How to Stop Image Theft on Your WordPress Site
Image theft on WordPress takes several forms: scraper bots downloading your product photos for competitor listings, bloggers right-clicking and republishing your graphics, and hotlinking — where other sites embed your images directly from your server, consuming your bandwidth while delivering your content on their pages. Each has a different solution, and a complete protection strategy addresses all three.
Threat 1: Direct Download (Scraping)
Scrapers are automated programs that download every image from a website systematically. They don’t respect robots.txt for images and don’t need to simulate a browser — they just fetch the URLs directly. The downloaded images are often used in competitor product listings, foreign ecommerce sites, or stock photo aggregators.
Best defence: Watermarking. A watermark doesn’t prevent the download, but it makes the stolen image useless for a competitor’s product listing and provides clear attribution if you need to file a takedown request. A visible domain name in the watermark also provides passive advertising when the image circulates online.
Threat 2: Right-Click Save
The most casual form of image theft. A visitor right-clicks your image and saves it to their computer.
Partial defence: Right-click disable via JavaScript. WordPress plugins can add a script that intercepts right-click events on images and suppresses the context menu. This stops casual copying but is trivially bypassed by anyone who opens browser developer tools or disables JavaScript.
Real defence: Watermarking again. Even if someone saves the file, the watermark follows it. For high-value images where attribution matters, a visible watermark is the practical answer.
Threat 3: Hotlinking
Hotlinking is when another website includes your image using its full URL on your server — <img src="https://yoursite.com/uploads/image.jpg">. Your server delivers the image, your bandwidth is consumed, and you receive no benefit. On a high-traffic site, aggressive hotlinking can noticeably impact hosting costs and page load times for your own visitors.
Best defence: Hotlink protection via .htaccess (Apache) or nginx config. This blocks requests for your image files where the HTTP Referer header is not your domain. Legitimate visitors viewing images on your site are unaffected. Other sites attempting to embed your images get a broken image or a redirect to an alternative image of your choice.
Apache .htaccess hotlink protection example:
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https://(www.)?yoursite.com [NC]
RewriteRule .(jpg|jpeg|png|gif|webp|svg)$ - [F,NC,L]Replace yoursite.com with your actual domain. The [F] flag returns a 403 Forbidden response. You can also redirect to a specific image (e.g., a “Hotlinking not permitted” graphic) by replacing - with the URL of that image.
Threat 4: Screenshot Capture
No technical measure prevents a screenshot. High-resolution displays and screenshots can capture an image at near-original quality even if right-click is disabled and the direct URL is protected. For images where this level of protection matters (premium stock photography, paid preview content), a low-resolution preview is the only practical answer — show enough to communicate value, not enough to be useful without purchasing.
Practical Protection Stack for WordPress
Layer these measures based on the value and type of your content:
- Watermarking (automatic) — covers scraping, casual saving, and image circulation. Apply to all images worth protecting.
- Hotlink protection (.htaccess) — prevents bandwidth theft. Apply to all sites experiencing noticeable external embedding.
- Low-resolution previews — for premium content where the image itself is the product.
- Right-click disable — optional, stops the most casual cases, doesn’t deter anyone with intent.
Watermarking provides the broadest coverage for the least effort. Every other measure is additive.
Plugin used in this tutorial
WP Watermark Images
The best watermarks plugin for WordPress. Add image and text watermarks on your images with full control over…
