Build the best video experiences with VdoCipher API
Works with
Server API
Manage videos using API, enable automatic video upload and get OTP for playback.
Web Player APIs
Customise player design or add interactive features using player API with support of chapters, closed captions, DRM, and more.
Mobile SDKs
Integrate the VdoCipher SDK into your Android and iOS apps. Offline downloads, custom player, and full API control.
OTP-based playback
Generate short-lived playback tokens to securely stream videos without exposing your content.
Why you need OTP for secure streaming
Non-secure video platforms often embed videos through iframe with static URLs, exposing direct video URLs that can be copied, shared, or downloaded. An OTP prevents this by acting as a single-use key generated on your server and tied to one playback session.
VdoCipher uses a unique embed code per session to play videos. This embed code uses a short-lived access token, called an OTP. Our use of an OTP ensures that videos are authenticated in every session, so only logged-in paying users can watch your premium content.
Start free 30-days trial
How to generate OTP?
Every playback session starts with a one-time password generated from your own server. Follow these steps to wire it up.
Video player embed code
Your website backend needs to send the OTP and playbackInfo to the site frontend to authorize video playback. More details on the player embed code can be found in the VdoPlayer reference.
Start free 30-days trialIntegrating VdoCipher embed code
There are broadly two kinds of web applications, MVC apps and SPAs. VdoCipher integration for the respective use cases differs slightly.
MVC applications
In web apps using model-view-controller architecture, the backend directly renders the web page. Prominent MVC platforms include PHP frameworks (Laravel, Yii), Python (Django), Ruby on Rails, and the Jade template engine with Express.
In MVC apps the OTP can be generated while the page itself is loading. Pass the OTP and playbackInfo as parameters from controller to view, and the embed code will be ready to play.
Single-page applications
Single-page apps (SPAs) load scripts and other assets once per session; data for each new view is served as JSON or XML. React and Angular are the most prominent SPA platforms.
In an SPA, create an API endpoint that authenticates the logged-in user and checks video access. This endpoint returns the OTP and playbackInfo, and the frontend loads the video.
Ready-to-use plugins
For popular content management systems, you'll only need to install the VdoCipher plugin. It handles OTP and playbackInfo generation for you.
VdoCipher support is always there for you
As you can see, adding security features to videos creates additional steps to your workflow beyond simply adding a single embed code.
We fully understand there might be things you'd need our help for. Our support executives are available at all times to help you secure your encrypted videos.
Start free 30-days trial
Check out our secure streaming features
We fully understand there might be things you'd need our help for. Our support executives are available at all times to help you secure your encrypted videos.
Secure videos now Request demo