For the complete documentation index, see llms.txt. This page is also available as Markdown.

Content Protection

With Content Protection, you can secure the delivery of content when using our player, direct streaming URLs, or download URLs.

This option is enabled by default and when you integrate our player, token generation for content protection is handled automatically. Only if you do not use our player - for example, when using progressive download or a third-party video player - you need to generate the access tokens yourself.

You can enable or disable this feature in Project Settings → Content Protection for the desired project. Once activated, all content delivered through our video player will automatically be protected by this mechanism.

Content Protection secures media delivery by signing and tokenizing every video chunk that is requested during playback or download. Each request is validated against a time-limited token before the chunk is delivered. If the token is missing, invalid, or expired, access to the requested video segment is denied. This prevents unauthorized access and sharing of direct streaming or download URLs.


Using a custom player with Content protection

A new token must be generated for every request. Reusing tokens is not supported and may result in access being denied.

Generate a token (PHP example)

// token.php
function generateToken() {
    $expires = time() + 600; // Token validity: current time + 10 minutes
    $_user_agent = ''; // User Agent (required).
    $project_key = ''; // Your private project key (required).
    $md5 = md5($expires . $project_key . $_user_agent, false);

    return $md5 . '/' . $expires;
}

Generate the streaming URL

Adding DRM

To use DRM, you must connect your Castlabs Account under Partner & Services.

DRM protection can be used to protect premium or restricted video content against unauthorized playback and redistribution.

DRM stands for Digital Rights Management. It adds an additional security layer to the playback workflow by ensuring that protected content can only be played in supported players and environments after a valid license has been requested.

3Q currently supports the following DRM technologies:

  • Google Widevine

  • Apple FairPlay

  • Microsoft PlayReady

These DRM systems cover the most common playback environments, including modern desktop browsers, Android devices, iOS and iPadOS devices, Apple Safari, smart TVs, and other supported playback devices.


When to Use DRM

DRM protection is recommended for content that requires a higher level of access control than standard token protection or publication settings.

Typical use cases include:

  • Premium video content

  • Paid content

  • Licensed movies or series

  • Internal confidential videos

  • Partner-restricted content

  • Content with contractual protection requirements

  • Content that must not be downloadable or freely redistributed


Last updated