HDMI capture cards: the leak DRM can't see, and how to trace it
HDMI capture copies a lecture on the cable, after DRM has done its job. HDCP helps only when the player asks for it, but on-screen watermarks survive a capture intact.
On this page 9 sections
An HDMI capture card copies a lecture from the cable between a device and a screen, after DRM has finished its work. HDCP, the encryption on that cable, is meant to block compliant capture devices, but only when the player asks for it, and some equipment ignores it. Where DRM can't see, a traceable mark in the picture still works. A capture is a clean copy of the screen, so any mark shown on screen comes through intact.
Tools that claim to get past DRM are sold openly, and they have reached phones too. From late 2022 until a September 2024 update, StreamFab's Android app offered downloads from Netflix and Amazon Prime Video. Its "DRM MPD Downloader" for Windows and Mac says it saves DRM-protected streams from any site as MP4 or MKV files "without requiring technical configuration", and its home page lists downloaders for Netflix, Prime Video, Disney+, JioHotstar and online-course marketplaces. KeepStreams advertises downloads from "3,000+ sites", up to 4K.
Why DRM loses sight of the video at the cable
DRM's job ends inside the device. It checks the licence, decrypts the video and hands the decoded picture to the display system. From there, the picture has to leave the device to reach a monitor, TV or projector. The device knows only what the equipment at the other end of the cable tells it.
That is the blind spot. A capture device on the cable receives the same signal a monitor would, and to the laptop it can look like just another display. The DRM licence was valid, the decryption was correct and the student was entitled to watch. Every check passed, and the copy was made anyway.
Screen-capture blocking helps only partly here. Windows' option to exclude a window from capture stops software on the computer from reading the picture. It can't stop the picture leaving through the video port, because the monitor has to receive it to show it. Android's secure-window setting goes further and keeps content off displays that aren't secure, but it relies on the same HDCP check, so it shares HDCP's gaps. Our guide to screen capture on Windows and Mac explains where those operating system controls stop.
HDCP, and why capture still happens
HDCP encrypts the link between a device and a display, after checking that the display is licensed to receive protected video. Equipment that follows HDCP's rules refuses to record a protected signal. Our explainer on HDCP and screen mirroring covers versions and errors in detail. For leaks, four gaps matter:
- The player never asked. HDCP applies only when the content or player requests it. Many course players, web pages and desktop apps send lectures to an external screen as ordinary, unencrypted pictures. Often that's deliberate, because requiring HDCP breaks classroom projectors and older monitors.
- The whole desktop isn't protected. Ordinary desktop output carries no HDCP. If a lecture plays in a window that isn't using protected playback, the cable carries it in the clear.
- Not all equipment follows the rules. HDCP depends on every device in the chain behaving as licensed, and non-compliant equipment exists. A player can only trust what the other end of the cable reports.
- HDCP's own secrets have leaked. An HDCP master key was published online in 2010, which is why HDCP raises the bar rather than closing the door.
Deliberately getting round HDCP to copy paid lectures can also be an offence. Under section 65A of the Copyright Act, 1957, circumventing an effective technological measure with intent to infringe carries up to two years in prison and a fine. This is general information, not legal advice.
Who should worry most
For most coaching lectures, a second phone pointed at the screen is cheaper and good enough. Capture takes more effort: a computer or set-top box, the capture hardware and something to record on. What it offers in return is quality, with sharp text, true colours and clean audio. So the risk depends on how much quality matters to your content.
| Content | Why capture appeals |
|---|---|
| Lectures with dense visual detail: spreadsheets in CA and ACCA classes, code, design software, long derivations | A camera copy blurs the detail; a capture keeps it readable |
| Premium recorded courses sold on to others | Resellers can advertise a clean copy as "original quality" |
| Live classes and events | A capture can feed a live re-stream to a paid channel while the class is still running |
| Films, series and live sport on OTT services | Picture quality is part of what subscribers pay for, so a clean copy is worth far more than a camera copy |
For EdTech and OTT teams, capture is a reason to treat TV apps, casting and laptops on big screens as a separate risk. Don't assume phone-level protection applies everywhere.
Capture hardware also has honest uses. Teachers use it to bring a classroom camera, a document camera or a tablet into a live class, so owning one proves nothing. What matters is whether your paid lectures pass through one.
How to tell a leak came from capture, not a camera
A leaked copy often shows how it was made. These clues help you decide where to look first:
| Clue in the leaked copy | What it suggests |
|---|---|
| Perfectly straight edges, with no glare, tilt or rippling patterns from a filmed screen | A digital copy, from capture hardware or screen-recording software, not a camera |
| Player controls, a mouse pointer, a taskbar or a pop-up notification in the frame | The whole screen output was recorded, not just the video |
| Clean audio with no room noise, fan hum or echo | Sound taken from the device, not picked up by a microphone in the room |
| A picture size that exactly matches a laptop screen or TV output | A recording of the display signal |
| A sharp, fully readable watermark | The easiest kind of leak to trace |
You often can't tell capture hardware from screen-recording software just by looking, and you don't need to. Both point to a laptop, desktop or TV path rather than a phone, which narrows where the gap is and which accounts to check. Our guide to camcording with a phone camera describes what the camera route looks like by comparison.
What deters and traces HDMI capture
Deterring it
- Ask for protected output where it matters. Requiring HDCP on external displays for paid playback blocks compliant capture devices. The cost is HDCP errors on older projectors, monitors and adapters, so decide how you will support study centres and classrooms first.
- Notice external displays. Apps can usually tell when another display is connected. What you do with that signal is a policy choice: allow it, warn, or block paid lectures. Plan exceptions for study centres and for students who need a larger screen.
- Move laptop viewing into an app. An installed app can use more of the operating system's protections than a browser tab.
- Tell students the copy is personal. Deterrence works only when people know a leak can be traced to them.
Tracing it
Here capture works in your favour. A capture records the screen pixel for pixel. A visible watermark with the student's details arrives sharp and readable, unlike the smeared marks in many camera copies. Pirates know this, which is why a captured leak may be cropped, blurred or covered in places. Invisible watermarks matter for exactly that case, as our guide to visible and invisible video watermarking explains.
Then confirm the lead against account records: which account played the leaked lectures, on which devices, and shortly before the copy appeared. If your platform records external display events, those records narrow it further. Timing helps with live classes: a re-stream that appears while a class is still running points to an account that was watching at that moment. Keep the leaked file exactly as you found it, because re-saving or trimming it can make a mark harder to read.
Questions to ask a vendor
- When a laptop running your desktop app or web player is connected to an external display, is paid playback protected on that output?
- What does a student with an older projector or monitor see, and can study centres be handled differently?
- Will you record your own player through a capture device and show us whether the student's details stay readable?
- If the visible mark is cropped out of a captured copy, can the copy still be traced to an account?
- Do TV apps, casting and mirroring follow the same rules as phones?
- Which events, such as an external display connecting, appear in account records we can export?
Upclass gives institutes branded apps in their own name on Android, iOS, Windows and Mac. VidSafe protects the lectures in them with VidSafe proprietary encryption, screen- and camera-recording detection, dynamic watermarking, account-sharing prevention and RASP. VidSafe adds visible and invisible watermarks that are extremely hard to remove, even after heavy re-encoding, so a leaked copy can be traced back to the account it came from. See Upclass plans and pricing.
Frequently asked questions
Can an HDMI capture card record DRM-protected video?
A capture card that follows HDCP's rules won't record a signal protected by HDCP. But many players don't request HDCP for every output, ordinary desktop output isn't protected at all, and equipment that ignores HDCP exists. DRM itself can't see what happens on the cable, which is why traceable watermarks matter for this route.
Does HDCP stop screen recording?
No. HDCP protects only the cable between a device and a display. Screen-recording software runs inside the device, before the picture reaches the cable, and is handled by the operating system's own capture protections, if the app uses them. A phone camera pointed at the screen sits outside both.
Can an app detect a capture card?
Not reliably. An app can usually tell that an external display is connected, and some platforms report whether that output is protected. A capture device, though, can look like an ordinary monitor. Treat external displays as a signal to set rules around, not as proof of piracy.
Is it illegal to bypass HDCP in India?
Under section 65A of the Copyright Act, 1957, it is an offence to circumvent an effective technological measure with the intention of infringing copyright. That can include HDCP or DRM. It is punishable with up to two years in prison and a fine. Sharing the copies also infringes copyright. This is general information, not legal advice.
