M3U playlists and Xtream logins, explained
When a provider welcomes you, the email usually contains one of two things: a single long link, or three separate lines labelled server, username and password. They look different, and they behave differently inside a player. This guide explains both so you can recognise what you were given, enter it correctly and know what to expect.
The two options in one table
| M3U playlist | Xtream login | |
|---|---|---|
| What you receive | One web address (or a file) | A server address, a username and a password |
| What it contains | A list of channels with their stream addresses | Access to the provider's server, which can supply channels, films, series and often a guide |
| Typical content | Live channels | Live channels, films, series, catch-up information |
| Guide | Separate address, if any | Usually offered by the same server |
| Account details such as expiry | Not available | Often reported by the server |
| Easy to share by accident | Yes: the address often contains your password | Yes, but the three parts are easier to see for what they are |
Neither is better in every case. The right one is the one your provider supports well, and when they offer both, the login usually carries more.
What an M3U playlist is
M3U is an old, plain-text playlist format that began with audio players. For television, a playlist is just a text file that begins with #EXTM3U, followed by pairs of lines: an information line and an address.
#EXTM3U
#EXTINF:-1 tvg-id="harbour.news" tvg-name="Harbour News" tvg-logo="https://example.com/logos/harbour.png" group-title="News",Harbour News
https://example.com/stream/1001
#EXTINF:-1 tvg-id="lantern.films" tvg-name="Lantern Films" group-title="Films",Lantern Films
https://example.com/stream/1002
Everything on the #EXTINF line is information about the entry that follows:
-1means the length is unknown, which is normal for live television.tvg-idis the key that connects the channel to a programme guide. It must match a channel identifier in the guide file for the schedule to appear.tvg-nameandtvg-logogive a name and a picture.group-titleis the category the player uses to sort the list.- The text after the comma is the name that is displayed.
That is the entire format. A playlist file knows nothing about your account; the account is enforced by the stream addresses, which often carry a username and a password in them. A playlist can be provided as a web address that the player fetches again whenever it refreshes, or as a file you import once. The address version keeps itself up to date; the file version is a snapshot.
You can check a link is an M3U playlist by opening it in a browser or a text editor. If you see #EXTM3U and then lines like those above, it is. If you see a web page, a login screen or a message, it is not a playlist.
What an Xtream login is
"Xtream" refers to a widely used style of server software, and to the interface it exposes. You give your player three things:
- The server address, for example
http://example.com:8080. It often includes a port number after the colon. - A username.
- A password.
The player then talks to the server directly, the way an app talks to a service. Instead of reading one big text file, it asks questions: which categories exist, which channels are in this category, which films, which series, which episodes, what is the stream address for this one. The server answers with structured data. That is why a login can carry more than a playlist can: it is a conversation, not a list.
Because the server knows who is asking, it can also report things about your account on request, such as when your subscription ends and how many simultaneous connections it allows. Many providers also give a separate programme guide address in the same style, so the player can fetch the schedule without a second link from you.
The part that surprises people: one login, several links
Most providers that run an Xtream-style server can produce an M3U link from the same login. You will recognise it because the address contains your credentials, usually like this:
http://example.com:8080/get.php?username=YOURNAME&password=YOURPASSWORD&type=m3u_plus
This is an M3U link generated from an Xtream login. It carries live channels only, because M3U has nowhere to describe a film library properly. If your player sees such a link, the better move is to add the underlying login instead and get everything.
So the relationship runs one way: an Xtream login can usually produce an M3U link, but an M3U link cannot give you an Xtream login. If you only hold a link, the username and password are right there in the address, and you can read them off. If your link looks like the example above, you do have an Xtream login.
How to tell which you have
Look at what the provider sent:
- Three labelled fields (server, username, password): you have an Xtream login.
- One long address ending in something like
.m3uor containingtype=m3u: you have an M3U link. - A file attached to the email or available to download: you have an M3U file.
- A page in the provider's own app or website showing "playlist", "M3U" or "Xtream" tabs: you probably have both. Take the login.
If you are unsure, ask your provider which they recommend for third-party players. That is a reasonable question and one they should answer.
Entering them correctly
Most trouble comes from small typing mistakes:
- Copy and paste instead of typing. Passwords are case-sensitive, and
l,Iand1look alike. - Include the port. If the server address has one, leave it in.
http://example.com:8080andhttp://example.comcan be different servers. - Keep the scheme.
http://andhttps://are not interchangeable. Use exactly what your provider gave you, or ask whether anhttps://address exists. - Do not add spaces before or after any field. A trailing space is invisible and fatal.
- Programme guide. An M3U playlist may need a separate XMLTV address to show a guide. An Xtream login usually does not.
If the player says the provider did not accept the username and password, check the account is active with the provider before you assume the app is wrong. Credentials that were correct last month may have expired.
Treat both as passwords
Because the address can contain your username and password, an M3U link is a password in disguise. Do not paste it into forums, support emails or screenshots. If you must show a problem to someone, delete the credentials from the address first. If a link leaks, ask your provider to change your password and issue a new one. Keeping your IPTV account secure goes through the habits that help.
Which should you choose?
When you have the choice:
- Choose the Xtream login if you want films, series, catch-up information and an automatic guide.
- Choose the M3U link if the provider only offers live channels, or if you want a simple setup in a player that does not support logins.
- Choose an M3U file if you want a fixed list that does not change, or you are moving a list between apps.
The channels themselves are the same whichever route you take. What changes is how much the player can find out about them.
Where GridTV fits
GridTV accepts both: add a playlist by M3U address, by M3U file from Files or iCloud Drive, or with an Xtream login. If you paste an M3U link that actually belongs to an Xtream login, it offers to switch you to the login so you get films and series as well. GridTV has no channels of its own, so you need a subscription from a provider you chose.
Keep reading
How to choose a legitimate IPTV provider
What a licensed service looks like, the red flags of pirate ones, and where to find lawful options.
Parental controls for IPTV at home
What a provider, your device and an app can each do, and how to layer them.