ImagePDF.Tools

Fingerprint a PDF So Every Copy Points Back to Its Owner

Processing securely on your device, no data sent to any server
PDF

or drop files here

List who is getting the document and receive a separate copy for each, quietly signed with its own code. Your recipient list is turned into files on this computer and never travels to a server.

How it works

One file per person, one code per file.

Start from the clean original

Use the unmarked master file. If you drop in a copy that already carries a mark, the tool warns you before a second one is layered on.

Name each recipient

One person or team per line. Each line becomes its own PDF with a fresh random code, and you choose whether a "Copy for" footer is printed too.

Send, then trace if needed

Save the ZIP and send each person their own file. If one surfaces somewhere unexpected, switch to Check a copy and drop it in.

Use cases

When you need to know whose copy it was.

Sending one identical file to twenty people means a leak could have come from any of them. Twenty slightly different files turn a guessing game into a lookup.

Board and investor packs

Quarterly numbers sent to directors or a shortlist of investors are tempting to forward. A personal copy for each makes it clear who passed the deck along.

Advance review copies

Authors and publishers sending a manuscript to early readers or critics can mark each PDF, so a pirated copy on a sharing site points back to its source.

Exam papers sent to centres

Give every school or test centre its own copy of a paper ahead of the sitting. If questions appear online early, the code narrows the search to one site.

Scripts and embargoed releases

A screenplay draft for the cast or a press release under embargo can carry a visible "Copy for" line that discourages sharing before the date.

Sensitive internal memos

Restructuring plans or salary bands shared with a handful of managers. Personal copies give you a starting point if one turns up in a group chat.

Proposals to competing bidders

When the same brief or pricing schedule goes to several suppliers, separate marked copies show which one let it reach a rival.

Where the mark hides, and what wipes it out.

Each copy gets a code of eight characters drawn at random from Crockford's base32 alphabet, which leaves out I, L, O and U so a code read aloud over the phone cannot be confused. That is about 1.1 trillion possible codes, so two recipients will not end up sharing one by accident.

The code and the name are joined into one short string and stored in three separate places, because each one is fragile in a different way. Spreading the mark out means a copy that has been re-saved, scrubbed or reprinted still has a good chance of keeping at least one of them.

Be realistic about the ceiling, though. All three carriers live in the file's data, not in the picture of the page, so nothing hidden survives a camera, a scanner or someone typing the content out again. Against that kind of leak, only the visible footer helps, and only as a reminder that discourages it in the first place.

Invisible text line, every page

Set in 1 pt type using the PDF's invisible rendering mode near the bottom-left corner. It is part of the text layer, so it rides along through most re-saves and printers that keep text.

Document properties entry

A custom key added to the document information dictionary. Easy to read back, but also the first thing a metadata cleaner removes.

Trailer file ID

The second half of the ID pair every PDF carries is replaced with the code. There is no room for the name here, which is what the key CSV is for.

Visible footer (optional)

A small grey "Copy for {name}" line centred at the foot of each page. Characters outside the Western European set print as "?", though the hidden mark keeps the exact name.

What happens to each part of the mark
What the recipient doesHidden text lineProperties entryFile IDVisible footer
Forwarded by email, chat or a shared driveKeptKeptKeptKept
Opened and re-saved in a PDF editorKeptUsually keptOften replacedKept
Printed to a new PDF ("Print to PDF")Usually keptLostLostKept
Run through a metadata scrubberKeptLostDepends on the toolKept
Pages converted to imagesLostLostLostKept as pixels
Screenshot or phone photo of the screenLostLostLostOnly if in frame
Printed on paper, then scannedLostLostLostUnless cut off
Text retyped or pasted into a new fileLostLostLostLost

"Usually" and "often" are deliberate: PDF editors and virtual printers differ, and some rebuild text in ways that drop invisible lines. A person who knows the mark exists can also delete it on purpose. If tracing really matters, test your own workflow once by fingerprinting a copy, passing it through the same steps, and running Check a copy on the result.

Common questions

Questions answered.

What exactly is added to each copy?
A short mark made of a random 8-character code and the recipient's name. It is written as an invisible line of text on every page, as a custom entry in the document properties, and (code only) in the file ID the PDF format keeps in its trailer. If you leave the visible notice on, a small grey "Copy for" line is printed at the foot of each page as well.
Will the person receiving it notice anything?
Not by looking at the page. The hidden line is 1 point tall and drawn in the PDF's invisible text mode, the same mode OCR software uses to lay searchable text over a scan. Someone who selects all the text or inspects the file's properties could find an odd string starting with IPTFP, which is why the visible notice is offered as an honest deterrent.
Does the mark survive printing, photos or screenshots?
No. Every hidden part of the mark lives inside the file, so anything that turns the page into pixels or paper leaves it behind. The visible footer is the only part that can come through a printout or a screenshot, and only if nobody crops it off.
Can someone remove the fingerprint?
Yes, if they know it is there. Rebuilding the pages as images, deleting the text layer or editing the properties will clear it, and the visible footer can be cut away. Treat it as a way to trace careless forwarding, not as copy protection that stops a determined person.
Can other people read the recipient's name from the mark?
Anyone who finds the mark and recognises the format can decode it. The name is stored as base64url, which is an encoding, not encryption. If names themselves are sensitive, enter neutral labels such as "Reviewer 07" and keep the matching list to yourself.
What is fingerprint-key.csv for?
It lists every recipient, their code and the file name made for them. The file ID only has room for the code, so if the text line and properties were stripped but the ID survived, Check a copy shows a code without a name; load the CSV there and it fills the name in. Store the key somewhere private, because it is the only list that links codes to people.
Why does Check a copy say no mark was found?
Either the file was never fingerprinted with this tool, or every hidden carrier was lost on the way, most often because the pages were rebuilt as images by a scanner, a screenshot or an image-based conversion. A copy with a visible "Copy for" footer still tells you who it belonged to by eye.
What is the SHA-256 shown in Check a copy?
It is a fingerprint of the exact bytes of the file you dropped in, and changing a single byte produces a completely different value. Paste a hash you recorded or were given into the compare box to confirm whether two files are identical. The recipient mark and the hash answer different questions: the mark says whose copy it was, the hash says whether it was altered at all.
Are the recipient names or the document uploaded?
Neither leaves your computer. pdf-lib builds every copy inside a Web Worker in this tab, the ZIP is packed in the same place, and the checker reads the mark with pdf.js locally. Names typed into the recipients box are not sent to us or anyone else.