Xtream Codes Explained: Logins, Ports and Errors
What an Xtream IPTV login actually is, how the three fields work, how it differs from an M3U link, and how to fix the errors that look like account faults.
The short answer
Xtream Codes is a login format, not a company or a product: a server address with protocol and port, a username, and a password. The original panel software was shut down in 2019; the interface outlived it, which is why the same three fields work across unrelated providers and unrelated players.
On this page
If a provider has given you a server address, a username and a password, you have an Xtream Codes login. It is the most common way to connect an IPTV player and one of the least explained — most guides tell you where to type it and stop there. This page covers what it actually is, why the fields are shaped the way they are, and how to read the errors it produces.
3 fields
server address, username, password — that is the entire login
2019
the year the original Xtream Codes panel was shut down; the format outlived it
1 account
your Xtream login and your M3U link are two doors into the same one
What Xtream Codes actually is
Xtream Codes is a login format, not a company and not a product.
It started as the name of a panel software — the back-office system a provider runs to manage accounts, channels and streams. Players learned to talk to that panel through a fixed set of web addresses, and that conversation became a de facto standard. The panel software itself was shut down by European authorities in 2019. The interface survived, because by then too many players and too many unrelated panel systems had implemented it.
The practical consequence is the useful bit: the same three fields work everywhere. A player written by one developer, pointed at a server run by an unrelated provider, using a panel neither of them built, still connects. That is unusual in this industry and it is why nobody should ever be locked into a single app.
It is also why GTAIPTV supplies credentials rather than an app. You take the same three fields into IBO Player, Hot Player, TiviMate, Smarters or anything else that speaks the format. If a player is discontinued tomorrow, you move the login, not the subscription.
The three fields, and what each one is doing
Server address. This is the base URL of your provider's server, including the protocol and usually a port: http://example-server.com:8080. Three rules follow from that.
- Include
http://orhttps://. Whichever your provider specified — they are not interchangeable, and a server listening on one will refuse the other. - Include the port, after a colon, if you were given one. There is no standard port. 8080, 80, 8000 and 25461 all appear in the wild.
- Stop there. No trailing slash, no
/player_api.php, and never your full M3U link. The server address is only the front portion of that link.
Image needed: diagram of one example server address broken into labelled parts — protocol, host, colon, port — with a stop marker after the port, and the same address shown underneath as the front portion of a full M3U link for contrast
Suggested filename: xtream-server-address-anatomy.png — alt text: "Diagram breaking an Xtream server address into protocol, host and port"
Username and password. Both case-sensitive, both issued by your provider, and both effectively your account. They are not an email address and not a password you chose.
That is the whole login. If a player asks for anything else, it wants a different login type.
What the player does with it
Worth understanding, because it explains why an Xtream login gives you more than an M3U link does.
Once connected, the player asks the server a series of questions through standard endpoints: what live channels does this account have, what films, what series, what categories do they belong to, when does the account expire, how many simultaneous connections does it allow.
The difference from an M3U link is structural rather than a matter of features. A playlist link is a download — the player fetches one static file, and everything it will ever know about your account is inside it. An Xtream login is a conversation that continues while you use the app, which is what gives it somewhere to put category folders, poster artwork and film descriptions. An M3U file has no field for any of that.
Guide data is the part that gets over-read, so it is worth stating precisely. An Xtream login can serve guide data over the API, which is why some players show a schedule the moment you log in. An M3U playlist never carries the guide at all — with a playlist, the listings always come from a separate EPG address. Both of those are true at once, and neither means you can skip the EPG link: plenty of players want it entered on their own guide screen regardless of how you logged in, which is why a separate EPG link is issued alongside the credentials. What an EPG is and why it is a separate file covers the mechanics.
M3U vs Xtream Codes, side by side
| Xtream Codes login | M3U playlist link | |
|---|---|---|
| What you enter | Server, username, password | One long URL |
| Live channels | Yes, in categories | Yes, one flat list |
| Films and series | Separate sections | Only if the provider includes them, unsorted |
| Guide data | Can arrive over the API; many players still want the EPG link | Never — the guide is always a separate EPG link |
| Categories and artwork | Folders, posters and descriptions where the provider supplies them | Categories from group-title and logos from tvg-logo, nothing beyond that |
| Account expiry shown in app | Usually | No |
| Connection limit shown in app | Usually | No |
| Works in basic players and VLC | Only if the player supports it | Yes, almost universally |
| Setup effort | Three fields | One field |
Neither is more legitimate than the other, and both point at one account. If a player supports Xtream, use it. If you are pasting a link into VLC or a simple smart-TV player, the M3U playlist explainer covers that route.
Logging in, step by step
Six steps, in order
- Collect the three fields. Server address with protocol and port, username, password.
- Find the Xtream option in your player. TiviMate: Add playlist → Xtream Codes. IPTV Smarters Pro: Login with Xtream Codes API. Elsewhere, look for Xtream, Xtream Codes API or API login — not the M3U or playlist URL option.
- Enter the server address exactly. Protocol and port included, no trailing slash, no
player_api.php, and not your M3U link. - Enter username and password. Both case-sensitive. Check the field before confirming — TV keyboards capitalise the first character silently.
- Let it load. Live, films and series populate as separate sections, with your expiry date and connection limit.
- Add the EPG link separately. The guide is a different address, entered on a different settings screen.
Image needed: screenshot of a player's Xtream Codes login form with all three fields filled in — server address showing the protocol and port, username, password — and no trailing slash on the address
Suggested filename: xtream-login-three-fields.jpg — alt text: "Xtream login form with the server address, username and password filled in"
That last step is where more setups fail than anywhere else. The playlist and the EPG are two different links doing two different jobs, and pasting the playlist into the guide field produces one very specific symptom — every channel works, and the guide is completely empty. It gets reported as a broken subscription several times a week.
Reading the errors
Xtream errors are unhelpfully generic. This is what they usually mean.
| What you see | What it usually is | What to do |
|---|---|---|
| Invalid credentials / authentication failed | A typing error, most often silent capitalisation | Retype rather than copy; check the first character of each field |
| Cannot connect to server | Missing or wrong port, or http used where https was specified | Re-check the server address against what you were given |
| Login works, no channels | Account expired, or a provider-side account issue | Check the expiry date the app shows before troubleshooting the app |
| Worked yesterday, fails today | All simultaneous connections in use elsewhere | Stop other devices and retry — this is not a credential fault |
| Fails only on one device | Wrong protocol, device clock wildly out of date, or DNS on that network | Check the device's date and time; try another network |
| Channels work, guide empty | The playlist link was pasted into the EPG field | Enter the correct EPG address in the guide settings |
The connection-limit case is the one worth internalising. Each connection on your plan allows one device streaming at a time; a household with a three-connection plan and four televisions running will see the fourth refused, and most players describe that as a login failure. Install on as many devices as you like — only your plan's number can stream simultaneously.
Image needed: diagram of a plan with its connections already streaming on other screens while one more device is turned away, with the refusal labelled as the generic credential error a player actually shows
Suggested filename: xtream-connection-limit-error.png — alt text: "Diagram of an extra device refused while every plan connection is streaming"
If the login is fine and playback is the problem, that is a different diagnosis entirely: start with the IPTV buffering guide rather than re-entering credentials.
Keep the credentials to yourself
Those three fields are your account, and there is no second factor protecting them.
Anyone who has them can stream on your plan. That consumes your simultaneous connections, which means the symptom you experience is not "someone is using my account" — it is your own television refusing to log in at eight in the evening. Passing credentials around a family group chat is the usual origin story.
If you think they have circulated, ask your provider to reset them. It takes minutes and invalidates every copy at once.
Where this fits with the rest of your setup
An Xtream login is one of two credential formats, and both come from the same account. Which one you use depends on the player in front of you, not on your subscription.
- TiviMate supports both and works better with Xtream — see the TiviMate setup guide.
- IPTV Smarters Pro supports both, and only fills its Movies and Series sections on an Xtream login — see the IPTV Smarters Pro guide.
- Smart-TV players such as IBO Player and Hot Player usually take a playlist uploaded through their web portal instead.
- VLC and other simple players take an M3U link and nothing else.
The full comparison of which player wants which is in the best IPTV apps and players roundup.
Frequently asked questions
What is Xtream Codes in IPTV?
It is a login format: a server address, a username and a password that a player uses to query your account through a standard set of web addresses. It began as the name of a panel software that providers ran, and it survived as an interface. Today Xtream Codes describes how a player talks to a provider's server, not a company or a product you buy.
Is Xtream Codes a company I subscribe to?
No, and it has not been one for years. The original Xtream Codes panel software was shut down by European authorities in 2019. What outlived it is the API format, which many different panel systems now implement, which is why the same three login fields work across unrelated providers and unrelated player apps. Nobody sells you an Xtream Codes subscription — a provider sells you a service and hands you Xtream credentials for it.
What is the difference between an Xtream Codes login and an M3U link?
They are two ways into the same account. An M3U link returns one flat list of channels. An Xtream login lets the player ask structured questions, so it can present live channels, films and series as separate sections and show your account's expiry date and connection limit. Where a provider offers both, Xtream is the better choice in any player that supports it.
Why does my Xtream Codes login say invalid credentials?
In order of likelihood: a capital letter added silently by an on-screen keyboard, a missing port number after the server address, http entered where the provider specified https, and a trailing slash or a pasted M3U link in the server field. A fifth cause is not a credential problem at all — if every simultaneous connection on your plan is already streaming, a new login can be refused and most players report that as a credential error.
What port do I use for Xtream Codes?
Whatever port your provider specified — there is no universal one. Common values are 8080, 80, 8000 and 25461, but guessing is not a strategy. The port is part of the server address and goes after a colon, as in http://example-server.com:8080. If your provider gave you an address with no port, enter it without one.
Can I use the same Xtream login on several devices?
Yes. The same three fields work in any player on any device, so you can run one app on the television, another on a phone and a third on a laptop from one account. What limits you is the number of simultaneous connections on your plan — one connection means one device streaming at a time, no matter how many devices are logged in.
Is it safe to share my Xtream Codes login?
No. Those three fields are your account. Anyone holding them can stream on your plan, which consumes your simultaneous connections and produces errors that look like a service fault on your own devices. Treat them the way you would treat a password, and ask your provider to reset them if you think they have been passed around.
Getting a login to try this with
Reading about a credential format only goes so far. A 24-hour free trial gives you a real Xtream login and a separate EPG link, which is enough to see the whole shape of it — the three fields, the structured sections, and whether the channels you care about are stable on your own connection at the hour you actually watch. Trials are capped at ten per day, so if the form is closed it reopens tomorrow.
If you already know what you need, the subscription plans page lists the connection tiers, which is the number that decides how many devices can stream at once.
Written by Adam Hursensund. Xtream Codes is a de facto interface standard implemented by many independent systems; it is not a product of GTAIPTV.
Key takeaways
5 points- The server address stops at the port. No trailing slash, no player_api.php, and never your full M3U link pasted into that field.
- There is no standard Xtream port. 8080, 80, 8000 and 25461 all appear in the wild, so use the one your provider gave you rather than guessing.
- A login that worked yesterday and fails today usually means every connection on your plan is streaming elsewhere, not a credential fault.
- An Xtream login gives the player structure an M3U link cannot: separate Live, Movies and Series sections, plus your expiry date and connection limit.
- Those three fields are your whole account with no second factor. Shared credentials show up as your own television refusing to log in at eight in the evening.