policy.
No single layer is perfect. Combining controls limits access and leaves better evidence if access is later misused.
Do not overstate the result
A matched copy does not automatically prove that its intended recipient deliberately disclosed the document. Their mailbox, device or account may have been accessed by someone else, or the copy may have been forwarded through an authorised process.
Transformations such as screenshots, photographs, cropping and recompression can also weaken hidden signal. ExactMark reports confidence rather than pretending every artifact supports certainty.
Review the finding with delivery records, access logs and the surrounding facts before taking consequential action.
Password protection still has a place. It simply solves a different problem. If the identity of each distributed copy matters after the document is opened, provenance needs to be designed into the file before it travels.