The short answer: share web-quality, watermarked previews in a PIN-protected gallery; send the link and PIN in separate messages; keep full-resolution files unreachable until payment; and make sure you can change access and end sessions instantly if something leaks.
Wedding photos are personal and, for your studio, valuable work. Yet many galleries are shared through open links that get forwarded to entire family groups. Here is a practical approach to sharing securely without making life hard for clients.
Why security matters
Two risks matter most. The first is privacy: a family's wedding photos reaching people they never intended, sometimes beyond relatives. The second is business: full-resolution finals being taken before the balance is paid. Good practice addresses both.
Step 1: Share previews, not originals
For selection, families don't need 30 MB files. Web-quality previews of a few hundred kilobytes are enough to judge expressions and moments, load faster on mobile data, and are far less useful if copied. Pikvaa shows only web-quality previews of around 0.4 MB in galleries; full-quality files are never reachable through a gallery or share link before release.
Step 2: Watermark sensibly
A watermark should be visible enough to discourage use as a final, but not so heavy it ruins selection. A semi-transparent studio name across the lower third works for most. Apply watermarks on the server so the clean image is never sent to the browser. In Pikvaa the watermark is on by default, added on the server, and can be turned off per event; changing it reprocesses previews.
Be realistic: no tool can stop someone photographing a screen or taking a screenshot. Blocking right-click and long-press saving discourages casual copying, but avoid promising clients that screenshots are impossible.
Step 3: Protect access with a PIN
A short numeric PIN is easy for families but adds a real barrier. Check that your gallery locks after repeated wrong attempts to stop guessing. Pikvaa uses a 6-digit Client PIN with a 15-minute lockout after five wrong tries.
Step 4: Send link and PIN separately
If the link and PIN are in one WhatsApp message, forwarding that message opens the gallery for anyone. Send them as two messages. It's a small habit with a big effect.
Step 5: Give view-only access where appropriate
Not everyone who wants to see photos should be able to change the album list or download files. Use view-only sharing for wider family. In Pikvaa, clients can create up to 10 share galleries per event with view-only PINs, and the studio can disable all of them in one tap.
Step 6: Be able to revoke instantly
If a PIN spreads too far, you should be able to change it and end every session using the old one immediately. The same applies to staff: when someone leaves, their access should end on every device. Pikvaa's PIN change, staff removal and re-lock end sessions and active downloads immediately.
Step 7: Release finals deliberately
Release full-quality downloads when the job is complete and paid. Limit how many complete downloads are allowed, so files aren't endlessly re-downloaded and redistributed. Pikvaa allows up to five completed downloads per event through a controlled gateway; failed or resumed downloads don't count.
Step 8: Plan for the end
Security includes deletion. Tell clients how long the gallery will be available and encourage them to keep their own copy after download. Pikvaa shows every date upfront: gallery access end, storage expiry, then a 30-day archive and 7-day recovery bin before permanent deletion.
A quick checklist
- Previews only, watermarked on the server.
- PIN-protected gallery with lockout.
- Link and PIN in separate messages.
- View-only sharing for wider family.
- Instant revocation for PINs and staff.
- Payment-linked, limited final downloads.
- Clear expiry and deletion dates.
See how online gallery delivery and storage and protection work in Pikvaa.