Skip to main content

Hotlink Protection for streams

Protecting the stream URL from being shared or used elsewhere.

RePro’s Hotlink Protection is a token-based security mechanism that puts tight conditions on how a stream URL can be used. It makes stream links short-lived and ties them to a specific Program and network address.

How It Works

When Hotlink Protection is enabled at the project level, RePro issues stream access through secure, short-lived links. Each link is signed, and the signature ties it to:

  • The individual Program it was issued for

  • The network address it was issued to

  • A limited time window, after which it stops working

Because a link stops working once its time window closes, and only works from the network address it was issued to, it is not a durable way to pass on access.

Treat playback links as sensitive all the same. Hotlink Protection secures the URL; it does not decide who is entitled to watch. That is controlled by user accounts and Groups.

Link Refresh Rate

RePro allows you to define a link refresh rate, which determines how often a new secure stream link is generated for an ongoing viewer session.

We recommend 5 to 10 minutes. Use this range for all content, including sensitive material, to balance link protection and playback stability.

Example:

At a 10-minute refresh rate, the viewer receives a newly signed stream link every 10 minutes, behind the scenes.

Shorter intervals. 1 minute is the shortest interval available in project settings. Intervals below 5 minutes are an advanced option for specific circumstances and are not recommended as a default. If you believe your production needs one, talk to RePro Support first.

Seamless Playback Experience

While the link refreshes periodically, this process is completely seamless for the viewer. There are:

  • No playback interruptions

  • No visible changes in the stream behaviour

  • No additional user input required

This maintains a smooth user experience while ensuring that the stream remains protected at all times.

If a viewer's network changes

Because secure links are tied to the network address they were issued to, a viewer whose address changes mid-session may need to reload the player to pick up a new link. This happens when a device moves between Wi-Fi and cellular, or on a VPN that rotates its exit address.

Short refresh intervals can make this more noticeable.

Enabling Hotlink Protection

To enable Hotlink Protection:

  1. Go to your project settings in the RePro web dashboard.

  2. Navigate to the Security tab.

  3. Enable Hotlink Protection.

  4. Set your link refresh interval. We recommend 5 to 10 minutes.

  5. Save the changes.

Use Cases

  • Preventing link sharing or URL-based piracy

  • Ensuring content is consumed only within authenticated apps or sites

  • Protecting premium, licensed, or subscriber-only streams

Best Practices

  • Combine Hotlink Protection with user authentication and role-based access controls.

  • Keep the refresh interval at 5 to 10 minutes, including for your highest-value content.

  • Monitor token issuance logs to track access patterns and detect anomalies.

Did this answer your question?