Display watermark on certain webpages

Applies to managed ChromeOS devices and Chrome browsers on Windows, Mac, and Linux.

As an admin, you can display a watermark with your own customized text that appears as a translucent watermark on webpages that match the data protection rules that you set.

What you need

• Chrome Enterprise Premium license
• Chrome browser version 127 or later

Create data protection rule

1. Sign in with a super administrator account to the Google Admin console.

   If you aren’t using a super administrator account, you can’t complete these steps.

2. Go to Menu  Rules.
3. On the Rules page, click Create rule.
4. From the drop-down menu, select Data protection.
5. For Name, type a name and description for the rule.
6. For Scope, select the org units and/or groups this rule applies to.
7. Click Continue.
8. For Apps, select the apps you want to protect data in. Under Chrome, check URL visited.
9. Click Continue.
10. For Conditions, define data that you want this rule to scan for. Choose what type of content to scan—URL or URL category, as well as what to scan for.
11. For Context conditions, set the access level for your rule. For details about access levels, including how to create new ones, go to Combine Data Loss Prevention rules with Context-Aware access conditions.
12. For Actions, choose an option:
    • Allow with warning—Adding a watermark is optional. You can check and uncheck the Add watermark over page content box, as needed.
    • Audit only—Adding a watermark is required. You can’t uncheck the Add watermark over page content box.
13. If you selected Allow with warning, check the Add watermark over page content box.
14. (Optional) Check the Customize watermark message box. Enter the text to appear as translucent watermark text overlaying page content in Chrome. Left blank, the default Confidential is shown on the webpage.
    Note: Default and customized messages display the device/user id and timestamp, UTC time zone.
15. For Alerting, select the security level—Low, Medium, or High.
16. (Optional) To report events in the alert center where you can view notifications about potential issues and take action to resolve them, check the Send to alert center box. If you want to receive email notifications, add recipients during this step.
17. Click Continue.
18. Review the criteria for your rule.
19. Click Create.

Customize watermark appearance

As an admin, you can use the Admin console to adjust the watermark’s font size and opacity.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to  Menu  Devices > Chrome > Settings. The User & browser settings page opens by default.

   Requires having the Mobile Device Management administrator privilege.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browser > Settings.

3. (Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how 

   Group settings override organizational units. Learn more

4. Go to Data controls.
5. Click Custom watermark appearance.
6. Configure the watermark settings. Read about the Custom watermark appearance setting.
   • Font Size—Default is 24. Sets the size in points.
   • White outline opacity—Default is 6. Percentage, 0 (fully transparent) to 100 (fully opaque).
   • Dark fill opacity—Default is 4. Percentage, 0 (fully transparent) to 100 (fully opaque).
7. Click Save. Or, you might click Override for an organizational unit .

   To later restore the inherited value, click Inherit (or Unset for a group).

Settings typically take effect in minutes, but can take up to 24 hours to apply for everyone.

Related topics

• Create and manage rules