This video security FAQ answers the questions people actually ask before choosing a platform to host paid, private, or confidential video. Encrypted streaming and digital rights management stop browser extension downloads, right-click saves, and direct file URL access, but no platform stops a second camera pointed at a screen. That single limitation is why watermarking exists as a second layer, and why any honest answer to a video security question has two halves.
Gumlet is an all-in-one video hosting and delivery platform that pairs adaptive bitrate streaming with access controls and certified DRM for teams selling courses, running membership sites, and distributing internal video. Every answer below is written to stand on its own, so you can read one and leave. Each one links to a deeper page if you want the full mechanics.
TL;DR
- Encrypted streaming with DRM blocks browser extension downloads, right-click saves, and direct file URL access, but it does not stop a camera filming the screen.
- Google Widevine covers Android and Chromium browsers, Apple FairPlay covers iOS and Safari, and the two together handle the large majority of consumer playback.
- Password protection, geo-blocking, and privacy settings appear on every Gumlet video plan including the free tier, according to Gumlet's pricing page reviewed in September 2026.
- Gumlet sells DRM as a $99 per month add-on that includes 100,000 DRM-protected views per month, then charges $1 per additional 1,000 views.
- Dynamic watermarking, which burns a viewer identifier into playback, sits on Gumlet's Business tier and is the strongest deterrent against re-recording.
- Signed URLs and domain restrictions control who is allowed to start playback, while DRM controls whether the stream can be decrypted at all.
Video Security Controls at a Glance
| Control | What it actually stops | What it does not stop | Where it fits |
|---|---|---|---|
| Password protection | Casual access by anyone without the password | A password shared in a group chat | Low-value private video, internal review links |
| Privacy settings (private, unlisted, public) | Discovery through search and platform browsing | Anyone who already has the URL | Basic gating before paid controls |
| Domain restriction (referrer check) | Playback of a stolen embed code on another site | Direct playback on the approved domain | Course platforms, membership sites, LMS embeds |
| Time-limited signed URL | Reuse of a shared playback link after expiry | The person who holds the link during its valid window | Paid content, per-session access, API-driven apps |
| Geo and IP restriction | Playback from outside approved countries or networks | A viewer on a VPN inside the approved region | Licensed content, corporate network video |
| HLS or AES-128 encryption | Downloading the source file from network requests | A viewer whose player already holds the decryption key | Baseline delivery security under every other control |
| Multi-DRM (Widevine, FairPlay) | Browser extension ripping, software screen capture on supported devices | A phone camera recording the screen | Paid courses, OTT, high-value internal video |
| Dynamic watermarking | Anonymous leaking, because the leak identifies the leaker | The act of recording itself | The layer that covers what DRM cannot |
Every control in this table answers a different question. Domain locks and signed URLs decide who is allowed to press play, DRM decides whether the stream can be decrypted, and watermarking decides what happens after a leak. Gumlet ships all four categories on its video protection and access control layer, with DRM sold separately as an add-on.
How Do You Stop People From Downloading Your Videos?
Downloads are stopped by removing the downloadable artifact, not by hiding the download button. A secure video host splits the file into encrypted segments, delivers them through an authenticated player, and never exposes a single playable MP4 URL.
Browser extensions, developer tools, and download managers all fail against that setup because there is no complete file to grab.
How do I stop people from downloading my videos?
Host the video on a platform that streams encrypted HLS segments instead of serving a single file, then layer signed URLs and domain restrictions on top.
Gumlet delivers video as adaptive bitrate segments with time-limited signed URLs and referrer restriction on paid plans, which removes the direct file URL that download tools rely on. Read the full method in how to prevent users from downloading your videos.
Can a video be made completely download proof?
No video can be made completely download proof, and any vendor claiming otherwise is overselling. Encryption and DRM block file access, browser extensions, and most software capture tools, which covers the realistic attacker for paid courses and internal video.
A determined person with a second camera can still record the screen, which is the gap watermarking is designed to cover.
The honest version of this trade-off is laid out in common video DRM myths.
How do I prevent course videos from being downloaded?
Course video needs three controls together: encrypted streaming so there is no source file, domain restriction so the embed only plays on your course platform, and DRM so browser extensions cannot decrypt the segments.
Students share logins far more often than they run ripping tools, so pair those controls with per-viewer watermarking. The full sequence is documented in how to protect online course videos from piracy.
How do I stop video downloads on a WordPress site?
WordPress cannot secure video on its own, because the media library serves files directly from a public URL that any visitor can copy.
Move the video to a hosting platform that streams encrypted segments and embeds through a token-authenticated player, then restrict that embed to your domain. Step-by-step instructions are in how to prevent video download on WordPress.
Does disabling right click stop video downloads?
Disabling right click stops nothing beyond the most casual attempt, because the file URL is still visible in browser developer tools and network requests. Any protection that runs only in front-end JavaScript can be turned off by the viewer.
Real download protection happens at the delivery layer through segment encryption and token-checked playback, explained in video encryption.
Can Screen Recording Be Blocked?
Screen recording can be blocked in software on most modern devices, but it cannot be blocked in hardware anywhere. DRM instructs the operating system to treat the video as protected output, which causes screen recorders and capture software to produce a black frame instead of the picture. A camera aimed at the display is outside that boundary on every platform.
How do I prevent screen recording of my videos?
Turn on multi-DRM playback so the operating system marks the video as protected content, which makes built-in and third-party screen recorders capture a black screen. Add dynamic watermarking so any recording made through a camera carries the viewer's identity.
Both layers together are what most course and OTT businesses actually run, described in how to prevent screen recording.
Does DRM block screen recording on iPhone and Android?
Apple FairPlay blocks the built-in iOS screen recorder and AirPlay mirroring for protected playback, and Google Widevine does the same for Android capture APIs on supported devices.
Coverage is strongest inside native apps and slightly weaker in some desktop browser combinations, where behavior depends on the browser and graphics stack. Device-level specifics are covered in FairPlay DRM explained.
What happens when someone screen records a DRM-protected video?
The recording completes, but the video track comes out as a black rectangle while the audio may still record depending on the platform. Nothing warns the viewer, so most people assume the recorder failed rather than that the content was protected.
The mechanism behind that behavior is explained in Widevine DRM explained.
If screen recording cannot be fully blocked, what actually protects the content?
Attribution protects it. Dynamic watermarking burns the viewer's email, user ID, or IP address into the playback session, so any leaked copy points back to the account that produced it. Businesses that turn this on typically see sharing drop because the social cost of leaking rises, and the practical setup is covered in dynamic watermarking.
Access Control: Passwords, Expiring Links, and Domain Locks
Access control decides who is allowed to start playback, and it operates before any encryption question arises. Password protection, signed URLs, referrer checks, and geo rules each close a different sharing route.
Most leaks in business video come from an over-shared link rather than a technical attack, which is why this layer matters more than its reputation suggests.
How do I password-protect a video for my business?
Set a password on the video inside your hosting platform so the player requires it before the stream starts. Gumlet includes password-protected video and privacy settings on every plan including the free tier, according to its pricing page reviewed in September 2026.
Password protection suits internal review links and low-value private video, and the platform-by-platform comparison is in how to password-protect a video.
How do expiring video links work?
An expiring link, also called a signed URL, carries a cryptographic token with an expiry timestamp that the delivery server checks before it releases the stream. Once the timestamp passes, the same URL returns an error, so a link forwarded to a group chat stops working.
Gumlet offers time-limited signed URLs on its paid video plans, and the token mechanics are broken down in how signed URLs work for secure video access.
How do domain restrictions stop videos from being reshared?
Domain restriction checks the HTTP referrer on every playback request and refuses to stream unless the request comes from a domain you approved. Someone who copies your embed code onto their own site gets a player that will not load.
Gumlet supports referrer restriction on paid plans, and the configuration detail sits in signed URLs for video.
Can I restrict video access by country or IP address?
Yes. Geo-blocking checks the viewer's IP address against an allow or deny list of countries before playback starts, and IP allowlisting narrows that to specific networks such as a corporate office range.
Gumlet includes geo-blocking on every video plan including the free tier as of September 2026, with the setup walked through in how to restrict video access by country.
Is password protection enough for confidential business video?
Password protection is not enough on its own for confidential business video, because a password can be forwarded in a single message and the platform cannot tell who used it.
Confidential content needs an identity-bound control such as a signed URL tied to a session, single sign-on, or dynamic watermarking that records which account viewed the file. Use the diagnostic in is my video hosting secure to find which layer is missing.
What is the difference between signed URLs and DRM?
Signed URLs control access, and DRM controls decryption, so they solve different problems and are frequently confused. A signed URL decides whether the player is allowed to fetch the stream, while DRM decides whether the device is allowed to decrypt and display it once fetched.
Content that is only signed can still be captured by a viewer who is inside the valid window, and the full distinction is in HLS encryption vs DRM.
Video DRM Explained
Video DRM (Digital Rights Management) is a system that encrypts video with a key held by a license server, then releases that key only to a player and device the server has authorized. The device decrypts inside a protected pipeline the operating system controls, which is what allows DRM to block software screen capture.
Widevine, FairPlay, and PlayReady are the three systems that cover almost all commercial playback.
What is video DRM and how does it work?
Video DRM encrypts each media segment with a content key, stores that key on a license server, and hands it to a viewer's device only after the license server approves the request.
Decryption happens inside a secure path in the operating system or chipset, so the decrypted frames never sit in ordinary memory where a capture tool could read them.
The end-to-end flow is documented in what is video DRM.
What is the difference between Widevine, FairPlay, and PlayReady?
Google Widevine covers Android devices and Chromium-based browsers including Chrome, Edge, and Firefox. Apple FairPlay covers iOS, iPadOS, tvOS, and Safari. Microsoft PlayReady covers Windows applications, Xbox, and many smart TV and set-top platforms.
Widevine also has security levels, where L1 performs decryption in hardware and L3 performs it in software with weaker guarantees. Multi-DRM means packaging one video so all three systems can serve it, as explained in how to build a multi-DRM setup.
Does Gumlet support PlayReady?
Gumlet supports Microsoft PlayReady encryption for adaptive bitrate streams at the packaging level, while its built-in license server integrations and product documentation center on Google Widevine and Apple FairPlay.
Widevine covers Android and Chromium browsers, FairPlay covers iOS and Safari, and that pair reaches the large majority of course, membership, and B2B viewers.
PlayReady matters most for Windows-native applications, Xbox, and older smart TV and set-top hardware, so confirm the requirement with Gumlet before committing if your catalog targets those devices.
Details on the packaging layer sit on the Gumlet multi-DRM page.
Do I need to run my own DRM license server?
No, and running your own license server is rarely worth it. Self-hosting means certificate management with Google and Apple, key rotation, uptime responsibility, and per-request latency you own, which is several engineering weeks before the first protected video plays.
A managed platform issues licenses on your behalf, and Gumlet advertises one-click DRM activation with no code required on its pricing page as of September 2026.
The self-hosted comparison is in how to turn on Widevine DRM without a license server.
Does DRM slow down video playback?
Well-implemented DRM adds one license request before the first frame and no per-segment cost afterward, because decryption runs on the device's hardware decoder rather than in JavaScript. Perceived slowness almost always comes from a distant license server or a serial startup sequence, not from the encryption itself.
Gumlet delivers DRM playback over adaptive bitrate streaming with multi-CDN delivery on all video plans, and the tuning detail is in video DRM setup.
How much does video DRM cost?
Gumlet prices DRM as a $99 per month add-on that covers 100,000 DRM-protected views per month, then charges $1 per additional 1,000 views, according to its pricing page reviewed in September 2026.
The add-on attaches to a paid plan rather than replacing it, so total cost is the plan price plus the add-on. Industry pricing models and what drives them are compared in video DRM cost.
Is HLS or AES-128 encryption the same as DRM?
AES-128 encryption over HLS is not the same as DRM, because the decryption key is delivered over HTTPS to the player rather than to a hardware-protected pipeline. Anyone who can read the key request can decrypt the segments, which is enough to stop casual downloading and not enough to stop a deliberate ripper.
DRM keeps the key inside a device-level secure path, and the two are compared side-by-side in HLS encryption vs DRM.
What Video Security Comes With Each Gumlet Plan?
The table below reflects Gumlet's published video plans as reviewed in September 2026. Prices are the monthly rate, with the lower annual-billing rate shown in brackets. Plan contents change, so confirm on the Gumlet pricing page before you budget.
| Plan | Price per month | Included security controls | DRM |
|---|---|---|---|
| Free | $0 | Password protection, privacy settings, geo-blocking, static watermarks | Requires a paid plan |
| Creator | $9 ($6 annual) | Everything in Free + Domain Restriction | Add-on at $99 per month |
| Growth | $29 ($19 annual) | Everything in Creator + time-limited signed URLs, referrer restriction, private channel subscription, role-based access control | Add-on at $99 per month |
| Business | $149 ($99 annual) | Everything in Growth + Adds dynamic watermarking, full viewer metrics | Add-on at $99 per month |
| Enterprise | Custom | Everything in Business + Adds SSO, role-based access control, SOC 2, ISO, and GDPR compliance | Included |
Choose Growth when your main risk is link resharing and you need signed URLs plus domain locks on a small budget. Choose Business when you sell high-value content and need per-viewer watermarking, because that is the tier where dynamic watermarking becomes available.
Choose Enterprise when procurement requires SSO and named compliance certifications, and skip all three if your video is public marketing content where access control adds cost without reducing any real risk.
Watermarking
Watermarking does not prevent a leak, it makes the leak traceable, and that distinction is what makes it the correct partner for DRM. A static watermark shows your logo and deters nothing. A dynamic watermark shows the individual viewer's identity, which changes the calculation for the person considering whether to share.
What is dynamic watermarking and how does it stop leaks?
Dynamic watermarking overlays viewer-specific data such as an email address, user ID, or IP address onto the video during playback, often moving position so it cannot be cropped out. Any leaked recording carries the identity of the account that made it, so the leak is attributable rather than anonymous.
Gumlet offers dynamic watermarking on its Business tier as of September 2026, with implementation covered in dynamic watermarking.
What is the difference between dynamic and forensic watermarking?
Dynamic watermarking is visible to the viewer and identifies them on screen, which works as a deterrent before a leak happens.
Forensic watermarking is invisible and embeds an imperceptible signal in the video itself, which is used to trace the source after a leak has already circulated.
Most course and B2B businesses need the visible version, and the trade-offs are set out in dynamic watermark vs forensic watermark.
Can I show a viewer's email or IP address on the video?
Yes, and it is the most common configuration for paid content. The player receives the viewer identifier from your application at session start and renders it over the video, so the same file shows a different overlay to every person.
Setup for the email variant is described in dynamic watermark with viewer email.
Secure Video Hosting by Use Case
The right video security stack depends on what you are protecting and who is likely to take it. Paid courses face login sharing, internal corporate video faces accidental forwarding, and client deliverables face uncontrolled link circulation. Each of the answers below names the controls that actually match the threat.
What is the best secure video hosting for online courses?
Secure course hosting needs encrypted streaming, domain restriction to your course platform, multi-DRM, and per-viewer watermarking, because the realistic attacker is a paying student rather than a hacker.
VdoCipher, Gumlet, and SproutVideo all cover this pattern, with Gumlet suited to teams that want DRM as an add-on on top of a general video platform rather than buying a security-only product.
Course-specific configuration is in secure video hosting for online courses.
What is the best secure video hosting for a private membership site?
Membership sites need signed URLs tied to an active subscription, domain restriction to the membership domain, and DRM if the content carries real resale value. The control that matters most is revoking playback the moment a subscription lapses, which requires token-based access rather than a static password.
Gumlet supports time-limited signed URLs and referrer restriction on paid plans, and the private hosting options are compared in safest private video hosting platforms.
Which video DRM works with my LMS?
Any DRM platform that provides an embeddable player or a JavaScript SDK works with an LMS, and the practical question is whether the LMS allows custom embed code or only iframe URLs.
Gumlet embeds through a standard player with domain restriction, which covers most self-hosted and SaaS learning management systems. Platform compatibility is broken down in best LMS platforms for course creators and enterprises.
What is the most secure platform for internal company video?
Internal company video is secured through identity rather than encryption, so the controls that matter are single sign-on, role-based access, IP allowlisting to the corporate network, and per-viewer watermarking on sensitive material.
Gumlet places SSO and role-based access control on its Enterprise tier and lists SOC 2, ISO, and GDPR compliance there as of September 2026. A direct comparison against general file storage is in internal training video: Gumlet vs Drive vs Stream.
How do I protect fitness and workout videos?
Fitness libraries leak through shared member logins and reposted clips rather than through technical ripping, so signed URLs, domain restriction, and visible per-viewer watermarking do most of the work.
Add DRM when the library is the primary revenue product rather than a retention feature. The specifics for on-demand fitness are in how to protect fitness videos.
How do I share confidential video securely with clients?
Send a time-limited signed link scoped to one recipient rather than a permanent URL, restrict playback to the domain hosting the review page, and turn on watermarking so any forwarded recording is attributable.
Password-only links are the weakest option here, because a single forward defeats them and leaves no record. The workflow is in secure client video sharing.
How do I secure SaaS product demo videos?
Demo video that shows real customer data or unreleased features needs access control rather than DRM, because the audience is small and the risk is exposure rather than resale. Use expiring links per prospect, domain restriction to your own site, and geo or IP rules where a contract requires it
Configuration for sales and product teams is in secure demo videos for SaaS.
What is the best secure video hosting for a startup?
If the question means secure video hosting rather than video conferencing, a startup should pick a platform where security controls are add-ons rather than an enterprise contract, since spend should track revenue.
Gumlet starts at $19 per month with password protection, geo-blocking, and privacy settings included, and adds DRM at $99 per month when the content becomes worth protecting, according to pricing reviewed in September 2026. Options across price points are compared in best DRM video hosting platforms.
Choosing a Secure Video Platform
Platform choice comes down to three questions: what your content is worth, who is realistically trying to take it, and how much engineering time you have. General-purpose hosts such as Vimeo and Wistia cover access control well and place DRM behind enterprise tiers.
Security-first hosts such as VdoCipher and Gumlet make DRM and watermarking reachable at lower price points.
Is Vimeo secure enough for paid video content?
Vimeo handles privacy settings, password protection, and domain restriction well, which covers marketing video and internal review.
DRM on Vimeo sits on its Enterprise and OTT products rather than on standard business plans, so a small paid-content business often finds the security it needs priced above its budget. Alternatives at lower price points are compared in Vimeo alternatives for secure video.
Is an unlisted YouTube video private?
An unlisted YouTube video is hidden from search and browsing, and it is not private, because anyone holding the URL can watch it and pass it on. YouTube offers no expiry, no domain lock, and no download prevention against browser extensions on unlisted content. The differences are laid out in YouTube unlisted vs private video hosting.
How does Gumlet compare to VdoCipher?
VdoCipher is a security-first product where DRM and watermarking are the core offering, which suits teams whose only requirement is anti-piracy. Gumlet is a broader video platform covering encoding, adaptive delivery, analytics, and player customization, with certified Widevine and FairPlay DRM available as a $99 per month add-on as of September 2026.
Choose VdoCipher when protection is the entire brief, and choose Gumlet when you also need general video infrastructure, as compared in VdoCipher alternatives.
What should I look for when comparing secure video platforms?
Check six things: whether DRM is native or a partner integration, which DRM systems are covered, whether watermarking is dynamic or static only, whether signed URLs support per-session expiry, whether domain and geo restrictions are on your plan, and what happens to cost as views scale.
Ask for the plan tier of each answer, because most vendors place the strongest controls above the price shown on the homepage. Use the evaluation grid in secure video hosting checklist.
How do I audit whether my current video hosting is secure?
Open a video in a private browser window, copy the network request URL, and paste it into a different browser on a different network. If it plays, you have no signed URL and no domain restriction, and your content is one copied link away from being public. The full audit sequence, including the questions to put to your vendor, is in video security audit checklist.
Frequently Asked Questions
Does video DRM work offline?
Offline DRM playback works through persistent licenses, where the device stores a time-limited license alongside the downloaded encrypted file. Support depends on the platform and the DRM system, and it is usually a native mobile app feature rather than a browser one.
Confirm persistent license support with your provider before promising offline access in a mobile course app.
Can I turn on DRM without changing my player or embed code?
On a managed platform, yes. Gumlet advertises one-click DRM activation with no code required, which means the existing embed continues to work while the delivery layer switches to encrypted playback. Native iOS and Android SDKs are provided separately for in-app DRM playback, per Gumlet's pricing page reviewed in September 2026.
Does secure video hosting hurt video SEO?
Protected video is intentionally excluded from search indexing, so it will not generate video rich results, and that is the correct outcome for paid or confidential content. Keep marketing video on a public, indexable setup and put only gated content behind access control. Running both on the same platform avoids maintaining two vendors.
How long does it take to move existing videos to a secure host?
Migration time is driven by library size and re-embedding effort rather than by the security setup itself, since encoding runs in parallel and access controls apply at the account level. A library of a few hundred videos with embeds on one platform is usually a day of work. Libraries spread across a website, an LMS, and email sequences take longer because every embed location has to be updated.
Where to Start
Choose access control alone when your video is confidential rather than valuable, meaning the risk is the wrong person watching rather than someone reselling it.
Choose access control plus DRM plus dynamic watermarking when the video is the product, because that combination removes the file, blocks software capture, and makes any remaining leak traceable to an account.
Neither approach is worth the cost when your video is public marketing content, where the goal is reach and every control you add reduces it.
If you are unsure which category your library falls into, run the check in is my video hosting secure first, then look at Gumlet's video protection and access control or start on the free plan and add DRM when the content is worth it.
