How to Protect Course Videos in Tutor LMS

If your course videos can be copied, shared or embedded on another site, people who never paid can watch them. No website can make video completely impossible to record, but you can make casual copying and sharing hard. This guide combines Tutor LMS settings, Tutor LMS Pro features and video host settings into a practical plan.

Know what you are protecting against

• Direct links to video files being shared.
• Embedding your video on someone else's site.
• Downloading with browser tools or extensions.
• Account sharing: one paid login used by many people.
• Screen recording, which no web technology fully prevents.

Aim to stop the first four and make the fifth not worth the effort.

1. Do not self-host paid videos as plain files

Tutor LMS supports HTML5 uploads and external URLs, but a plain MP4 file has a URL anyone can copy. For paid content, use a host with access controls through the YouTube, Vimeo or embedded source options. See video sources in Tutor LMS.

2. Use privacy settings at the video host

• Vimeo: set videos to "Hide from Vimeo" and restrict embedding to your domain. Then the video only plays when embedded on your site.
• Dedicated video hosts (for example Bunny Stream or Wistia): use domain restrictions, signed or token-authenticated URLs where available, and disable downloads. Add them with the Embedded source.
• YouTube: unlisted videos are not private. Anyone with the link can watch. Use YouTube for previews and free lessons, not for your paid core content.

3. Use the Tutor player

Under Settings > Course > Video, Use Tutor Player for YouTube and Use Tutor Player for Vimeo replace the provider's default controls with Tutor LMS's player. It gives a consistent look and hides some provider links, though it is not a security feature on its own.

4. Turn on Tutor LMS Pro content security

Tutor LMS Pro adds a Content Security section to the settings with two options:

• Prevent Hotlinking: "Use hotlink protection for your self-hosted images and videos", so other sites cannot embed your files directly.
• Copy Protection: "Prevent right-click and copy actions on your website", which stops casual copying of text and media.

These help with self-hosted media and casual copying. Determined users can bypass right-click blocking, so combine it with the other measures.

5. Keep lessons behind enrollment

Lessons are only available to enrolled students unless you deliberately make a lesson a free preview (Course Preview add-on) or the course public. Check that paid courses are not set to "Make This Course Public", and that you have not enabled previews on lessons you want to protect.

6. Limit account sharing

Shared logins are often a bigger leak than downloads. Options:

• Limit concurrent sessions per user with a security or session plugin.
• Watermark videos with the student's name or email if your video host supports dynamic watermarks.
• Monitor unusual login patterns.

See stopping account sharing.

7. Protect downloadable files

Lesson attachments are linked files. For sensitive PDFs, use a document viewer that disables download, or store files privately and serve them through a script that checks enrollment.

A sensible setup for most paid courses

1. Host paid videos on Vimeo (domain-restricted) or a secure video host.
2. Use YouTube only for previews.
3. Enable the Tutor player and, with Pro, Prevent Hotlinking.
4. Limit concurrent logins.
5. Accept that screen recording is possible, and compete on value, updates and support.

Frequently asked questions

Can Tutor LMS stop screen recording?

No web platform can fully stop it. DRM-protected video hosting raises the bar but adds cost and complexity.

Is Copy Protection bad for accessibility?

Blocking copy and right-click can frustrate legitimate users and assistive tools. Use it where it matters, and test with your audience.

Want a security review of your course content? See our security services.