Skip to content
Back
Security2026-03-105 min

IPTV Security: How MyIPTV Protects Your Data

Your IPTV provider credentials are sensitive. Here's how MyIPTV keeps them safe.

The Security Challenge

When you add an IPTV provider, you trust the player app with your credentials — server URLs, usernames, passwords, and MAC addresses. A poorly designed app could store these in plain text, expose them in logs, or transmit them insecurely.

How MyIPTV Protects Your Data

AES-256 Encryption

All provider credentials are encrypted with AES-256-GCM before storage. This is the same encryption standard used by banks and governments. Even if someone gained access to your device's storage, they couldn't read your credentials without the encryption key.

Keychain Storage

On iOS and Apple TV, provider credentials live in the iOS Keychain. This means: - They are protected by your device passcode and Face ID/Touch ID - They are not included in device backups unless the backup itself is encrypted - Other apps cannot read them

What We Store

If you add a provider through the web portal, we store its URL and credentials encrypted with AES-256-GCM so they can sync to your devices. They are never kept in plain text, and we never store them unencrypted anywhere.

We do keep what you ask us to sync, so it can follow you between devices: - Profiles, favourites and your watchlist - Watch history and playback progress - Ratings, used to order your recommendations

We do not sell this data, and we do not share it with third parties.

Encrypted Transmission

When your device communicates with your IPTV provider: - MyIPTV uses HTTPS where the provider supports it - The app talks to your provider directly from your device

Web Portal Security

The MyIPTV web portal (where you manage your account) uses: - Better Auth for secure session management - HTTPS only with HSTS enforcement - CSP headers to prevent XSS attacks - HttpOnly, Secure cookies — tokens can't be stolen by JavaScript

Best Practices

  1. Use strong, unique passwords for your MyIPTV account
  2. Don't share provider credentials — each set should be used on one device/app
  3. Keep your device updated — iOS security patches protect the Keychain
  4. Use a PIN for Kids Mode if children use the app

Your Providers Deserve a Better App