Makmal PayVia

Canary Doc

Generate a real .docx file that quietly reports back the moment it is opened, no account or macro required from the person opening it.

Name the document

Give it a title, like a real confidential file would have.

Download & distribute

Send it wherever you'd normally send a document you want to track.

Watch your private log

When it's opened in Word, a new entry appears on your private page below.

Create a canary doc

You'll get a .docx to download, and a private page where you can add more recipient-specific copies and view any triggers.

How it works, honestly: Two mechanisms, one reliable and one not. (1) Every copy is watermarked in the visible text — "Prepared exclusively for: X" — which survives forwarding, screenshots, and printing. If a copy ever surfaces somewhere it shouldn't, the watermark tells you whose copy it was. (2) The document also carries a hidden field that references an image on payvia.my — in current Word, this normally requires the recipient to update fields manually and approve a security prompt, so treat it as a rare bonus signal, not something to count on. Neither mechanism stops someone from sharing the file — nothing free can. This is the same idea as a "canary token": a well-known technique for detecting and tracing leaks, used defensively by security teams. Use it only on documents you have the right to track.

Dibuat oleh PayVia

We build simple payment tools for small Malaysian businesses. This one's a security experiment.