Stop Image Harvesters From Downloading All Your Images

News flash: not everyone thinks they should have to pay to use the great images you have on your website. And to make it easier for them to grab your work there are tools that download all the images on a website at a click of a button.

These scraping tools crawl your site and download every image that renders in the browser: logos, thumbnails, full-size portfolio images, slideshow images — everything. Browser developer tools make it trivially easy too. There is no way to completely prevent someone from saving an image that their browser has displayed. But you can make it much harder and much less worthwhile.

Watermark your archive images

This remains the single most effective protection. A watermark embedded in the image itself — not overlaid by the browser — survives any download method. If someone grabs your watermarked image, it’s unusable for publication. That’s the point.

For archive images, place the watermark across the middle of the image. For portfolio images where the viewing experience matters more, a small corner copyright notice is a reasonable compromise. Neither is perfect, but a watermarked download is a worthless download.

More on this in my post on protecting archive images with a watermark.

Use Cloudflare’s hotlink protection

If your site is behind Cloudflare — and it should be — enable hotlink protection. This prevents other websites from embedding your images directly, which is one of the most common forms of image theft. It won’t stop someone from downloading an image to their own server, but it blocks the lazy approach of linking directly to your files.

Disable right-click? Don’t bother

Disabling right-click is a mild deterrent at best. Anyone who knows how to open browser developer tools — which is anyone who wants your images badly enough — will bypass it instantly. It also annoys legitimate visitors. Not worth the trade-off.

Serve appropriately sized images

Don’t serve larger images than you need to. If your layout displays an image at 1200 pixels wide, don’t upload the 6000-pixel original. Serve a version sized for the screen. A scraped 1200-pixel image is far less valuable than a full-resolution file. Modern responsive image techniques (srcset) let you serve different sizes to different devices automatically.

Monitor for stolen images

Google reverse image search and tools like TinEye let you find where your images appear online. It’s worth checking periodically. If you find unauthorized use, a DMCA takedown notice is your most practical recourse — most platforms and hosts are legally required to act on them.

The uncomfortable truth

You cannot fully prevent image theft on the web. If a browser can display it, a human can capture it. The goal isn’t perfection — it’s making theft inconvenient enough that most people won’t bother, and ensuring that when they do, the image they get is either watermarked, too small to be useful, or traceable back to you.