Help Center/ Data Security Center/ User Guide/ Security Management/ Data Watermarking/ Injecting or Extracting Document Watermarks
Updated on 2026-07-27 GMT+08:00
View PDF
Share

Injecting or Extracting Document Watermarks

Document watermarking protects corporate copyright and prevents data leaks. On the DSC console, you can inject and extract watermarks for PDF, PPT, Word, and Excel files. This feature supports both local files and cloud files stored in OBS buckets.

Documents support both visible and invisible watermarks.

  • If a visible watermark is embedded, you can directly view the watermark information on the document to locate the person who leaked it.
  • If an invisible watermark is embedded, you cannot see the watermark information with the naked eye. You must use a watermark tool to extract it. On the DSC console, you can extract watermarks from PDF, PPT, Word, and Excel files from files stored in OBS buckets or local files.

Support for Different Document Types

DOCX, PPTX, XLSX, and PDF are supported.

  • Visible watermarks mitigate screenshot risks and persist across format conversions, allowing immediate visual verification without an extraction tool.
  • Invisible watermarks integrate metadata directly into document properties to detect tampering (additions, deletions, or modifications) within the native format. Note that invisible watermarks are lost during format conversion.

File Type

Visible watermark

Invisible watermark

DOCX

Supported

Supported

PPTX

Supported

Supported

XLSX

Supported

Supported

PDF

Supported

Supported

Prerequisites

Constraints

  • For details about how to dynamically embed watermarks into data and images, see the Data Security Center (DSC) API Reference.
  • If you injected an invisible watermark, extract the watermark from the target file using tools. For details, see Extracting Watermarks from an OBS Bucket Document and Extracting Watermarks from Local Files.
  • The file size cannot exceed 20 MB.
  • For XLSX files, if a cell containing a visible watermark is filled with other data, the watermark in that cell will be overwritten.

Video Tutorial

Injecting or Extracting Document Watermarks

To inject data watermarks to or extract them from a document, perform the following operations.

  1. Log in to the DSC console.
  2. Click in the upper left corner and select a region or project.
  3. In the navigation pane on the left, choose Security Management > Data Watermarking.
  4. On the Document Watermarking tab page, click the OBS Bucket File tab. The Inject Watermark sub-tab is displayed.
  5. Click Create Task in the upper left corner of the task list and set parameters by referring to Table 1.

    Table 1 Task parameters

    Parameter

    Description

    Task Name

    Enter the watermark ingestion task name. The value can contain only letters, digits, underscores (_), and hyphens (-), and cannot exceed 255 characters.

    Select File

    Click Add File. In the right pane, select the name of the bucket to which you want to add a watermark. In the left pane, select a file. You can select multiple files.

    Watermark Type

    Both visible and invisible watermarks are supported. You can select multiple values.

    Target Path

    Click selecting a file path, and select the watermarked file.

    Configure Visible Watermark

    Set Watermark Type to Visible Watermark. Then, enter the watermark content, and set Sparseness, Text, Font Size, Font Angle, and Transparency.

    Configure Invisible Watermark

    This parameter is mandatory when Watermark Type is set to Invisible.

    Set Text as required.
    Figure 1 Inserting Watermarks

  6. Click OK. A message is displayed in the upper right corner, indicating that the watermark injection task is created successfully.
  7. In the watermark task list, click the task name to view the task running status.

    • Running: You can view the progress of the watermark ingestion task.
    • Finished: You can click Download in the Operation column to download the watermarked OBS bucket file.
    • Failed: The watermark injection task fails to be executed. You can move the cursor to to view the failure cause.

  8. If the injected watermark is a visible watermark, click Download to obtain the watermark file.

    If you injected an invisible watermark, extract the watermark from the target document using tools. For details, see Extracting Watermarks from an OBS Bucket Document and Extracting Watermarks from Local Files.

  1. Log in to the DSC console.
  2. Click in the upper left corner and select a region or project.
  3. In the navigation pane on the left, choose Security Management > Data Watermarking.
  4. On the Document Watermarking tab page, click the Local tab. The Inject Watermark sub-tab is displayed.
  5. Click Select File, and select the file to which the watermark is to be injected.
  6. After the file is uploaded, configure related parameters. Table 2 describes the related parameters.

    Table 2 Watermarking parameters

    Parameter

    Description

    Watermark Type

    Both visible and invisible watermarks are supported. You can select multiple values.

    Configure Visible Watermark

    Set Watermark Type to Visible Watermark. Then, enter the watermark content, and set Sparseness, Text, Font Size, Font Angle, and Transparency.

    Configure Invisible Watermark

    This parameter is mandatory when Watermark Type is set to Invisible.

    Set Text as required.
    Figure 2 Creating a Local File Data Injection Task

  7. After parameters are configured, click OK. The file with watermark injected is automatically downloaded to the specified path on the local PC.

  1. Log in to the DSC console.
  2. Click in the upper left corner and select a region or project.
  3. In the navigation pane on the left, choose Security Management > Data Watermarking.
  4. On the Document Watermarking tab page, click the OBS Bucket File tab. The Inject Watermark sub-tab is displayed.
  5. Click the Watermark Extraction tab. The Watermark Extraction page is displayed.
  6. Click Create Task in the upper left corner. The Create Task page is displayed.
  7. Click Upload File to select the file from which you want to extract watermarks. You can select multiple OBS bucket files.
  8. Click OK. The watermark extraction task is created.
  9. Click the target task name. In the page displayed on the right, view the watermark extraction task status and the invisible watermark content of the OBS bucket file.

    • Running: You can view the progress of the watermark extraction task.
    • Completed: The watermark content is displayed in the Invisible Watermarks column. If there are no invisible watermarks, -- is displayed.
    • Failed: The watermark extraction task fails to be executed. You can move the cursor to to view the failure cause.

  1. Log in to the DSC console.
  2. Click in the upper left corner and select a region or project.
  3. In the navigation pane on the left, choose Security Management > Data Watermarking.
  4. On the Document Watermarking tab page, click the Local tab. The Inject Watermark sub-tab is displayed.
  5. Click the Extract Watermark sub-tab.
  6. Click Upload File to upload a local file for invisible watermark extraction.

    Only PDF, PPT, Word, and Excel documents are supported.

  7. After the file is uploaded, click OK. The invisible watermark content is displayed in the dialog box.
Parent Topic: Data Watermarking