How to stop IDM and downloaders from saving your course videos
Why download managers can save course videos, which tricks such as disabling right-click don’t work, and how encryption and per-student licenses actually prevent video downloads.
All guides
Start
Quick start: your first protected course in 10 minutesVideo security: encryption, watermarks and what no player can doAdd to your site
Embed the secure player in WordPressSell video courses with WooCommerce and the secure playerThe XAPlayer secure player in MoodleThe XAPlayer secure player in LaravelThe XAPlayer secure player with Node.js and ExpressThe XAPlayer secure player in Next.jsThe XAPlayer secure player with Python: Django and FlaskHTML sites, site builders, or no serverFor sellers
Uploading videos and automatic protectionIssuing licenses, device limits and bulk issuingHow to stop IDM and downloaders from saving your course videosProtect course videos on WordPress and WooCommerceFor students
For students: watching a course with a license codePlatforms: Android, iPhone, Windows, Mac and LinuxWatching a course on AndroidWatching a course on iPhone and iPadWatching a course on Windows, Mac and LinuxFor developers
API reference: embed the secure player on any siteIf your course videos sit on your site as ordinary MP4 files, anyone with IDM or a browser extension can save them in seconds and pass them on. This guide explains why that happens and what actually stops it.
Why download managers can grab your videos#
To play a video, the browser has to fetch the file from the server. A download manager sees that same request and saves the same file. As long as what reaches the browser can play on its own, any download tool can take it.
Tricks that don’t work#
- Disabling right-click or hiding the player’s download button: download managers never need a right-click.
- Hiding the file URL or making it expire: a temporary link still downloads while it is valid, and the saved file plays forever.
- Splitting the video into pieces without encryption: download tools stitch the pieces back together.
- WordPress “anti-download” plugins: most only change how the player looks, and the file stays open.
What works: encryption with a device-bound key#
The only reliable answer is that what reaches the browser cannot play without a key, and that key only reaches the buyer’s device. That is exactly what XAPlayer does:
- Each video is encrypted with its own key when you upload it.
- You issue each buyer a license, and they activate the course on their own device.
- The decryption key is sealed for that device alone and kept in the browser in a form that cannot be read out.
- During playback, the buyer’s name and phone move across the picture.
So even if a download manager captures the pieces of a video, all it holds is encrypted data that no player will play.
Get started#
Sign up for XAPlayer, upload your first video and issue yourself a test license to see everything as a student does. The first 14 days include 10 free licenses.
Try XAPlayer free for 14 days, with 10 licenses on us.
Try it free with your own course