Digital rights management (DRM) for video: a guide for course sellers
DRM for video is a licensing system: video is encrypted and a licence with the key and rules goes only to approved devices. The business view: systems, security levels, costs, law and limits.
On this page 8 sections
Digital rights management (DRM) for video is a licensing system. Each video is encrypted, and a licence holding the key and the rules for using it is issued only to approved devices. For a course seller, the decisions are commercial: which devices you reach, how well each is protected, what it costs and what it misses. DRM is worth having in many cases, but it is one layer of protection, not the whole plan.
Tools that claim to get past DRM are sold openly, and they have reached phones too. From late 2022 until a September 2024 update, StreamFab's Android app offered downloads from Netflix and Amazon Prime Video. Its "DRM MPD Downloader" for Windows and Mac says it saves DRM-protected streams from any site as MP4 or MKV files "without requiring technical configuration", and its home page lists downloaders for Netflix, Prime Video, Disney+, JioHotstar and online-course marketplaces. KeepStreams advertises downloads from "3,000+ sites", up to 4K.
DRM is a licence, not a lock
The word "rights" is the clue. DRM doesn't just scramble a file; every time someone presses play, it decides whether this device may have the key, and under what conditions. Those conditions travel with the licence:
- how long the video may play, for example until a batch's validity ends;
- whether it can be stored for offline viewing, and for how long;
- which quality a device may receive, depending on how well it protects video;
- whether video may go to an external screen, and with what protection.
What DRM never decides is who should get a licence. That is your system's job: checking enrolment, validity and device rules before asking for one. DRM checks devices, not people, so a careless entitlement check makes even the strongest DRM pointless.
The term also covers e-books, music, software and documents; this article sticks to video. For how the encryption, licence service and decryption module fit together, see our explainer on what DRM is and how it works.
Three systems, three relationships
Video DRM in practice means three systems, each owned by a platform company. Each one comes with its own terms:
| System | Owner | Covers | What your organisation needs |
|---|---|---|---|
| Widevine | Android, Chrome, Firefox, Edge and many smart TVs | A licence agreement with Google, which charges no fee for Widevine itself | |
| FairPlay Streaming | Apple | Safari, iPhone, iPad, Mac and Apple TV | Production credentials from Apple, approved only for teams that provide a streaming service to consumers |
| PlayReady | Microsoft | Edge on Windows, Xbox and many smart TVs | Licensing through Microsoft, or a vendor that offers it |
You may not need all three. Students on Android phones and on Chrome, Firefox or Edge can be covered by Widevine alone. PlayReady matters mainly for hardware-backed playback on Windows, Xbox and some smart TVs.
iPhone and Mac users need FairPlay. Apple's FairPlay Streaming page says requests from third parties acting for content owners won't be approved. So your organisation applies, even if a vendor runs the servers. Our explainer on multi-DRM covers running all three from one library.
Security levels are a business decision
Every DRM system protects some devices better than others. Hardware-backed levels, such as Widevine L1 and PlayReady SL3000, keep keys and decrypted video inside protected hardware. Software-only levels, such as Widevine L3 and PlayReady SL2000, rely on obfuscated code on the ordinary processor. Widevine's software level was publicly broken in 2019.
That leaves you a choice for every course:
- Allow every device at full quality. Easiest for students, but your weakest devices set your real level of protection.
- Cap quality on software-only devices. This is common in streaming. For lectures, though, a lower resolution is often still perfectly watchable, so a cap protects less than it would for a film.
- Refuse software-only devices. The strongest option, and it locks out desktop browsers and some older or budget phones that honest students use.
For coaching courses, capping quality is often a sensible starting point, with other layers covering what a cap can't. Our comparison of Widevine L1 vs L3 explains the levels and how to check a device.
What DRM costs to run
Google charges nothing for Widevine, so DRM's costs are mostly work and services. Expect these line items whether you build or rent:
| Cost | What it covers | Easy to miss because |
|---|---|---|
| Packaging | Encrypting every lecture, preview and old upload | Old uploads and previews get forgotten |
| Licence service | Issuing licences for each system, every time someone plays or renews | It runs every month and grows with viewing |
| Entitlement checks | Your servers deciding who may receive a licence | It is your build, not the DRM system's |
| Players | DRM-capable players in each app and on the website | Each platform is separate work |
| Apple credentials | FairPlay approval in your organisation's name | It takes paperwork and time |
| Testing | Playback on the phones, laptops and projectors students use | The range of devices in a typical batch is wide |
| Support | Licence errors, HDCP refusals and quality caps | Students blame the course, not the DRM |
| A second encrypted copy | Some older devices need a different encryption scheme | It adds storage and processing for part of the library |
Ask any vendor to show these separately. A quote that says "DRM included" can hide whether the licence service, Apple's paperwork or device testing is yours to handle.
What DRM won't cover
DRM's limits are the same for every system. It can't see a phone filming the screen, and it gives a shared login a valid licence. It doesn't touch PDFs or test papers, and it can't protect original files that never passed through it.
On devices without a protected display path, screen recorders often capture the picture anyway. We go through each gap in why DRM alone can't stop piracy. Budget for those layers alongside DRM, not after the first leak.
DRM and the law in India
Indian copyright law gives technical protection legal backing. Under section 65A of the Copyright Act, 1957, circumventing an effective technological measure with the intention of infringing copyright is an offence. It is punishable with up to two years' imprisonment and a fine. The section also lists exceptions, such as encryption research, lawful investigation and authorised security testing.
Section 65B separately protects rights management information. That means the title of a work, the author or performer, the owner's name and address, and the terms of use. Knowingly removing or altering it without authority is also punishable with up to two years and a fine. So keep your institute's name, the course title and your terms visible in videos and PDFs.
The Act's definition of rights management information excludes anything intended to identify the user. A watermark carrying a student's details is best treated as evidence for tracing a leak, rather than as rights management information. Our guide to copyright infringement punishment in India covers the other sections. This is general information, not legal advice.
Is DRM worth it for your courses?
| Your situation | Is DRM worth it? | Why |
|---|---|---|
| An OTT service with licensed films or series | Usually required | Licensors commonly write DRM and security-level requirements into their contracts |
| A large recorded library watched on TVs and laptops | Often | It enforces expiry and keeps downloaded files useless |
| A coaching institute whose students watch mainly on phones | As one layer | Hardware-backed phones block recording, but cameras and shared logins remain |
| A small tutor with a few batches | Not the first priority | Watermarks and limits on account sharing address the routes small batches usually leak through |
Whatever you decide, judge any platform by outcomes rather than labels. Ask what happens on your students' weakest devices, when a lecture is filmed, and when a login is shared.
VidSafe protects lectures with VidSafe proprietary encryption, screen- and camera-recording detection, account-sharing prevention, PDF watermarking and RASP. It adds visible and invisible watermarks that are extremely hard to remove, even after heavy re-encoding, so a leaked copy can be traced back to the account it came from. See our LMS for coaching institutes.
Frequently asked questions
What does digital rights management mean?
Digital rights management is technology that controls how digital content can be used after it is delivered. For video, the file is encrypted, and a licence service gives the key only to approved devices. The licence also carries rules, such as expiry and offline limits. The same idea is used for e-books, music, software and documents.
Is DRM free to use?
Google charges no fee for Widevine, though it needs a licence agreement, and Apple's FairPlay needs approval through your Apple Developer Program account. The costs are in running a licence service, packaging videos, building players, testing devices and handling support. Renting these from a vendor turns them into a monthly bill.
Do I need DRM for my online course?
Not necessarily. DRM makes downloaded files useless and enforces expiry, and on hardware-backed phones it blocks screen recording. It can't stop camera recording or shared logins, which are common leak routes for courses, so watermarking and limits on account sharing often matter more.
Is removing DRM illegal in India?
Circumventing an effective technological measure, such as DRM, with the intention of infringing copyright is an offence under section 65A of the Copyright Act, 1957. It is punishable with up to two years' imprisonment and a fine. Sharing the resulting copies infringes copyright under section 51. This is general information, not legal advice.
