If you have ever received IPTV credentials, you have almost certainly encountered Xtream Codes. It is the most widely supported IPTV login format in use today — a simple set of three values: a server address, a username, and a password. Those three values connect your player to live TV, video on demand, series, and an EPG TV guide all in one go. This guide explains exactly what Xtream Codes is, what content it unlocks, and how to use it in any player.
What exactly is Xtream Codes?
Xtream Codes started as the name of widely used IPTV panel software that providers used to manage subscriptions and serve content. Over time the name became shorthand for the underlying login API it popularised — a standard that most IPTV players now support natively. When someone says "Xtream Codes login," they mean three values that authenticate you with a server and determine what your account can access:
- Server URL — the address of the content server, for example
https://example.comorhttp://example.com:8080. - Username — your account identifier on that server.
- Password — your account password on that server.
Your player sends these three values to the server's API, the server verifies your account, and in return your player receives everything it needs to build a full channel list, VOD library, series catalogue, and TV guide.
What does a Xtream Codes connection give you?
A single Xtream Codes connection unlocks several content types at once:
- Live TV — a categorised list of channels, each linked to a stream that plays through your credentials.
- Video on Demand (VOD) — movies browsable on demand, with posters and descriptions if the provider supplies them.
- Series — TV series organised into seasons and episodes, complete with artwork and episode metadata.
- EPG (Electronic Programme Guide) — the on-screen TV schedule showing what is on now and next on each channel.
- Catch-up — time-shifted access to recently aired content, if your provider supports it.
Compare that to a plain M3U link, which is a flat list of live stream URLs with no built-in VOD, no series structure, and no integrated EPG. See the M3U vs Xtream Codes guide for a full side-by-side comparison.
How to add Xtream Codes credentials in a player
- Open your IPTV player and go to the "Add Playlist" or "Add Source" screen.
- Choose the Xtream Codes option — also labelled "Xtream API" or "Login" in some players. Do not choose the M3U URL option.
- Paste your server URL, username, and password into the three fields provided.
- Save. The player contacts the server API, fetches your full content library, and assembles your channel list and TV guide automatically.
Most major IPTV players support this format natively: TiviMate, IPTV Smarters Pro, Smarters Lite, GSE Smart IPTV, and many more. The setup flow is almost identical across all of them. For player-specific walkthroughs, see the add Xtream Codes to any player guide.
Xtream Codes vs a plain M3U link
A plain M3U link is a text file listing stream URLs. Your player downloads it once, reads the list, and plays each entry. If the file URL changes, the player gets nothing and you re-enter the link manually on every device. There is no server-side account, no VOD library, no series, and typically no built-in EPG.
An Xtream Codes connection is an ongoing API relationship. The server knows your account, tracks what you can access, and responds to real-time queries — fetch tonight's channel list, retrieve the VOD catalogue, load the EPG for the next three days. The connection is dynamic rather than a one-time file download, which makes it more reliable and considerably richer.
The problem with changing credentials — and how middleware solves it
Providers do change their server URL, username, or password — for maintenance, a server migration, or subscription renewal. Each change means updating every device manually: go into the player app, delete the old source, and type in the new values. On a household with multiple TVs, streaming sticks, and phones, that is a significant chore every time.
A middleware service solves this at the root. With iptv.domains, you connect your provider's Xtream credentials once inside your dashboard. Your devices all point to one permanent Xtream URL that belongs to your middleware account. When your provider's details change, you update them in one place and every device adapts automatically — no player is ever touched again. See the permanent IPTV URL guide to see how this works in practice.
James's provider issues new credentials after a server migration
James's IPTV provider moves to a new server and sends a completely new server URL, username, and password. Without middleware he would need to update three televisions, a tablet, and a phone — finding the right settings screen in each player app, deleting the old source, and typing the new values carefully. Because he routes his IPTV through iptv.domains, all five devices connect to his one permanent Xtream URL. James updates his provider's credentials inside the dashboard once, and every device keeps working without a single player being touched.
Does every player support Xtream Codes?
Nearly all modern IPTV players do. When you go to add a new source and the player offers a choice between an M3U URL field and a Xtream Codes (or Xtream API, or Login) option, that confirms support. If your player only shows an M3U field, most Xtream-based services can still generate an M3U URL from your credentials as a fallback — but the native Xtream API connection is almost always the better choice when it is available, because it gives you VOD, series, and EPG without any extra configuration.