RePro’s Hotlink Protection is a token-based security mechanism that puts tight conditions on how a stream URL can be used. It makes stream links short-lived and ties them to a specific Program and network address.
How It Works
When Hotlink Protection is enabled at the project level, RePro issues stream access through secure, short-lived links. Each link is signed, and the signature ties it to:
The individual Program it was issued for
The network address it was issued to
A limited time window, after which it stops working
Because a link stops working once its time window closes, and only works from the network address it was issued to, it is not a durable way to pass on access.
Treat playback links as sensitive all the same. Hotlink Protection secures the URL; it does not decide who is entitled to watch. That is controlled by user accounts and Groups.
Link Refresh Rate
RePro allows you to define a link refresh rate, which determines how often a new secure stream link is generated for an ongoing viewer session.
We recommend 5 to 10 minutes. Use this range for all content, including sensitive material, to balance link protection and playback stability.
Example:
At a 10-minute refresh rate, the viewer receives a newly signed stream link every 10 minutes, behind the scenes.
Shorter intervals. 1 minute is the shortest interval available in project settings. Intervals below 5 minutes are an advanced option for specific circumstances and are not recommended as a default. If you believe your production needs one, talk to RePro Support first.
Seamless Playback Experience
While the link refreshes periodically, this process is completely seamless for the viewer. There are:
No playback interruptions
No visible changes in the stream behaviour
No additional user input required
This maintains a smooth user experience while ensuring that the stream remains protected at all times.
If a viewer's network changes
Because secure links are tied to the network address they were issued to, a viewer whose address changes mid-session may need to reload the player to pick up a new link. This happens when a device moves between Wi-Fi and cellular, or on a VPN that rotates its exit address.
Short refresh intervals can make this more noticeable.
Enabling Hotlink Protection
To enable Hotlink Protection:
Go to your project settings in the RePro web dashboard.
Navigate to the Security tab.
Enable Hotlink Protection.
Set your link refresh interval. We recommend 5 to 10 minutes.
Save the changes.
Use Cases
Preventing link sharing or URL-based piracy
Ensuring content is consumed only within authenticated apps or sites
Protecting premium, licensed, or subscriber-only streams
Best Practices
Combine Hotlink Protection with user authentication and role-based access controls.
Keep the refresh interval at 5 to 10 minutes, including for your highest-value content.
Monitor token issuance logs to track access patterns and detect anomalies.
