How to privacy-clean a file before you share it

Three things every shared file leaks

Metadata. The PDF you exported from Word has your Windows username in the Author field. The photo from your phone has GPS coordinates of where it was taken. The DOCX before that has a Track Changes history. None of it is visible on screen — all of it is one Properties dialog away.

A second invisible leak is the raw structure underneath visible content. A scanned ID you cropped in Preview still has the un-cropped original embedded. A redacted PDF where the redaction was "add a black rectangle" still has the text under the rectangle in the file.

The third is provenance. If a file leaks from your inbox to the press, can you trace which recipient it came from? Without per-copy watermarks, no.

The three-step privacy clean

• 1. Strip metadata — Author, Producer, Title, Subject, Keywords, GPS, camera serial.
• 2. Watermark — name + date stamped on every page, so the file is traceable as yours.
• 3. Set a password — for the cases where the file is actually sensitive.

This is the Privacy-Clean a PDF workflow, exactly. Three steps, three clicks, file carries between them. For images, replace step 1 with "Strip EXIF" and skip steps 2 and 3 unless you're sending the photo to a journalist.

Step 1 — Strip metadata

Open Strip Metadata. Drop the file. The tool clears Author, Title, Subject, Keywords, Producer, Creator, CreationDate (replaced with a generic value), and ModDate. PDF version stays the same; visible content stays the same.

For images, the EXIF Remove tool does the equivalent for photos. The result has GPS coordinates, camera make/model, serial number, and embedded thumbnails removed. Orientation tag is preserved so the photo displays right-side-up.

Step 2 — Watermark for traceability

If you're sending a file to multiple recipients and you care about leak attribution, watermark each copy. The Watermark tool stamps text — usually the recipient's name + the date — diagonally across every page, semi-transparent, behind the content. It's visible enough to be a deterrent and subtle enough not to obscure the document.

Per-recipient watermarks turn an anonymous leak into a traceable one in the most basic possible way: if a photo of the leaked document shows "Acme Corp — 2026-05-20" stamped on it, you know who shared it.

Step 3 — Password protection

For genuinely sensitive material — IDs, financials, signed contracts — set an open password. The Lock PDF tool encrypts the file with AES-256. The recipient is prompted for the password when they open it.

Share the password through a different channel than the file itself. If both arrive in the same email, you haven't gained much; if the password arrives via SMS or Signal, an attacker would need both your email and your phone to read the document.

What this doesn't protect against

A determined attacker with the file can crack a weak password by brute force. Use a 16+ character random password from a password manager; that turns brute force from "hours" to "centuries".

Watermarks can be cropped out or covered if the leaker is careful — the goal is to deter casual leaks, not industrial espionage.

And password-protected PDFs are still vulnerable to screenshots once opened. The encryption protects the file at rest, not the recipient's screen.