Framekit templates
Start from a designer-made template
Use template
Use template
Use template
Use template
Use template
Use template
Use template
Use templateEvery guide to protecting client photos online starts by promising a setting that stops copying. There is none. If a photo renders on a screen, it can be screenshotted, and no watermark, right-click block or encrypted viewer changes that.
What you can change is the economics. Make casual copying inconvenient, make the full-resolution file hard to get without permission, make every file carry your name, and make licensing cheaper than a dispute.
All four are achievable in about ten minutes of setup, and most photographers run one or two of them.
Protecting client photos online is the practice of layering access controls, download controls, visible watermarks, embedded metadata and a written response plan, so finished images reach the people entitled to them while misuse by anyone else becomes inconvenient, traceable and expensive.
To protect client photos online, give every gallery its own password, gate downloads with a separate PIN or switch them off until payment, watermark proofs rather than paid finals, embed your copyright and contact details in every export, set an expiry for proofing rounds, and keep a documented takedown routine for when work escapes.
Framekit has the password, the separate download PIN, watermarking and expiry on every plan including free, and because its downloads always deliver the full-resolution original, the PIN and the downloads switch are the controls that actually protect the file.
No layer stops a screenshot, so aim for friction and traceability, not prevention.
We re-verified this protection guide on 12 October 2026: Framekit's password, PIN, watermark and expiry behaviour was checked in the shipped code, competitor controls were re-read on each vendor's own pages, and the US Copyright Office fees were taken from its published fee schedule the same day.
Framekit is an AI website builder whose client galleries carry a gallery password, a separate download PIN, watermarking and scheduled expiry on every plan, on a page of your own site.
Full disclosure: Framekit is our product, so weigh that; the layers below work on any gallery platform, the comparison table shows where competitors offer controls Framekit does not, and several of the most useful steps, metadata, contracts and takedowns, happen outside any gallery at all.
The Five Layers, Ranked by Protection per Minute
The five layers that protect client photos differ wildly in how much they protect for the time they take, and the ranking below puts the cheapest high-value controls first, which is close to the opposite of the order most photographers configure them in.
| Layer | What it stops | What it does not stop | Setup time |
|---|---|---|---|
| Unique gallery password | Search engines, link scrapers, strangers with an old URL | Anyone the client shares the password with | 30 seconds a gallery |
| Separate download PIN, or downloads off | Forwarded links becoming forwarded full-resolution files | Screenshots of what is on screen | 30 seconds a gallery |
| Embedded copyright metadata | Anonymous reuse, authorship disputes, lost credit | Deliberate stripping, social uploads that strip it | 5 minutes once, then automatic |
| Watermark on proofs | Unpaid use of unfinished frames, casual reposting | A determined crop or clone | 2 minutes once, then a preset |
| Expiry on proofing rounds | Galleries living forever with unpaid work in them | Copies made before the date | 15 seconds a gallery |
| Right-click blocking | Nothing meaningful | Every other save route, every screenshot | Not worth doing |
The two controls that do the most, a unique password and a download gate that is separate from it, take one minute between them. The one photographers ask about most, blocking right-click, does almost nothing.
Step 1: Give Every Gallery Its Own Password
Give every gallery a password of its own, never a studio-wide one, because a gallery link gets forwarded within hours of delivery, and a shared password means one forwarded email opens every client's photos instead of one client's.
Use a pattern you can reproduce. Client surname plus shoot date, such as "ortiz0614", is easy to read over the phone and unique per job. Avoid anything a guest could guess from the wedding website.
Know what happens on a wrong guess. On Framekit, wrong passwords are slowed down, and a network that enters 20 wrong passwords for the same gallery within an hour is blocked from trying again until the hour is up, which makes scripted guessing pointless.
Know how to revoke. If a password leaks, change it. On Framekit, everyone who unlocked the gallery with the old password has to enter the new one, so changing it closes the gallery to everyone you have not re-sent it to.
Add Email Registration where you need a record of who came in. Framekit's optional Email Registration setting makes every visitor enter an email address before the gallery opens, which suits corporate, event and editorial galleries where an unknown viewer matters.
In one linea unique password per gallery, a reproducible pattern and the knowledge that changing it locks out old holders turn the cheapest control into the one that does the most.
Step 2: Separate Viewing From Downloading
Separate the right to look from the right to take, with a download PIN that is different from the gallery password or with downloads switched off entirely, because clients forward galleries to family within hours and the full-resolution file is the thing worth protecting.
The PIN. A second code that every download asks for. The couple forwards the link and password to forty wedding guests, who can browse, heart photos and watch the film, and only the couple, holding the PIN, can save files.
Framekit has the PIN on every plan, Free included, and the Activity panel records every download with the client's email, the photo count, the date and the PIN used, exportable to CSV.
Downloads off. For a proofing round, where the client is choosing what to pay for, switch downloads off for that gallery. Nothing can be saved through the gallery at all until you switch them back on.
Why this matters more on Framekit than you might expect. Every Framekit download delivers the full-resolution original, whether the client saves one photo, a favourites list or the whole gallery as a ZIP; there is no reduced-size download to fall back on.
So the PIN and the downloads switch are the only controls standing between a forwarded link and your full-resolution files.
Changing the PIN. The PIN is checked on every download request, so a new PIN takes effect immediately for everyone, including people who used the old one yesterday.
Step 3: Watermark What Has Not Been Paid For
Watermark proofs, previews and anything shown before payment, and leave a paying client's finished gallery clean, because the mark exists to make unpaid frames unattractive to reuse, and a mark across a couple's paid wedding photos reads as distrust and gets cropped off anyway.
Place it where a crop cannot reach. A mark in the corner disappears in a two-second social crop. A low-opacity mark across the centre, or a tiled pattern, survives.
Tiling protects best and makes selection hardest, so use one central mark for selection rounds and tiling for public previews.
On Framekit, a watermark can be an image, such as your logo, or text, placed in any corner, centred or tiled, with adjustable opacity and size, and it applies to photos only. Videos are never watermarked.
Know what the mark covers. A Framekit watermark marks what clients see in the gallery.
The gallery shows a display copy generated from your file, no larger than 2,560 pixels, with the mark baked into that copy, so a screenshot captures a watermarked, screen-sized image.
A download, by contrast, delivers the clean full-resolution original. A watermark alone therefore never protects an unpaid round; downloads off, or a PIN you have not sent yet, does that.
In one linemark the proofs, not the finals, put the mark where a crop cannot remove it, and pair it with downloads off, because on Framekit the mark protects the screen and the PIN protects the file.
Our watermarking tools comparison covers marking at export, in Lightroom or Capture One, for files that leave by other routes.
Step 4: Put Your Name Inside Every File
Embed your name, copyright notice and contact details in every exported file's IPTC and XMP metadata, because the metadata is the only protection that travels inside the file itself, and it is what lets a print lab, a designer or a publication that receives your photo find out who to pay.
Set it once. In Lightroom, Capture One or your export tool of choice, create an export preset with your name as creator, a copyright notice such as "Copyright 2026 Ortiz Studio, all rights reserved", your email, your website and one line of usage terms.
Every file you export afterwards carries it, which takes five minutes once.
Know where it survives. Direct downloads, email attachments, transfer services and print labs keep metadata. Most social platforms strip it on upload.
So metadata protects the file that leaves a gallery as a download, which is exactly the file most worth protecting.
Keep the originals. Your RAW files with their capture timestamps are the strongest authorship evidence you have in a dispute. A gallery is a delivery copy, never your archive.
Step 5: Close the Window With Expiry
Set an expiry date on every proofing round and on any gallery that holds unpaid or embargoed work, because a gallery that stays online indefinitely is a permanently open door, and a date chosen before sending is far easier to defend than one imposed later.
Working windows: 14 to 21 days for a proofing round, the embargo date for unreleased commercial work, and 12 months or no expiry for a paid wedding or family delivery, where reprint requests arrive long after the event.
On Framekit, a gallery with an expiry date turns back into a draft on that day with every file intact, and visitors see a note asking them to contact you.
An optional reminder emails you and the contacts linked to the gallery 3 days before, with a link to open it, so nobody loses access without warning. Republish it and the gallery is back.
Our guide to how long client galleries should stay online has a schedule by genre.
Step 6: Write the Usage Terms Into the Contract
Write two short clauses into every contract, one on what the client may do with the images and one on what happens if they are used beyond that, because a technical control without a written licence is a lock without a law behind it, and a licence without a control is a promise nobody can check.
Clause one, the licence. "The client may print, share and display the delivered images for personal use. Commercial use, resale, and use in advertising or by third parties require written permission."
Clause two, the remedy. "Use beyond this licence will be invoiced at the studio's standard licensing rate for that use."
The second clause is the one that pays. It turns a future dispute about a brand using a wedding photo in an advert from an argument into an invoice the client already agreed to.
Our roundup of contract and proposal tools covers where to keep these.
How Each Platform Handles Protection
Most client gallery platforms offer a gallery password and a watermark, but they differ on whether downloading has its own gate and on which plan unlocks each control, so this table sets the published controls side by side as read on each vendor's own pages on 12 October 2026.
| Platform | Gallery password | Separate download gate | Watermark | Plan needed for the full set |
|---|---|---|---|---|
| Framekit | Every plan | Download PIN, or downloads off, every plan | Image or text, photos only | Free |
| Pixieset | Yes | Download PIN | Built-in, on images | Basic from $8 a month billed yearly for full-resolution downloads |
| Pic-Time | Private galleries with access by user type | Download permissions by user type: clients, guests, vendors | Your logo and watermark, plus an AI Watermark Protector | Varies by tier on its pricing page |
| ShootProof | Client access controls | Digital download controls on every plan | Branding, logo and watermark on every plan | Free for photos |
| SmugMug | Private and password-protected galleries on every plan | Customer download limits on Pro | Portfolio and Pro | Pro at $37 a month billed yearly |
| Dropbox | Password-protected links | Disable downloads | Watermarking | Standard at $15 a user a month billed yearly |
Two rows carry the most weight. SmugMug's plans page places watermarks on Portfolio and download limits on Pro, so its full protection set costs $444 a year.
Dropbox's plans page puts password links and download controls on Standard, not on Plus, so a folder shared from Plus has neither.
Where Framekit Fits for Protected Delivery
Framekit fits photographers who want every protection control on the free plan and a delivery that lives on their own site, because the password, the separate download PIN, watermarking and expiry are not tiered at all, and the gallery publishes at /client/ on your domain rather than on a vendor's.
What it feels like to a guest. They open the link, meet a password screen with your gallery's cover style, browse a watermarked or clean display copy, and get a PIN prompt the moment they try to save anything.
They can still heart photos, which asks only for an email address.
The number to remember. $0. Every protection control in this guide is on Framekit's free plan, with 10GB of storage shared with your website.
Starter at $7 a month billed yearly adds your own domain and takes the badge off your website, though galleries keep a small Made with Framekit footer line on every plan.
The standout detail. The Activity panel logs every download with the client's email, photo count, date and the PIN used, and exports to CSV, so if a full gallery turns up somewhere it should not, you can see who downloaded it and when.
The honest gotcha. There is no reduced-size download option, so you cannot hand guests a small file while keeping the original back; every download is the full-resolution original, and the PIN or the downloads switch has to do the protecting.
Videos cannot be watermarked at all.
Who should skip it. Studios that need per-person access rules, such as different download rights for the couple, the guests and the venue: Pic-Time sets permissions by user type, Framekit has one set of rules per gallery.
Anyone needing forensic watermarking or a native app.
Verdict: for a photographer who wants the full protection set without paying for a tier, on a gallery that lives on their own site, Framekit is the strongest option here; for per-person permissions, Pic-Time does more.
What Does Not Protect Your Photos
Several popular protection measures do little or nothing, and knowing which ones saves configuration time and, more importantly, stops you believing a gallery is protected when the only thing actually standing in the way is a setting that every browser ignores.
Right-click blocking. Browsers can save images through developer tools, the share menu, drag and drop or a screenshot. Blocking the context menu mostly annoys clients trying to open a photo in a new tab.
Screenshot blocking. Not possible on the open web. A native app can try; a browser page cannot.
Low-resolution files for paying clients. Delivering small files to the person who paid you, to stop someone who did not, punishes the wrong person. Deliver full-resolution finals behind a PIN instead.
A contract clause on its own. A clause is a remedy, not a lock. Pair it with the PIN and the metadata so you can both prevent and prove.
Heavy tiled watermarks on paid finals. They make the work look defensive and the client feel distrusted. Keep tiling for public previews.
What to Do When a Client Photo Is Used Without Permission
When a client photo turns up somewhere it should not, document first, identify whether the use is personal or commercial, and then send the cheapest response that fits, because most misuse is careless rather than malicious and resolves at a polite invoice long before anyone needs a lawyer.
1. Document. Screenshot the use with the URL and date visible, save the page, and locate your original with its capture date and metadata. Do this before contacting anyone, because posts disappear once they are noticed.
2. Classify. A guest reposting a wedding photo without credit is a different problem from a brand using it in an advert.
3. Respond in proportion.
| Misuse | First response | If ignored |
|---|---|---|
| Guest repost without credit | A friendly message asking for credit or removal | Leave it, or report it to the platform |
| Client sharing beyond the licence for personal use | A reminder of the licence, no charge | Note it for future contracts |
| A business using the image in marketing | An invoice at your standard licence rate, with the metadata and original as evidence | A copyright complaint to the hosting platform |
| A business using it in paid advertising | An invoice plus a request to stop the campaign | A takedown notice, then legal advice if registered |
| Wholesale copying of a gallery | A takedown notice to every host | Legal advice |
4. Register what matters. In the United States, registration with the U.S. Copyright Office is what unlocks statutory damages and legal fees in an infringement claim.
Its fee schedule lists $45 for a single work by a single author filed online, $65 for a standard application and $55 for a group registration of published or unpublished photographs, which makes registering a whole wedding or campaign one filing rather than hundreds.
5. Tell the client. If their gallery was the source, they should know, and it is the moment to explain why the PIN exists rather than to assign blame.
What Happens When Protection Is Tested
The protection questions photographers actually face are specific and mechanical, so here is what happens on Framekit in the seven situations that come up most, with the setting that resolves each one, based on the shipped product rather than on marketing copy.
The client forwards the link and password to 60 guests. All 60 can view and favourite; none can download without the PIN.
The PIN leaks to a guest. Change the PIN. The next download request from anyone needs the new one.
A former client's password is circulating a year later. Change the password; everyone who unlocked with the old one is locked out, or unpublish the gallery.
Someone tries to guess the password. Wrong guesses are slowed, and 20 wrong attempts from one network on one gallery within an hour blocks that network until the hour passes.
A guest takes screenshots. They get a display copy no larger than 2,560 pixels, carrying your watermark if the gallery has one. Nothing in a browser prevents this.
You need to know who downloaded the full set. Open the Activity panel: each download is logged with the email, photo count, date and PIN used.
The gallery must go offline today. Unpublish it, or set the expiry to today; the files stay in your account either way.
Run the Outside-In Protection Test
Run a five-minute test on every new gallery from a private browser window on a different device, because the owner's view skips the password screen and the PIN prompt, and the most common protection failure is not a defeated control but one the photographer believed was switched on.
- Open the link in a private window and confirm the password screen appears before any photo.
- Enter a wrong password once, then the right one.
- Try to download a single photo and confirm the PIN prompt appears.
- Enter the PIN, download one photo, and open the file's metadata to confirm your copyright notice is inside.
- If it is a proofing round, confirm downloads are off and the watermark shows on the display copy.
- Check the expiry date in the gallery settings matches the date in your email.
Then count your exposure. List every gallery you have published in the last two years with no expiry and no PIN. Each one is a full-resolution set anyone with the link and password can download today; adding a PIN to the oldest five takes three minutes.
Choosing the Protection Level, Gallery by Gallery
This decision path sets protection per gallery rather than per studio, asking questions in order of how much each answer changes the settings, because a paid wedding and an unpaid commercial proof need very different controls and copying one into the other is how proofs leak.
1. Has the client paid for these files? If no, switch downloads off, watermark the photos and set a 14 to 21 day expiry. If yes, go to question 2.
2. Will the link be forwarded to people who should not download? If yes, set a download PIN and give it only to the client. If no, a password alone is enough.
3. Is the work embargoed or commercially sensitive? If yes, add Email Registration, set the expiry to the embargo date and keep downloads off until sign-off.
4. Will the files be used commercially by anyone but the client? If yes, register the set with the Copyright Office if you are in the US, and make sure the contract names the licence.
Frequently Asked Questions
How do I protect client photos online in 2026?
Protect client photos with a unique password per gallery, a separate download PIN or downloads switched off until payment, a watermark on proofs, copyright metadata in every export, an expiry on proofing rounds, and a written takedown routine.
Framekit includes the password, PIN, watermarking and expiry on every plan, including free. No setting stops screenshots, so the goal is friction and traceability.
Does a watermark stop clients downloading my photos on Framekit?
No. A Framekit watermark marks the photos as clients see them in the gallery, and every download delivers the clean full-resolution original.
To stop downloads before payment, switch downloads off for that gallery or hold back the download PIN until the invoice is paid. Watermarks apply to photos only; videos are never watermarked.
What is the difference between a gallery password and a download PIN?
A gallery password controls who can open the gallery; a download PIN controls who can save files from it.
With both, a couple can forward the link and password to guests who browse and favourite while only the couple, holding the PIN, downloads. Framekit offers both as separate codes on every plan, and logs which downloads used the PIN.
Can I give clients a smaller download and keep the full-resolution file back?
Not on Framekit, where every download, single photo, favourites list or full ZIP, delivers the full-resolution original and there is no reduced-size option.
If you want clients to have screen-sized files only, export them at that size before upload, or switch downloads off and deliver the high-resolution set later.
Does disabling right-click protect photos?
No. Browsers can save images through developer tools, the share menu, drag and drop or a screenshot, so blocking right-click stops nobody determined and frustrates clients.
The same minute is better spent setting a download PIN, which changes what a forwarded link can actually do.
How do I stop wedding guests downloading the whole gallery?
Set a download PIN and give it only to the couple. Guests with the link and password can still view and favourite photos and watch any films, but every download asks for the PIN. On Framekit the PIN is on every plan, and changing it takes effect on the next download request.
Should I register copyright in my client photos?
Register commercially valuable work if you are in the United States, because registration unlocks statutory damages and legal fees. The U.S.
Copyright Office fee schedule lists $55 for a group registration of published or unpublished photographs, so a whole shoot can be one filing.
Elsewhere, copyright arises automatically, and dated originals plus embedded metadata are your evidence.
What should I do if a company uses my photo without permission?
Document the use with the URL and date first, then send an invoice at your standard licensing rate for that use, attaching the original and its metadata as evidence. Most commercial misuse is careless and resolves at the invoice.
If it is ignored, file a copyright complaint with the hosting platform, and take legal advice only when the work is registered and the use is substantial.
Which client gallery platform has the best photo protection?
Framekit has the full core set, password, separate download PIN, watermark and expiry, on its free plan. Pic-Time offers the most granular control, with access and download permissions by user type and an AI Watermark Protector.
SmugMug's full set needs its $444-a-year Pro plan, and Dropbox's password links need Standard. Pixieset offers a gallery password, a download PIN and watermarks, and ShootProof lists download controls and watermarks on every plan.
Is Framekit or Pic-Time better for protecting client galleries?
Pic-Time is better if you need different rights for different people, because it sets access and download permissions by user type: clients, guests and vendors.
Framekit is better if you want every protection control on a free plan, on your own domain, with a download log that records the PIN used, but it applies one set of rules to everyone with the link.
Can someone download a video from a protected gallery?
Only with the download PIN, or not at all if downloads are off. Framekit never watermarks videos, so the PIN and the downloads switch are the only protections on a film; anyone with the link and password can still watch it. A downloaded video is the original file you uploaded.
Final Verdict
Protect client photos in layers: a unique password per gallery, a download PIN or downloads off, a watermark on proofs, your name in every file's metadata, an expiry on proofing rounds, two clauses in the contract and a takedown routine you can run in an afternoon.
Then test it from outside, because the usual failure is a control you thought was on.
Framekit is the strongest choice for photographers who want that whole set on a free plan, on a gallery that lives at /client/ on their own site, with a download log that shows who took what and with which PIN.
Where Framekit loses: it does not offer per-person permissions, a reduced-size download, video watermarks or forensic watermarking, so studios that need different rights for couples, guests and vendors are better served by Pic-Time, and no gallery anywhere stops a screenshot.
Related readinghow to password protect a client gallery, the best password-protected photo sharing tools, how to deliver photos to clients, what a client gallery is, and Framekit vs Pic-Time.
