How to Protect the Accounts You Use for Streaming
Protect streaming and platform accounts: unique passwords, password managers, two-step verification, signed-in devices and what to do after a breach.
What M3U and M3U8 playlists are, how IPTV player apps use them, what an EPG (electronic programme guide) is, and how to keep playlist and login details secure.
If you use an IPTV player app, you will probably encounter two terms early on: M3U playlist and EPG. One tells the player which channels exist and where to find them; the other tells it what is showing and when. This guide explains both in plain language, along with how to keep your access details safe.
M3U is a simple text-based playlist format. Originally created for music players, it lists media items one after another. In streaming, an M3U playlist lists channels or videos and the address (URL) of each stream.
A typical entry has two parts:
M3U8 is the same format encoded in UTF-8, which supports characters from any language. The extension also appears in HLS (HTTP Live Streaming), where .m3u8 files list the short segments that make up a video stream.
When you add a playlist to a player app, the app:
Because the playlist is downloaded when the app refreshes, your service can update channels without you doing anything.
Some services provide access through a username, password and server address instead of a playlist URL; the player then requests the channel list from the service’s servers. Either way, the principle is the same. IPTVNomad customers will find the steps for each device in our setup guides.
An EPG — electronic programme guide — is the TV listings data that shows what is on now, what is next and what is coming later. In player apps it usually appears as a grid with channels down one side and time across the top.
EPG data is often provided in XMLTV format, an XML file listing programmes with start and end times, titles and descriptions for each channel.
The player has to match each channel in the playlist to the right listings. It usually does this using a channel ID included in the playlist entry that corresponds to an ID in the EPG data. When the IDs match, listings appear next to the right channel.
| Problem | Likely cause | What to try |
|---|---|---|
| Guide is empty | EPG source not added or not yet downloaded | Check the EPG address in the app; refresh the guide |
| Listings on wrong channels | Channel IDs do not match | Refresh; contact your provider |
| Times shifted by an hour or more | Time zone or offset setting | Check device time zone and the app’s EPG time-shift setting |
| Guide out of date | App has not refreshed | Set automatic EPG updates; refresh manually |
A playlist URL or a username and password is effectively the key to your subscription. Anyone who has it can use your account, which may breach your service’s terms and lock you out if device limits are exceeded.
How to protect streaming accounts covers wider account security.
Playlists and player apps are neutral tools. What matters is the source of the content. Only use playlists supplied by services you subscribe to and that have the right to distribute their channels. Free playlists shared online frequently point to unlicensed streams and are a common route for scams. How to choose a legitimate streaming service explains what to look for.
General-purpose media players such as VLC can open M3U playlists directly — useful for testing whether a playlist works independently of a particular app. Streaming on Windows and macOS shows where to find that option.
An M3U playlist is a list of channels and their stream addresses; an EPG is the listings data that fills the programme guide. Player apps combine the two to give you a TV-like experience. Keep your playlist and login details private, refresh the guide when listings look wrong, and only use playlists from services you are authorised to use. For the bigger picture, see what IPTV is and how it works.