How to Share a Password-Protected Ebook

Share an Ebook With Password Protection

Email attachments are a clumsy way to share an advance reader copy, an internal handbook, a paid resource, a course book or a client guide. An advance reader copy (ARC) is a copy that reviewers get before the launch. People forward files. Old editions stay in circulation. The sender cannot tell whether anyone opened the book.

You can put a password on an ebook in two practical ways. The first way is to encrypt the PDF, so that the file itself asks for a password when someone opens it. The second way is to send a protected link. The file stays on a document-sharing service that asks for a password or a verified email address before it shows any page.

This guide covers both ways. Then it shows how to prepare the PDF and set up the protected link. It also shows how to test the link as a reader, read the activity data and replace the file for a new edition.

In short, encrypt the PDF when the file must travel on its own. Use a protected link from a service such as Papermark or DocSend for more control. With a link, you can see who opened the book and change access later. You can also update the edition without sending a new link.

What It Means to Password Protect an Ebook

A PDF can carry two kinds of passwords. Adobe calls the first one the Document Open password, also known as the user password. A reader must type it to open the file. Adobe calls the second one the permissions password. It limits printing, editing and copying (Adobe’s guide to securing PDFs with passwords).

A protected link works differently. The book stays on a server. The service asks the reader for a password or an email address before it sends anything.

Approach	Reader experience	What the sender sees afterwards	Best use
Email attachment	Download and open a file	Nothing	Low-risk material
Password inside the PDF	Type a password in a PDF reader	Nothing	Files that must travel by email or on a drive
Password-protected link	Type a password in the browser	Visits and, on most services, page activity	Small known groups
Verified-email link	Confirm an email address before viewing	Activity tied to an email address	Client guides, paid resources, review copies
Public link	Opens at once	Visits, if the service tracks them	Public guides and lead magnets

None of these is digital rights management (DRM). A reader who can open the book can photograph it. Many readers can also save or print it. The qpdf manual says that PDF permission restrictions “may or may not be enforced by any particular reader.” Device limits, remote revocation of downloaded copies and publisher-grade licensing need a dedicated DRM system.

Prepare Your PDF Before You Share It

A password cannot repair a poor reading experience. Before you encrypt or upload anything, read every page at normal zoom on a laptop and on a phone. Make sure that you send the correct edition.

Use this checklist:

Item	What to look for	Why it matters
Page order	Cover, contents, chapters, appendix and final page appear in sequence	Export mistakes can move or drop pages
Links	Website, citation, email and navigation links open the right destination	Broken links make the edition feel unfinished
Text	Readers can select and search the text	Image-only pages are harder to use and less accessible
Images	Graphics stay clear at normal zoom	Heavy compression makes diagrams unreadable
File size	Compressed images show no visible damage	Smaller files open faster on mobile connections
Metadata	Title and author fields match the visible cover	Readers identify downloaded files by these fields
Sensitive content	No comments, hidden pages, names or revision notes remain	Access control cannot undo an accidental disclosure

Use a clear file name, such as remote-team-handbook-2026-07.pdf, instead of final-v7-new.pdf. Also put a version date inside the book. Then readers can tell which copy they have after an update.

Test on small screens, not only on a desktop. In an October 2025 survey, Pew Research Center found that 31% of U.S. adults read an e-book in the past year. In 2011, the number was 17%. Among adults under 30, it was 41% (Pew Research Center).

Option 1: Encrypt the PDF Itself

Encryption fits a book that must leave your hands as a file. Examples are an attachment, a download from your own site or a copy on a USB drive.

In Adobe Acrobat, use the Protect tool to add a password to open the file, to change its permissions, or both. The Adobe guide above shows the current menu.

With qpdf, a free command-line tool, run this command:

qpdf --encrypt "long-open-passphrase" "different-owner-passphrase" 256 -- handbook.pdf handbook-protected.pdf

The first value is the user password that readers type to open the book. The second value is the owner password. With it, the holder can change or remove the restrictions. Use two different values. The qpdf manual treats an empty owner password as insecure. It also treats an owner password that matches the user password as insecure. 256 selects AES-256 encryption.

Before you send the protected copy, open it in two different PDF readers. Keep the unprotected original in a safe place.

This method has these limits:

• Everyone shares one password. You cannot change it on copies that you already sent.
• You learn nothing about who opened the book or how far they read.
• A new edition means a new file and a new round of emails.

Option 2: Send a Protected Link

A document-sharing service keeps the file on its servers and gives you a link with access rules. After you send the link, you can change those rules or switch the link off. Three common choices are:

• Papermark link settings include Require password to view, Require email to view, Allow downloading, Expiration Date and Receive email notification. Require email verification and lists of allowed or blocked viewers are on paid plans.
• Dropbox DocSend offers Require an email to view, Verify email to view (on Advanced plans) and Add password protection. It also offers Allow downloads, Set an expiration date and allow or block lists by email or domain.
• Google Drive has no link password. If General access is Restricted, only the Google accounts that you add can open the file. The share settings can also stop viewers and commenters from downloading, printing or copying. This option works well when every reader already has a Google account.

The setup is similar on Papermark and DocSend:

1. Upload the prepared PDF. Use the clean file name and edition date from the checklist.
2. Create a link for each reader group. Name the link after the group, for example ARC reviewers, June or Northwind client team. Separate links show which group opened the book. You can also switch off the access of one group and keep the others.
3. Choose the gate, the step that a reader must pass before the book opens. Pick a password, an email requirement or email verification. The next section explains how to choose.
4. Decide on downloads. If you want people to read in the browser, turn off downloading. This reduces loose copies. But it does not stop screenshots.
5. For time-limited reviews, set an expiration date. An example is an advance copy that closes after launch.
6. If you plan to follow up, turn on view notifications.
7. Copy the link. Keep the password out of the link text and the document description.

If your ebook is a set of HTML pages and not a PDF, publish it as a small static website. Then protect the whole site. Password Protect a Static Website Safely compares the options, such as Cloudflare Access with emailed one-time codes or Netlify’s password protection.

Choose a Password or a Verified Email

Access method	Choose it when	Trade-off
Password	A known group can share one secret	The password can be forwarded
Email required	You want a name on each visit and little friction	Readers can type any address
Verified email	You need to know which person opened the book	Readers complete an extra step

A password is quick and familiar for advance copies, temporary project handbooks or workshop material. A long passphrase (a password made of several words) works better than a short clever password. NIST SP 800-63B requires at least 15 characters for a password that is the single authentication factor. It also rules out arbitrary composition rules, such as a required symbol. For this reason, a few random words are easier to type and stronger than a jumble of symbols.

For sensitive material, send the link and the password through different channels:

• Send the link by email.
• Send the passphrase through a trusted messaging app or say it on a call.
• If the password leaks or the reader group changes, change the password.

Choose verified email when you must know the identity of each reader. Examples are clients who open a paid manual, students with named access to licensed material, or investors who read a confidential briefing. Verified email also removes the need to change one shared password for many people.

Test the Link as a New Reader

You are signed in to the sharing service. Your own browser does not show what a first-time reader sees. Test in a private window:

1. Paste the link. Make sure that the gate appears before any page of the book.
2. Enter a wrong password. Make sure that the error is clear and that no content shows.
3. Enter the right password or complete the email verification.
4. Read a few pages. Follow one link inside the book. If downloads are on, try the download button.
5. Repeat these steps on a phone. Make sure that page fit, text size, navigation and load time are acceptable.
6. Go back to the dashboard. Make sure that your test visit appears.

Ask a colleague to test the link too. They will notice an unclear title, a password that is easy to mistype or a cover that is unreadable on a small screen.

In the email with the link, say what the book is and who sent it. Also say whom to contact if access fails. A specific, plain message looks more trustworthy than a promotional one.

Read the Activity Carefully

A protected link tells you things that an attachment cannot. For example, DocSend shows who viewed a document and how much time each viewer spent on each page (DocSend document tracking). Papermark can email you each time someone views the document.

Use these signals with care:

• Open: the recipient reached the book. This can save you an unnecessary reminder.
• Pages viewed: the reader moved past the cover. It does not prove careful reading.
• Time per page: this shows where attention went and where people stopped.
• Downloads: a copy can now exist outside the service.
• Repeat visits: these can show renewed interest, reference use or sharing inside an authorized team.

Situation	What the activity suggests	Sensible follow-up
A review-copy reader opens the book but reads only the first pages	They are possibly busy, or they only looked at the file	Wait, then send a polite deadline reminder
A client reads the pricing chapter and clicks a contact link	The client possibly has commercial questions	Offer a short call while the guide is fresh
An employee returns to one policy section again and again	The wording is possibly hard to apply	Add an example in the next edition
A course buyer downloads the book and rarely returns	They possibly prefer offline reading	Do not read low return activity as lost interest

Do not quote the data back to people. A message such as “I saw you paused on page 19” feels intrusive. Use the data to choose the timing and topic of your follow-up.

Tell readers why you collect email addresses. Use the addresses only for that purpose. Under privacy laws or client agreements, access records can be personal data. Keep only what you need.

Replace the File Without Sending a New Link

With a protected link, you can fix a typo, add a chapter or publish a policy change. The same link then opens the new edition.

• DocSend: open Content library and select the file. Click the Replace icon, then Add file, and upload the new version. Existing links and Spaces update. DocSend does not notify viewers (DocSend update guide).
• Papermark: open the document page. Upload a new version from the top-right corner. The document link stays the same (Papermark document versions).
• Encrypted PDF: there is no link to update. You send a new file.

Use a simple release routine:

1. Update the edition number and date inside the PDF.
2. Export the new file. Go through the checklist again.
3. Replace the old file on the service.
4. Open the live link in a private window.
5. Make sure that the new cover, page count, links and download behavior are correct.
6. If the changes affect the decisions or obligations of readers, tell them directly.

When you replace the file, copies that people already downloaded do not change. For a serious correction, add a visible notice to the new edition. Also contact the known recipients.

Common Mistakes

• Uploading a draft that still contains comments or tracked changes
• Sending the password in the same message as the link
• Using one password forever for unrelated reader groups
• Testing only while signed in to your own account
• Treating a page view as proof of agreement or understanding
• Replacing the PDF without changing its visible edition date
• Calling a password or a disabled download button “DRM” in your terms

To share a password-protected ebook, separate the book from the delivery. Prepare a clean PDF. If the PDF must travel as a file, encrypt it. If you want control after you send it, put it behind a password or a verified-email link.

Test the link as a new reader. Use the activity data to time your follow-up. When the next edition is ready, replace the file at the same link.

Free email addresses
for your AI agents

Each agent gets an address like myagent.x7k2@revdokumail.com. It can receive emails, send replies and store files.

• 3 free mailboxes, each with its own address
• 3,000 incoming and 500 sent emails a month
• 3 GB of storage for attachments and files
• Virus, malware, spam and prompt-injection filter
• Read and reply through API, MCP or CLI

Create free mailbox

You do not need a card.