What is Xtream Codes?

Updated June 2026

The login format behind most of IPTV

When you subscribe to an IPTV service, the provider has to give your player app a way to fetch your channels. The Xtream Codes API became the de facto standard for this. With three credentials —

• Server URL, like http://example.com:8080
• Username
• Password

— a player can request everything in a structured form: live channels grouped into categories, channel logos, EPG (program guide) data, and the provider's full movies and series catalog with posters, descriptions, and episode lists.

That structure is the difference between a real TV experience and scrolling a flat playlist. It's why dedicated players ask for Xtream credentials rather than just a playlist link — and why we recommend Xtream login over M3U whenever your provider offers both (details: M3U vs Xtream Codes).

A short history (and why the name is confusing)

Xtream Codes was originally a company that sold panel software — the back-office system IPTV providers use to manage subscribers and streams. Its API became so widespread that virtually every IPTV player implemented it.

In September 2019, the company was shut down in a coordinated European law-enforcement operation targeting illegal IPTV distribution. But by then the API format was an industry standard implemented far beyond the original company's software. Modern provider panels still speak the same protocol, so the name stuck: today, "Xtream Codes" refers to the login format, not the defunct company.

Is it legal?

Three separate questions get mixed up here:

• The API format: legal. It's a communication protocol, like HTTP or RSS.
• Player apps that support it (JBigs TV, TiviMate, IPTV Smarters, and others): legal software. They contain no content — they're empty TVs waiting for an antenna.
• Your provider: this is where legality is decided. Providers that license their content are legal. Providers streaming channels without rights are not legal to use in most jurisdictions — and using one is the user's responsibility, not the player's.

How the API works under the hood

For the curious: an Xtream panel exposes a simple HTTP endpoint, typically player_api.php. Your player calls it with your username and password and gets JSON back — your account status and expiry date, category lists, channel lists with stream IDs, EPG data, and VOD catalogs. The player then builds stream URLs from those IDs and plays them with its media engine. Five minutes after entering three credentials, your player has reconstructed your provider's entire catalog. That's the magic the M3U format can't match.

Using Xtream Codes on Windows

You need a player that speaks the API. On Windows, JBigs TV is built around it: enter your three credentials and live TV is free forever, with the EPG guide, movies, series, multi-view, and pause & rewind available in Pro. Setup walkthrough: how to set up Xtream Codes on Windows.

Related: M3U vs Xtream Codes · Set up Xtream Codes on Windows · Best IPTV player for Windows