How to Block Download of a Shared SharePoint File

View-only with download disabled is the highest practical control level for sensitive sharing. The recipient can read but not save, copy, or take it offline.

Reading time: 5 minutes Last updated: June 2026 Card code: P-08

What it is

When you share a file in view-only mode, by default the recipient can still download a copy. That copy escapes your control — they can save it, forward it, edit it locally, send it onward. For genuinely sensitive content, this is the loophole you want to close.

Disabling download keeps the file in the browser. The recipient can read, scroll, see the content, but they can’t save a local copy. They can’t print it (in many cases) and they can’t take screenshots without significant effort. It’s not absolute security — nothing on a screen ever is — but it’s a meaningful step up from default sharing.

This setting is found in Link settings, alongside expiry and password protection. It’s tenant-dependent, so if you don’t see it, your organisation may have it disabled. For sensitive financial, HR, or legal content, ask your IT team to enable it.

Realistic about screens

Disabling download doesn’t make a file uncopyable. Anyone determined enough can take a screenshot, photograph the screen, or transcribe the contents. What it does prevent is casual copying — drag-and-drop, save-as, forward-the-attachment. For most sensitive sharing, that’s enough. For the genuinely classified, you need different tools entirely.

When to use this

  • Sharing draft proposals or strategic documents externally.
  • Distributing reports that shouldn’t end up on local hard drives.
  • Sharing financial or HR data with reviewers.
  • Anytime you’d object to the file existing on someone’s laptop.

How to do it

  1. Select the file and click Share.
  2. Open Link settings.
  3. Choose Specific people for tightest control.
  4. Set permission to Can view.
  5. Find the Allow download toggle (or ‘Block download’) and disable it.
  6. Send the link.
  7. Confirm with the recipient that they can read but not download — useful to verify the setting worked.

Best practices

  • Combine with view-only access. Edit + no download is contradictory.
  • Use for any sensitive external sharing. If they don’t need a local copy, don’t give them one.
  • Pair with expiry dates. Time-bound + browser-only = strong basic control.
  • Communicate the constraint. Tell recipients up-front it’s view-only with no download — saves the support email later.

Common mistakes

  • Treating download blocking as absolute security. It’s a meaningful control, not a guarantee. Plan accordingly.
  • Granting download to people who only need to read. Default to disabled, enable only when needed.
  • Forgetting to enable it for sensitive content. If you’re sharing financials externally, this should always be on.
Recommended resource Share files without the fear.

The Sharing Handbook gives you the Traffic Light System for every SharePoint sharing decision. Real screenshots of the Link Settings dialog, end-user focused, no admin access required.

Get the Sharing Handbook — $27 →

FAQ

How do I stop people from downloading a SharePoint file I’ve shared?

When sharing, click Link settings. Set permission to Can view. Then tick Block download. The recipient can read the file in the browser but can’t download, save a copy, or print it. The option is only available with view-only access — editors must be able to download.

Does ‘Block download’ stop screenshots in SharePoint?

No. Block download prevents the file leaving SharePoint as a file, but it can’t prevent someone capturing the content on screen. Screenshots, screen recordings, mobile photos of the screen all still work. For genuinely confidential content where capture matters, use sensitivity labels with information rights management — that adds proper encryption.

Can I block download for a whole SharePoint library?

Yes — at the library level, use a sensitivity label or conditional access policy that blocks download for users meeting certain criteria (e.g. unmanaged devices, external users). Library-level enforcement is more reliable than per-file settings because users can’t forget to apply it.

Why is ‘Block download’ greyed out when I try to share a SharePoint file?

Two causes: the link permission is set to Edit (you can only block download on View links — editors need to download by definition); or your tenant’s sharing policy doesn’t allow block-download links. SharePoint admins control whether block-download is available; check with them if it’s missing.

Free Weekly Newsletter

Plain-English SharePoint advice. Every week.

One useful email a week. New blog posts, what's changing in Microsoft 365, and the one fix that will make your SharePoint less of a mess this Friday. No spam, no fluff — unsubscribe any time.

Join the Simply SharePoint newsletter

    Free forever  ·  Unsubscribe any time  ·  No spam, ever