What Is Xtream Codes? A Complete Guide to Xtream Codes API
- trekyteky
- Aug 15
- 7 min read
If you've bought an IPTV subscription and your provider sent you a server URL, a username, and a password instead of one long playlist link, you've been given Xtream Codes login details. This guide explains exactly what that means, where the name comes from, and how to use it correctly.
Quick Answer: What Is Xtream Codes?
Xtream Codes started as a specific company and piece of IPTV management software. Today, in IPTV apps and setup guides, "Xtream Codes" commonly refers to an API-based login or connection method that uses a server URL, username, and password. Instead of pasting one messy playlist link into your best IPTV player, you enter three separate fields: a server URL, a username, and a password, and your player pulls your live channels, movies, series, and TV guide from those credentials in one connection.
It is not an app you download, and it is not a channel provider. It is a connection method that allows a compatible IPTV player to communicate with an IPTV service's server and request the information that the service makes available.
What Are Xtream Codes, Really?
The name traces back to Xtream-Codes Ltd, a company registered in Bulgaria and founded by two Greek developers, which sold panel software starting around 2015 that let IPTV resellers manage subscribers, channel lists, and billing. In September 2019, Italian authorities coordinated a large multi-country operation; raids took place in Italy, Bulgaria, Greece, France, Germany, and the Netherlands targeting the platform because it was central to large-scale pirate IPTV distribution.
That part of the story gets repeated constantly. What most articles leave out: the legal case was later overturned. Italy's Court of Appeals of Naples ruled in 2021 that there was no evidence Xtream Codes Ltd itself had acted unlawfully, and Italy's Supreme Court subsequently upheld that finding and ordered the seized assets returned. In other words, the software company was a middleware vendor; what any individual reseller did with it was a separate question from whether the software itself was illegal.
The original Xtream-Codes company never came back after 2019. What did survive is the API format it made popular. Because so many providers and player apps had already built around that same server-URL-plus-username-plus-password structure, the format kept getting used long after the original company disappeared, which is why "Xtream Codes" today almost always refers to the login method, not the defunct company.
How Does Xtream Codes API Work?
When your provider sets up your subscription, they generate an Xtream-style account on their server. Your player app sends your username and password to that server's API endpoint, and if the credentials check out, the server hands back a structured response: your live channel list sorted into categories, your VOD library, your series library, and program guide data all in one authenticated exchange, rather than as one flat text file you have to parse yourself.
This differs from an M3U playlist, which is a playlist format that can contain stream URLs and related metadata. An M3U playlist can be supplied through a URL or file, while an Xtream-style connection uses API credentials to communicate with a compatible service.
What Information Is Used With Xtream Codes?
Every Xtream Codes login comes down to three pieces of information, all supplied by your provider:
Server URL (host): the address of your provider's server, usually including a port number, e.g. http://example.com:8080.
Username: identifies your specific subscription on that server.
Password: authenticates that you're allowed to use that username.
None of these are things you invent or generate yourself; they come from whichever service you've subscribed to. In some IPTV setups, the server address, username, and password can be represented within an M3U URL. However, this depends on how the service generates its playlist, so an M3U URL should not automatically be assumed to contain separately usable Xtream Codes credentials.
Xtream Codes vs M3U
Both connect you to the same underlying service. The difference is how your player talks to the server and how much structure it gets back automatically.
Feature | M3U Playlist | Xtream Codes API |
What it is | A text file/link listing stream URLs | An authenticated API login |
How it's entered | One playlist URL | Server URL + username + password |
Login step | None (credentials, if any, are embedded in the URL) | Required authentication |
VOD/Series organization | Depends entirely on what the file includes | Typically structured automatically by the API |
EPG handling | Usually a separate XMLTV URL | Often pulled automatically with the login |
Setup difficulty | Simple, single link | Three fields, slightly more setup |
Compatibility | Universal works with almost any media player | Depends on the app supporting the Xtream Codes format specifically |
Best for | Simple players, older devices, backup access | Full-featured IPTV players wanting organized menus and auto EPG |
Neither format is universally "better" what you actually get (VOD library, working EPG, catch-up) depends on how your specific provider built their service, not just which login method you choose.
What Is EPG in Xtream Codes?
EPG stands for Electronic Program Guide, the "what's on now and next" data you see under a live channel. With Xtream Codes, EPG data is typically returned as part of the same authenticated connection, so your player can usually display the guide without you configuring a separate XMLTV URL. Our EPG explainer goes deeper into how the guide itself works and why accuracy varies by provider.
Which IPTV Players Support Xtream Codes?
Support for the Xtream Codes login format is common but not universal, so it's worth checking the app itself before assuming.
IPTV Smarters Pro: Offers a dedicated "Login with Xtream Codes API" option on its login screen, alongside M3U URL and manual entry. Our IPTV Smarters Pro setup guide covers this step by step.
GSE Smart IPTV: According to its official Google Play listing, GSE Smart IPTV Pro supports the Xtream-Codes API directly, including automatic live and VOD playlist loading with EPG and movie info.
Kodi: This is where a lot of guides get sloppy. Kodi is PVR IPTV Simple Client add-on works with M3U and XMLTV, not a native Xtream Codes login screen. If your provider only gives you Xtream Codes credentials, you'll typically need to generate the equivalent M3U and XMLTV URLs from your provider's panel first, then feed those into Kodi's PVR client.
Always confirm current support in the app itself app features change over time, and an old blog post claiming compatibility isn't the same as checking today's version.
Common Xtream Codes Problems
Most Xtream Codes login failures come down to a handful of repeatable causes:
Wrong server URL format. Missing the port number, or adding a trailing slash the server doesn't expect, is the single most common cause of failed connections.
Expired or incorrect credentials. Username/password typos, or a subscription that's genuinely lapsed.
Connection limits. Many providers cap how many devices can stream simultaneously on one account if you're logged in elsewhere, a new login may fail or kick the other device.
Missing EPG despite a working connection. This is usually a provider-side gap in program data, not something you can fix on the player.
If you've followed our IPTV installation guide and the connection still doesn't work, double-check the exact server information provided by your service. If you're using a Firestick, our IPTV on Firestick guide explains the device setup in more detail.
Are Xtream Codes Safe?
The login format itself carries no inherent security risk it's a standard client-to-server authentication method, similar in principle to logging into any account with a username and password. The real safety considerations are about how you use it:
Don't share your server URL, username, and password publicly. Anyone with those details can use your subscription, and providers often ban accounts if they detect unusual simultaneous use.
Be cautious with unfamiliar third-party apps that ask for your Xtream Codes credentials for "extra features"; only enter them into a player you trust.
A server URL using plain HTTP rather than HTTPS isn't automatically a scam, since this is common among IPTV middleware, but keep the same general caution you'd use with any login you didn't create yourself.
Are Xtream Codes Legal?
The Xtream Codes login format is not, by itself, illegal; it's a technical standard, comparable to any other API login structure. Legality depends entirely on the service and content behind it: whether the provider is authorized to distribute the channels and content it's streaming, the laws in your country, and how you personally use the subscription. Using a properly licensed IPTV service through Xtream Codes credentials is no different, legally, than using an M3U link from a licensed provider. Streaming unauthorized copyrighted content is the issue, not which login method delivers it.
Frequently Asked Questions
Is Xtream Codes an app?
No. It's a login format used inside player apps like TiviMate, IPTV Smarters Pro, or GSE Smart IPTV, you select "Xtream Codes" as the login type and enter credentials from your provider.
Can I generate my own Xtream Codes login?
No. The server URL, username, and password come from whichever IPTV service you've subscribed to. There's no legitimate way to generate working credentials yourself.
Does Xtream Codes work on Kodi?
Not through a native login screen. Kodi's PVR IPTV Simple Client uses M3U and XMLTV, so Xtream Codes-based subscriptions usually need to be converted to those formats first, either through your provider's panel or a converter tool.
Is Xtream Codes better than M3U?
Neither is universally better. Xtream Codes typically brings more automatic organization and EPG handling; M3U is simpler and works with almost any player. What actually matters most is what your specific IPTV service provides through each format.
Final Takeaway
Xtream Codes commonly refers to an API-based IPTV connection method that uses a server URL, username, and password. It is not an IPTV player and does not itself provide TV channels or other content.
The main benefit of an Xtream-style connection is that compatible players can request structured information from the service, which may include live TV, VOD, series, categories, account information, and EPG data.
M3U, on the other hand, is a playlist format. Both approaches can be used with IPTV players, but their features and compatibility depend on the service and application.
Once you understand the difference between Xtream Codes, M3U, IPTV players, IPTV services, and EPG, IPTV setup becomes much easier to understand.
Comments