--- title: "What Is AES-128 Encryption in Video Streaming? | RentAnOTT" description: "AES-128 encrypts video segments so a stream cannot be played without the key. See how it works in HLS, what it protects against and how it differs from DRM." url: "https://www.rentanott.com/glossary/aes-128" markdown_url: "https://www.rentanott.com/glossary/aes-128.md" category: "Security" updated: "2026-10-05" --- # What is AES-128 encryption in streaming? AES-128 is the Advanced Encryption Standard with a 128-bit key. In streaming it is used to encrypt video segments so they cannot be played without the key. The term usually refers to the basic encryption built into HLS, in which the player fetches the key from a URL listed in the playlist. ## How AES-128 works in HLS Each segment is encrypted when the stream is packaged. The playlist includes a line pointing to the key. The player requests the key over HTTPS, decrypts each segment as it arrives and plays it. The key can be rotated during a stream so that one key unlocks only part of it. ## What it protects against The segments on the CDN are useless on their own, so someone who copies the stream address or downloads the files gets nothing playable. Protection then depends on who can obtain the key. If the key URL requires a signed token or a logged-in session, only entitled viewers get it. ## AES-128 vs DRM DRM systems use AES too, typically with 128-bit keys. The difference is not the cipher but how the key is guarded. - Key delivery: with AES-128 the key reaches the player in the clear; with DRM it stays inside a protected module on the device - Rules: AES-128 has none; a DRM license sets expiry, resolution limits and offline rights - Output: AES-128 cannot block screen capture; hardware DRM can - Acceptance: studios generally do not accept AES-128 alone for premium content - Cost and effort: AES-128 is simple and has no license fees ## When it is enough For content you own, such as courses, sermons, events and independent films, AES-128 with tokenized key delivery stops casual copying at little cost. For licensed films, series and sport, expect to need DRM. ## AES-128 encryption on RentAnOTT RentAnOTT secures delivery with signed URLs and tokenized playback, with multi-DRM included on Growth and Scale for content that requires it. [See security features](https://www.rentanott.com/features#security). ## Related terms - [DRM](https://www.rentanott.com/glossary/drm) — DRM (digital rights management) is technology that encrypts video and controls who can decrypt it. A viewer's device must obtain a license from a license server before it can play the stream, and the license sets the rules for that playback. - [Signed URL](https://www.rentanott.com/glossary/signed-url) — A signed URL is a web address for a video stream that includes a cryptographic signature and an expiry time. The CDN serves the content only if the signature is valid and the link has not expired, so a copied or shared link stops working. Using signed URLs for playback is called tokenized playback. - [HLS](https://www.rentanott.com/glossary/hls) — HLS (HTTP Live Streaming) is a streaming protocol created by Apple that delivers video as a series of short segments over ordinary web servers, listed in playlist files with the .m3u8 extension. It is the most widely supported way to stream both live and on-demand video. - [Multi-DRM](https://www.rentanott.com/glossary/multi-drm) — Multi-DRM is the use of several DRM systems, normally Widevine, FairPlay and PlayReady, to protect the same video so that it plays securely on every browser, phone and television. - [Secure video streaming](https://www.rentanott.com/glossary/secure-video-streaming) — Secure video streaming is delivering video so that only authorized viewers can watch it and copies are hard to make. It is achieved by combining several layers: encrypted delivery, access tokens, DRM, account controls and watermarking. - [Video piracy](https://www.rentanott.com/glossary/video-piracy) — Video piracy is the copying, distribution or restreaming of video without the permission of its rights holder. For a streaming service it means paying audiences watching for free elsewhere, and it can put content licenses at risk. - [DRM license server](https://www.rentanott.com/glossary/drm-license-server) — A DRM license server is the service that issues licenses for protected video. When a device asks to play an encrypted stream, the license server checks that the request is authorized and returns the decryption key, wrapped so that only that device can use it, together with the rules for playback. ## Further reading - [Pricing](https://www.rentanott.com/pricing) - [White-label streaming platform buyer's guide](https://www.rentanott.com/blogs/white-label-streaming-platform) - [How to start a streaming service](https://www.rentanott.com/blogs/how-to-start-a-streaming-service) ## Frequently asked questions ### Is AES-128 secure? The cipher itself is very strong. The weak point in basic HLS encryption is that the key is handed to the player openly, where a determined user can capture it. ### Is AES-128 the same as DRM? No. It encrypts the video but does not protect the key on the device or enforce any playback rules. ### Does encryption affect playback performance? Negligibly. Modern devices decrypt AES in hardware with no visible effect on playback. All 163 terms: [Streaming and OTT glossary](https://www.rentanott.com/glossary). ## Book a demo Tell RentAnOTT what you are launching. The team walks through the platform and maps the path to go-live around your catalog, markets and revenue model. Book a demo: https://www.rentanott.com/contact ## More from RentAnOTT - [Home](https://www.rentanott.com/index.md) — What RentAnOTT is, what every plan includes, and how launch works - [Features](https://www.rentanott.com/features.md) — Every core feature and optional add-on - [Pricing](https://www.rentanott.com/pricing.md) — Platform tiers, apps, add-ons, usage rates and example bills in INR and USD - [Free tools](https://www.rentanott.com/tools.md) — OTT app builder and calculators for streaming revenue, bandwidth, bitrate and pricing - [Insights](https://www.rentanott.com/blogs.md) — All streaming business articles - [Glossary](https://www.rentanott.com/glossary.md) — Definitions of streaming and OTT terms - [Book a demo](https://www.rentanott.com/contact.md) — Talk to RentAnOTT about your launch Full site in one file: https://www.rentanott.com/llms-full.txt