The Unhinged Librarian

EX-001·Explainer·Cited · 6 sources

What Is DRM?

A patron asks why she can't save the ebook she borrowed from Libby. You explain it disappears when the lending period ends. She asks why. You realize you've never fully explained why. Here's the answer.

Sam Chada·2026.05.16·8 min read

Published 2026.05.16Updated 2026.09.11MethodSend a correction

In this file
  1. Where you encounter this
  2. What it actually is
  3. What this means for your library
  4. What to do with this on Monday
  5. Sources

Editorial clarification, September 11, 2026. Loan expiration is distinct from the library’s collection license. DRM enforcement varies by implementation; the earlier universal key-revocation and outage descriptions were too categorical.

A patron came to the desk confused. She'd borrowed an ebook through Libby, loved it, and wanted to keep it, or at least finish it after her loan period ended. The book disappeared from her app when the loan ran out.

You explained that borrowed ebooks work differently than purchased ones. She asked why. You said it has to do with how digital lending works. She asked what that meant. You gave her the short version. Here's the long one.

In one sentence

DRM (Digital Rights Management) is technical locks built into a digital file that control who can open it, on which devices, for how long, enforced by software, not just policy.

Where you encounter this

Every ebook and audiobook your library lends through Libby or Hoopla. The 14-day or 21-day checkout window that ends at the same time of day the loan began, whether or not the patron finished. The patron who can't get a borrowed book open on their Kindle. The "one copy, one user" licensing model that means your library needs to buy more copies when the holds list gets long. Adobe Digital Editions, which used to be required middleware for downloading library ebooks and which confused patrons for years.

What it actually is

When you buy a physical book, you own it. You can lend it, resell it, mark it up, keep it for decades. The law (specifically the first sale doctrine) gives you those rights. Publishers wanted different rules for digital books: rules that would let them charge per-read rather than per-copy, expire access automatically, and prevent one copy from being read by unlimited people simultaneously. DRM is how they enforce those different rules technically, not just contractually.

Here's the mechanism. Your library licenses an ebook from a publisher through OverDrive. The file comes encrypted, scrambled in a way that makes it unreadable without the right key. When a patron borrows it, the DRM system issues a temporary license to that patron's account: permission to decrypt the file for 14 days.

(For years that system was typically Adobe Content Server; today Adobe's DRM mostly handles the sideload path to Kobo, Nook, and other dedicated e-readers, while most in-app Libby reading runs on OverDrive's own licensing system. The mechanism is the same either way.)

The patron downloads the file and reads it. At the end of the loan, the reader’s authorization expires; the enforcement mechanism depends on the app and DRM system. The file is still on the patron's device, but it can't be unscrambled anymore. The book appears to disappear.

The copy is "returned" not because a file moved anywhere, but because the permission to read it expired.

So that's why a patron can't email a borrowed ebook to a friend: the encryption only unlocks for the specific account that borrowed it. It's why they can't open it in a different app: each app needs to be authorized by the DRM system, and not all apps are. It's why the file appears to "vanish" even when it's technically still on their device: the app enforces the end of the borrowing authorization. The loan period is enforced automatically rather than on the honor system.

What this means for your library

Your digital collection depends on relationships your physical collection doesn't.

Libraries don't own the ebooks they lend. They license them. The publisher retains the encryption keys. OverDrive maintains the license server that issues borrowing permissions. Service continuity depends on the format, DRM implementation, and license terms. This article does not establish an immediate failure on every device after a server outage. The physical collection on your shelves survives vendor relationships ending. The digital collection doesn't.

This isn't a theoretical concern. When a DRM system is deprecated or a company shuts down, the question "who holds the keys" becomes very concrete.

One copy, one user is a business decision, not a technical requirement.

Libby enforces OCOU, one copy lent to one patron at a time, because that's the licensing model most major publishers require. They want libraries to buy multiple copies of popular titles the same way they'd buy multiple physical copies. The holds queues you manage, the decisions about how many copies to license, the patron frustration about waiting weeks for a popular title. All of that flows from this licensing model.

But the technology doesn't require it. Hoopla's Instant titles use a fundamentally different model: libraries pay per checkout, patrons have simultaneous access, no holds queues. (Hoopla also sells Flex titles on one-copy-one-user terms, and some publishers, Penguin Random House among them, are only available that way.) The ebooks are still DRM-protected, but the business model built on top of the DRM is different. The distinction between OCOU and simultaneous access isn't a technical limitation. It's a contractual one, enforced by DRM.

DRM frustrates legitimate users without stopping determined ones.

Tools to strip DRM from files have existed for decades and are freely available online. The people most affected by DRM restrictions are patrons trying to do normal things: read a borrowed book on their preferred device, finish a chapter after the loan period, share something they loved with a family member. The people who want to pirate books can and do, regardless of DRM. This is a known critique of DRM that the library profession has raised for years, and it hasn't changed the publishing industry's position.

What to do with this on Monday

When a patron can't open a borrowed ebook, the most common causes are: device compatibility (not all readers support all DRM formats), an expired authorization on their device (Adobe Digital Editions and OverDrive apps need periodic re-authorization), or a mismatch between the app and the library's system. Knowing the DRM mechanism helps you troubleshoot. If the license expired, no amount of reinstalling the app will fix it.

For collection decisions, the DRM licensing model directly affects your cost structure. Metered licenses (capped at a number of checkouts, or a time window like 24 months) mean you're paying for access that can expire, not ownership. (OCOU describes how many patrons can borrow at once, one at a time; metering is the separate clock on how long the license lasts.) Understanding this is useful when your board asks why digital books seem to cost more than physical ones on a per-read basis.

Ask your vendor

  • What happens to patron access to borrowed titles if your DRM licensing servers experience an outage?
  • If your company is acquired or shuts down, what is the continuity plan for existing licenses?
  • For titles we've licensed on metered terms: what is the checkout limit or time expiration, and what happens when a license expires? Do we repurchase at the same terms?

For the broader picture of who owns what in your digital lending stack, Libby Isn't Your Library. It's a Private Equity Asset. covers OverDrive's ownership structure and what it means for libraries. For the staff-side comparison of Libby and Hoopla, including how their different DRM licensing models affect your budget, see Libby and Hoopla from the staff side.

Sources

Correction, September 10, 2026: an earlier version said Libby loans end at midnight. They do not. Libby's own help page says loans expire at the same time of day they were borrowed. The two sentences above have been corrected, and the Hoopla paragraph now notes that Hoopla also sells one-copy-one-user "Flex" titles.

Disclosure: L/30 and MetisLib are mine. Both are open source, neither takes real patron data, and neither is sold to anyone.