Most internet radio stations want to be heard by as many people as possible, but there are times when you need to keep a stream private or lock down access, such as during testing, for a members-only channel, or a private event. Just as important is protecting the source credentials that let people broadcast to your server. This guide covers both securing who can listen and securing who can broadcast.
Two kinds of security to think about #
It helps to separate two distinct concerns, because they are handled differently:
- Source security: protecting the password that lets someone broadcast to your server.
- Listener access: controlling who is allowed to tune in and hear the stream.
Protecting your source (broadcast) password #
Your source password is what lets broadcasting software connect and put audio on air. If it leaks, someone else could hijack your stream. Keep it safe by:
- Using a strong, unique password rather than something easy to guess.
- Never sharing it publicly or embedding it where listeners can see it.
- Changing it if you suspect it has been exposed, or after a guest DJ no longer needs access.
Restricting who can listen #
If you want a private stream, there are a few approaches depending on your setup:
- Do not publish the stream: keep it out of directories and off your public site so only people with the link can find it.
- Password-protected listen page: place your embedded player behind a protected page or a members area on your website.
- Limited sharing: share the direct stream link only with the people who should have it.
These methods let you keep a stream effectively private for testing, previews, or a closed group.
Use HTTPS for players #
When you embed a player on a secure (HTTPS) website, use the secure version of your stream link where available. This avoids mixed-content warnings and keeps the listening experience clean and trustworthy for visitors.
Good security habits #
- Review who has your source password periodically.
- Rotate the password after events with guest broadcasters.
- Keep private stream links out of public posts.
- Use strong passwords everywhere in your radio account.
Troubleshooting #
- Someone else broadcasting on your stream: change your source password immediately.
- Private stream showing publicly: remove it from directories and your public pages.
- Player blocked on a secure site: switch to the HTTPS stream link.
Need help? #
If you want to set up a private or members-only stream, our support team can suggest the best approach over live chat.
