Can you track who opens a PDF?
Short answer: not if you emailed it as an attachment. A PDF sitting on somebody's laptop has no way to tell you anything, and nothing you can put inside the file reliably changes that.
You can get a genuine record of opens — but only by changing what you send, not by changing the file. Here is what each method actually reports, and where each one goes quiet.
The methods, and what each one really tells you
Email read receipts
A read receipt tells you the recipient opened the email, if they choose to allow it. Most mail clients ask the reader whether to send one, and most readers say no. It says nothing about the attachment. Useful as a courtesy signal, worthless as a record.
Tracking pixels inside the PDF
A remote image embedded in the document is supposed to fire when the page renders. In practice Acrobat, Preview and most mail clients block remote content by default or prompt before loading it. The result is the worst kind of data: silence that you cannot interpret. A pixel that never fires might mean the document was never opened, or it might mean it was read twice by someone with default settings. You cannot tell the difference, so you cannot act on it.
Cloud drive link analytics
A better signal, because the file stays on your side and the request comes to your server. The limits are that anyone with the link may be counted rather than a named person, and that analytics usually stop at the moment of download — which is exactly the moment the document leaves your control and starts its second life.
Controlled access with access records
If the document is opened through a viewer that holds the key, every open is a request you can record against a named, authorised recipient. This is the only one of the four that reliably answers "who opened this, and when", because the document cannot be read at all without asking.
What access records are actually good for
Most people ask this question wanting one of three things, and it is worth knowing which.
- Confirming delivery. Did the candidate actually receive the study guide? Did the member open the standard they paid for? A record answers this without an awkward email.
- Reconciling distribution against entitlement. Fifty people were enrolled; the document was opened by fifty-eight. That gap is the useful signal, and it is invisible with attachments.
- Evidence after a leak. When a document surfaces where it should not, the combination of the recipient watermark on the copy and the access record behind it turns "somebody leaked this" into a specific answer.
What access records are not is a productivity tool for measuring how long somebody looked at a page. If that is what you are after, you want analytics, and you should say so out loud to the people being measured.
What is not recorded, and cannot be
Being precise here matters more than the feature list, because this is where most vendors get vague.
- A screen photograph produces no record. Nothing on the device reports a phone camera. What you have instead is the watermark in the photograph, which names the reader it was issued to.
- An offline copy stops reporting. Any content cached for offline reading is, by definition, being read without contacting anything. Offline access and complete access records are in tension; you choose which you want per document.
- Reading time is not proof of reading. A document can be open in a background tab. Treat an open as an open.
- A shared credential looks like one person. If two people use one login, the record shows one reader. Device authorization limits how far that goes, but nothing turns a shared password into two identities.
Where MyPass DRM fits
Access records are a confirmed, shipped part of MyPass DRM, on every plan including the free one. Documents are delivered as controlled access rather than files, so each open is recorded against the recipient it was issued to. It pairs with recipient watermarking — the record tells you an open happened, the watermark travels with the copy if it leaves — and both are readable through the public REST API if you want the events inside your own system.
The honest limit stated once more: this records access, not behaviour, and no product on the market records a phone camera. See our security overview for the full picture, and what document DRM costs if you are comparing platforms.
Common questions
Not a plain PDF attachment — once it lands in an inbox nothing reports back. You can track opens if you send controlled access instead of a file: the document is opened through a viewer that records who opened it and when. Tracking pixels embedded in a PDF are unreliable because most readers block remote content by default.
With an ordinary attachment, no. With a read receipt, only if you agree to send one. With a tracking pixel, only if your reader loads remote images. With a document delivered as controlled access, yes — the open is recorded, and that is usually disclosed on the document itself.
Inconsistently, which makes them worse than useless for decisions. A pixel only fires if the reader application fetches remote content, and Acrobat, Preview and most mail clients block that by default or prompt the user. A silent pixel tells you nothing: you cannot distinguish "not read" from "read with remote content blocked".
In MyPass DRM: which document, which authorised recipient, and when it was opened. That is what access records are for — showing that a document was accessed, by whom, and when, so distribution can be reconciled against who was entitled to it.
Recording access to a document you own, by people you have deliberately granted access to, is ordinary business practice — but the rules depend on your jurisdiction and on whether the recipients are employees, customers or the public. Disclose it, which is easy when the document carries the reader's own name on the page. This is general information, not legal advice; check your obligations with a lawyer.