How to Protect Course Materials From Theft, Leaks, and Counterfeiting (2026)

Last updated: June 2026

I'm Deqian Jia, co-founder of Peony, a data room company used by 4,300+ teams. When we designed Peony's security stack, the watermarking system was the feature I spent the most time on personally — not because it is the hardest engineering, but because protecting content you have to distribute is a genuinely hard problem, and the teams who feel it most acutely turned out to be in education.

Tutoring centres, test-prep academies, online course creators, and corporate trainers all live the same nightmare: your worksheets, exam banks, and course videos are the business, and the moment you share them with a student or a teacher, you have handed someone the ability to copy them. A former teacher reopens down the street with your curriculum. A paid course shows up for resale on Telegram. An exam bank you spent years building circulates in a group chat. This guide is how to make that stop — and, when it does happen, how to know exactly who did it.

Quick answer: To protect course materials you distribute, keep them inside a controlled viewing environment rather than handing out files. Five layers do the work: gate access by student email (a verified roster, not a public link), lock to view-only (downloading and printing disabled), block screenshots on desktop, burn a unique per-viewer code into every page so any leaked or counterfeit copy traces back to one account, and revoke access in one click when someone leaves. On Peony, all five are on the Business plan at $40/admin/month — unlimited rooms, unlimited students, one flat fee.

---

Why do teaching materials leak — and what does it actually cost you?

Materials leak through three doors, and most centres only guard one of them.

The first is students — screenshotting worksheets, saving PDFs, screen-recording videos, and sharing them in group chats or with friends who never paid. The second is staff — a teacher who downloads the curriculum "to prepare at home" and keeps it, or who leaves and takes the whole library to a competitor. The third, and the one that hurts most, is counterfeit resale — your paid course or exam bank repackaged and sold on a messaging app or marketplace, often for a fraction of your price.

What ties all three together is a single root cause: you distributed a copy you no longer control. A file emailed, downloaded, or dropped in a shared Drive is a permanent, untraceable, un-revocable copy. The fix is not a better file — it is to stop distributing files at all, and instead give people supervised access to content that stays in your control.

The cost of getting this wrong is rarely a rounding error. A leaked exam bank can erase the differentiation you charge a premium for. A teacher who reopens with your curriculum can take a chunk of your enrolment with them. For a content business, your library is the asset — and an asset you cannot protect is an asset you are slowly giving away.

How do I stop students and staff from screenshotting or downloading my materials?

Keep the materials in a controlled viewing environment and remove the easy copy paths. In a data room, you upload your content once and share access — not files — so there is nothing to download, forward, or keep after access ends. Three controls do the heavy lifting:

• Disable downloading and printing. Materials render in the browser and never reach a local device. This alone defeats the most common leak: "I'll just save it for later."
• Screenshot protection. Peony blocks screen-capture shortcuts, screen-recording tools, and capture extensions on desktop, and logs every attempt with the viewer's identity. It works across Chrome, Edge, Safari, and Firefox.
• View-only permissions per person. Each teacher or student sees only the materials they need, not the whole library.

Be honest about the limit: screenshot blocking is reliable on desktop, but on mobile, OS-level constraints make hard blocking unreliable — and no browser-based tool can stop a separate phone camera. That is not a reason to skip protection; it is the reason the next layer exists.

How do I trace a leaked or counterfeit copy back to the exact person?

This is the layer that changes the game, and it is where most "content protection" tools stop short. Peony's dynamic watermark burns each viewer's identity into every page — including a unique per-viewer code (an 8-digit CID) that maps back to their email — and that mapping is exportable as a CSV for your records.

So when a worksheet surfaces for sale online, or a screenshot of your exam paper lands in a rival's hands, you do not shrug and guess. You read the code off the leaked copy, cross-reference it against your roster, and you have the exact account it came from. Combined with leak-protection alerts and an immutable audit trail of who opened which file and when, you move from "someone leaked our materials" to a named person in minutes.

There is a principle underneath this that I think every content business should internalize — call it the Forensic-Watermark Deterrence Inversion: the strongest anti-leak control is not the one that blocks copying, it is the one that makes copying attributable. Screen-record blocking can be defeated by a phone pointed at a monitor; a per-viewer code burned into the pixels cannot, because it travels with the image. When perfect prevention is impossible — and for anything a human can see, it is — forensic attribution wins. The deterrent stops being "you can't copy this" and becomes "if you copy this, we will know it was you," which is the message that actually changes behaviour.

How do I gate access by student email without managing hundreds of logins?

Gate by email, not by password. You create one access link per class or cohort with email verification turned on, then import your student or teacher roster as a CSV. Only the emails on your list can get in; everyone else is blocked. When students enrol or leave, you re-import the CSV and access updates instantly across all your materials — no per-student passwords to issue, rotate, or chase.

This quietly solves two problems at once. First, there is no public link to leak — a forwarded link is useless to anyone not on your roster. Second, because every viewer is a verified identity, every page they open is stamped with their name and code — which is what makes the forensic layer above actually work. For a centre with hundreds of students across several branches, managing access stops being a spreadsheet of logins and becomes a couple of roster uploads. (Under the hood this uses identity-bound access, the same mechanism deal teams use to control who sees sensitive documents.)

Can I run a separate room for each class or branch on one affordable account?

Yes — and the pricing model here is a bigger deal for education than people expect. Peony Business is $40 per admin per month, and it includes unlimited data rooms and unlimited free viewers, with no per-student, per-room, per-document, or per-view fees.

That means you can spin up a separate room for every class, branch, or cohort — each with its own materials, its own roster, its own watermark identity — and the price does not move whether you have 50 students or 5,000. One admin seat covers your entire library. For a multi-branch tutorial centre, this is the difference between a tool that taxes you for growth and one that does not: a per-seat LMS gets more expensive with every student you enrol, while a flat per-admin fee lets you protect the whole organisation for the price of one seat. Enterprise DLP systems marketed to schools typically charge $5,000–$15,000 a year for comparable controls; this is the same protection at a flat $40 per admin per month, used by 4,300+ teams across education and beyond.

What happens when a teacher walks off with your whole curriculum?

This is the fear I hear most from centre owners, and it is the one a controlled environment is built to neutralise. In Peony, a teacher never holds your curriculum — they have view-only access to only the materials they teach, downloading and printing disabled, every page watermarked with their identity, screenshots blocked.

The moment they give notice, you revoke their access with one click — and because nothing was ever downloaded, there is no copy sitting on their laptop to worry about. If anything they viewed later turns up at a competitor, the per-viewer code names the exact person, and the audit trail shows precisely which files they opened and when. You can also require an NDA before access and set link expiry to match a contract term, so access ends on schedule automatically. The shift is from "every teacher has a copy of everything" to "every teacher has supervised, traceable, revocable access to only their materials" — which is a completely different risk profile.

Google Drive, Google Classroom, an LMS, or a data room — which protects course content best?

Each tool is good at what it was built for; only one is built for control of distributed content. Honest comparison:

The takeaway: Google Drive and Google Classroom are collaboration tools, not content-protection tools — no watermarking, no screenshot blocking, no leak tracing, and a download is a permanent uncontrolled copy. Course platforms are built to sell and deliver courses, with basic video-download protection but no per-document forensic watermark or document-level screenshot control. A data room is the tool purpose-built to keep distributed content under control. Many education businesses run both — a course platform to sell, Peony to protect the high-value source materials behind it.

How much does it cost to protect course materials — and what do you lose if you don't?

The protection side is simple and flat: $40 per admin per month, unlimited rooms, unlimited students, every control included on the Business plan. A three-branch centre protecting its entire library pays for one admin seat. There is no per-student meter, so your security cost does not grow as you do — unlike per-seat LMS pricing, and unlike the $5,000–$15,000-a-year enterprise DLP tools sold into education.

The cost of not protecting it is the number that should drive the decision. One leaked exam bank can wipe out the premium you charge. One former teacher reopening with your curriculum can take real enrolment with them. One pirated course on a marketplace can undercut your pricing for a whole cohort. Against losses like those, flat-fee forensic protection is not an expense — it is the cheapest insurance you will buy all year.

Frequently asked questions

How do I stop students and staff from screenshotting or downloading my course materials?

Keep materials inside a controlled viewing environment instead of handing out files. On Peony Business ($40/admin/month), upload your content to a data room, disable downloading and printing so nothing reaches a local device, and turn on screenshot protection, which blocks screen-capture shortcuts and recording tools on desktop and logs every attempt. Students view in the browser but cannot save a copy. Screenshot blocking is reliable on desktop; on mobile, OS limits make hard blocking unreliable, which is why every page is also stamped with the viewer's identity so a phone photo is still traceable.

How do I trace a leaked or counterfeit copy of my course back to the exact person?

Peony's dynamic watermark burns each viewer's identity into every page, including a unique per-viewer code (an 8-digit CID) mapped to their email, exportable as a CSV. If a counterfeit copy or screenshot surfaces, you cross-reference the code against your list and have the exact account it came from. This is the Forensic-Watermark Deterrence Inversion: you cannot stop someone photographing a screen, but you can make every copy carry a fingerprint, so the deterrent becomes "if you leak this, we will know it was you." With a full audit trail, you go from "no idea who" to a named account in minutes.

How do I give students access by their email without creating hundreds of logins?

Gate by email, not password. Create one access link per class or cohort with email verification on, then import your roster as a CSV — only listed emails can enter. When students enrol or leave, re-import the CSV and access updates instantly. There are no per-student passwords and no public link to leak: each student enters their own email to view, and every page is stamped with their identity. For hundreds of students across branches, this replaces login management with a few roster uploads.

Can I run a separate secure room for each class or branch on one account without paying per student?

Yes. Peony Business is $40 per admin per month with unlimited data rooms and unlimited free viewers — no per-student, per-room, per-document, or per-view fees. Spin up a separate room for each class, branch, or cohort, each with its own materials and access list, and the price is the same whether you have 50 students or 5,000. One admin seat covers your whole library — versus per-seat LMS pricing or $5,000–$15,000-a-year enterprise DLP.

Is Google Drive or Google Classroom enough to protect my teaching materials?

For internal collaboration, yes; for protecting content you distribute, no. Both were built for sharing and assignments, not control: no screenshot blocking, no per-viewer watermark, no leak tracing, and once someone has a link or download you have lost that copy. A teacher can download your whole folder in seconds, and you cannot tell which student leaked an exam paper because every copy is identical. A data room keeps content in a controlled environment where every page is watermarked per viewer, downloads can be disabled, and access can be revoked instantly.

Thinkific, Teachable, or Kajabi versus a data room — which protects course content from piracy?

They solve different problems. Course platforms host and sell courses — checkout, drip content, a student dashboard — with basic video-download protection. They are not built for per-viewer forensic watermarking, document-level screenshot protection, or tracing a specific leaked PDF to a named account. If your worry is selling a course, a course platform is right. If your worry is a teacher taking your curriculum or a course being resold, you need the forensic and access controls of a data room — and many education businesses run both.

How much does it cost to protect course materials — and what am I losing to piracy?

Peony Business is a flat $40 per admin per month — unlimited rooms and viewers, no per-student fees — so protecting 500 worksheets costs the same as 50. Compare per-seat LMS pricing or $5,000–$15,000-a-year enterprise DLP. Against that sits the real loss: a single leaked exam bank or a former teacher reopening with your curriculum can cost far more than your entire annual software budget. Flat-fee forensic protection is cheap insurance against the exposure you actually carry.

A former teacher took our whole curriculum to a competitor — how do I stop this happening again?

Stop handing teachers downloadable copies. In Peony, each teacher gets view-only access to only the materials they teach, downloading and printing disabled, every page watermarked with their identity, screenshots blocked. When they give notice, revoke access in one click — nothing is sitting on their laptop because downloading was off. If anything they viewed surfaces at a competitor, the watermark code identifies the exact person and the audit trail shows which files they opened. You move from "they had everything" to "supervised, traceable, revocable access to only their materials."

Can I stop students from screen-recording or photographing my videos with a phone?

Screen-recording software is blocked on desktop and the attempt is logged. A phone camera cannot be blocked by any browser tool — anyone claiming otherwise is overselling. What you can do is make it pointless: a per-viewer watermark burns the student's identity and a unique code into every frame, so a phone-recorded copy still leads back to the account. For video, attribution beats prevention — the deterrent is "if you copy this, we will know it was you."

Parents are sharing one login across several kids — how do I stop login sharing?

Email-gated access plus per-viewer watermarking makes sharing visible and costly. Because access is tied to verified roster emails, an account opened from many places, or far more than one student would, shows up in your audit trail and analytics. And because every page carries the account holder's identity, anything that leaks from a shared login traces back to the family that shared it. Revoke the shared account instantly and re-issue access only to paying students.

How do I revoke a student's or teacher's access the moment they leave or stop paying?

Revocation is one click and immediate. Remove the person from the access list (or re-import your roster CSV without them) and they can no longer open the room, even if they saved the link. Nothing is on a local device to recover because downloading was disabled, and link expiry can automate the cutoff for fixed-term enrolments. Compare that to a shared Drive folder, where revoking one person often means rotating a password and redistributing links to everyone else.

Does watermarking actually deter leaks, or only help after the fact?

Both, and the deterrent is the more valuable half. When a viewer sees their own name and email on every page, casual forwarding drops sharply — most leaks are low-effort, and a personalized watermark removes the anonymity that makes them feel safe. If a leak happens anyway, the per-viewer code gives forensic attribution: you match the copy to a specific account and session. A watermark that prevents the leak is worth more than an audit trail that only reconstructs it — which is why we treat watermarking as a front-line control.

---

Related reading

• Document security for schools and training centres — the education solution, set up in under 5 minutes
• Screenshot protection — how desktop screen-capture blocking works
• Dynamic watermarks and the dynamic watermarking guide — the per-viewer fingerprint in depth
• Leak protection — real-time alerts and forensic traceability
• How to recover from a leaked document — when the watermark becomes evidence

Your materials are the business. Start free on Peony and keep them yours.