Microsoft aims to prevent screenshot leaks, focusing on one Edge tab at a time.

      Sensitive PDFs are being provided with screenshot protection, exclusively in Microsoft Edge

      Microsoft aims to enhance the privacy safeguards for your sensitive PDFs by addressing a significant vulnerability in its document protection framework. This also offers businesses another incentive to maintain Microsoft Edge as their primary browser.

      Starting next month, OneDrive and SharePoint will prevent screen captures when users open specific sensitivity-labeled PDFs via their web viewers in Microsoft Edge. This measure specifically targets enterprise organizations that utilize Microsoft Purview Information Protection, not regular personal OneDrive accounts.

      Regular PDFs will function as before.

      The protection is applicable solely to PDFs that carry a sensitivity label and do not include the Copy, also referred to as EXTRACT, permission. When these criteria are fulfilled, screen capture enforcement will automatically engage when the document is accessed in Edge. Existing labels and organizational policies will remain effective.

      Microsoft

      Files without labels and those with labels that lack these restrictions will continue to operate normally. The feature affects OneDrive for Business and SharePoint Online, meaning you won't lose the ability to screenshot, for instance, a restaurant menu or an instruction manual. The company mentioned that this adjustment seeks to bridge the gap between its desktop applications and browser experience.

      Purview labels have already been capable of preventing actions like editing, printing, copying, and taking screenshots in supported desktop applications. However, PDFs opened in the browser did not consistently adhere to the same screen-capture controls. Administrators can also turn off local downloads, which stops users from simply saving a protected document and reopening it elsewhere.

      Currently, the protection is limited to Edge.

      Digital Trends

      Chrome, Firefox, Safari, and other mobile web browsers will not implement this restriction upon its general availability. Microsoft cautions that users who open protected documents outside Edge might encounter inconsistent enforcement and advises businesses to employ Conditional Access or browser-management policies to guide employees toward Edge.

      At this time, this feature is exclusive to Microsoft Edge. The security advantage is clear, especially for firms sharing sensitive documents such as financial records, legal materials, or unreleased products. Its effectiveness, however, depends largely on persuading, or requiring, all parties involved to utilize Microsoft’s browser.

      Windows Latest reports that support for additional browsers and mobile applications might be introduced in the future. Microsoft’s current notice does not specify a broader rollout date, but targeted organizations are expected to start receiving the feature in early August, followed by a global general rollout from mid to late August.