As a photographer, your online portfolio is your digital storefront. It’s how you share your vision with the world, connect with clients, and showcase your hard work. However, publishing high-quality images on the web comes with an inherent risk: image theft. Whether it’s an individual saving your photos for personal use without permission, or an artificial intelligence (AI) bot scraping your work to train generative models, protecting your assets is more important than ever.
While it is technically impossible to 100% prevent a determined user from taking a screenshot, you can make it exceptionally difficult for casual downloaders and automated scrapers alike.
In this tutorial, we will explore the best ways to secure your jAlbum galleries using built-in features like watermarking and password protection, alongside advanced steps to shield your work from AI crawlers.
1. Apply Digital Watermarks
(The Visual Deterrent)
One of the most effective ways to stop people from misusing your images is to stamp your ownership directly onto them. Even if someone manages to download the image file, your branding or copyright notice remains intact.
jAlbum makes it incredibly easy to apply watermarks automatically to all scaled-down images during the album generation process.
How to add a watermark in jAlbum:
- Open your album project in the jAlbum desktop application.
- Go to Settings (or press
F4) and select the Effects tab. - Click the Text panel to add a copyright line (e.g., © 2026 Your Name Photography), or select the Logotype panel to add your custom PNG logo with a transparent background.
- Adjust the Strength (transparency), Size, and Alignment (such as a subtle corner placement or a bold tile across the image).
- Click Make Album to apply the effect to all images.
Pro Tip: Want to protect your videos too? You can apply custom watermarks to video conversions via the Settings > Videos tab using custom FFmpeg filters.
For an in-depth, step-by-step walkthrough, check out the jAlbum Effects Documentation.
Bonus: Invisible Protection via Metadata (XMP)
While watermarks act as an excellent visual deterrent, they don’t protect your image files if someone crops them out or extracts the image from your webpage. For a hidden layer of security, you can embed your ownership information directly into the image files using metadata.
jAlbum makes this completely seamless by allowing you to inject your copyright data into the standardized XMP (Extensible Metadata Platform) data of every image generated for your gallery.
How to embed copyright metadata in jAlbum:
- Open your project and go to Settings (
F4), then select the Images > Advanced tab. - Look for the Copyright embedding section.
- In the text fields, enter creator and your official copyright statement (e.g., Copyright © 2026 Your Name. All rights reserved.).
- If you have an official website or a page detailing your licensing terms, input the full web address at Copyright URL (e.g.,
https://yourdomain.com/licensing). - Then make sure Settings > Advanced > Metadata > Include xmp metadata in generated images is checked.
- Click Make Album.
When jAlbum processes your images, it will automatically embed these tags into the web-ready JPEG files. This ensures that photo-viewing applications, professional image editors, and modern search engines will always recognize you as the rightful creator.
For more details on embedding copyright, check out the jAlbum Images Settings Documentation.
2. Password Protect Your Albums
(The Access Barrier)
If you are sharing private event photos, client proofs, or premium collections, the best line of defense is ensuring only authorized users can see them.
If you use jAlbum.net hosting:
We’ve built secure, server-side password protection right into our hosting platform. It uses robust session-based encryption that is just as secure as our account sign-in mechanism.
- For the entire album: Sign in to jalbum.net, go to your profile page, hover over the album thumbnail, click Edit album, and set your password. Alternatively, you can declare a privacy password directly within the jAlbum desktop upload form.
- For specific sub-folders: If you only want to restrict parts of an album, use the Upload/Manage interface in the desktop app. Connect to the server, right-click or select the specific sub-folder, and click the Password Protection icon in the toolbar.
Read the official tutorial: Password protecting sub-folders on jAlbum.net.
If you use Independent Web Hosting:
If you host your jAlbum galleries on your own server or use some other hosting service, you can restrict access using server configuration files like .htaccess (for Apache servers). You can set up directories to prompt for a username and password before rendering any HTML or images. Ask your hosting provider on how to do it.
3. Block AI Scrapers and Bots
(The Digital Shield)
In recent years, a new challenge has emerged for creators: AI bots crawling the web to scrape imagery for generative AI training datasets without permission or compensation.
The Good News for jAlbum hosting users:
If your galleries are hosted directly on jalbum.net, you don’t have to lift a finger. Our default server-level robots.txt configuration automatically blocks the most aggressive and common AI training bots from crawling your portfolio.
How to protect your images on Custom Hosting:
If you host your galleries on your own website domain, you need to create and upload your own robots.txt file to your website’s root directory (e.g., https://yourdomain.com/robots.txt).
A robots.txt file acts as a “Keep Off the Grass” sign for automated web crawlers. To explicitly tell the major AI training bots to leave your imagery alone, create a plain text file named robots.txt and paste the following rules into it:
# Block OpenAI's training bot
User-agent: GPTBot
Disallow: /
# Block Anthropic's training bot
User-agent: ClaudeBot
Disallow: /
# Block Google's AI training crawler
User-agent: Google-Extended
Disallow: /
# Block Common Crawl (used by many open-source AI models)
User-agent: CCBot
Disallow: /
# Block Meta's AI agent
User-agent: Meta-ExternalAgent
Disallow: /⚠️ A Crucial Distinction for 2026: Search vs. Training
When configuring your bot blocks, make sure you don’t accidentally block search bots if you want your site to be found on the web. For example, blocking OpenAI’s GPTBot stops them from using your images for AI training, whereas blocking OAI-SearchBot would stop ChatGPT from showing your website as a live search result to users. Stick to blocking the training agents listed above!
4. Don’t Link to Your Originals
By default, jAlbum scales your large master photos down to web-optimized dimensions perfectly suited for monitor viewing. To ensure users can’t get their hands on your ultra-high-resolution files:
- Go to Settings > Images in the desktop application.
- Ensure that Include > Originals is unchecked.
- This ensures that even if someone extracts the image source from the web page, they are only getting a lower-resolution, web-optimized copy, not your print-ready master file.
Summary: Your Protection Checklist
| Security Need | Action Step | Where to Find It |
| Visual Ownership | Add text or graphic watermarks | Settings > Effects |
| Restricted Access | Add an album or folder password | jAlbum Profile / Upload-Manage |
| AI Anti-Scraping | Update your robots.txt file | Automatic on jAlbum hosting; manual on custom hosting |
| File Protection | Disable original file downloads | Settings > Images |
By combining web-optimized images, clear watermarks, and smart bot-blocking protocols, you can confidently share your photography with the world while keeping your creative rights locked down.
Do you have questions about securing your galleries? Head over to the jAlbum User Forum to chat with our vibrant community of web-savvy photographers!