Before you start
- Any IPTV app offering an Xtream Codes or Xtream API option
- Your IPTVNinja activation message
Nothing to sign in with yet? Ask for a 24-hour test line, or read what the plans cost first.
Doing it, one step at a time
Find the Xtream option in your player
IPTV Smarters calls it Login with Xtream Codes API. TiViMate calls it Xtream Codes login. Most others shorten it to Xtream or simply API. Where a player offers both this and an M3U field, take this one — it retrieves the guide and the on-demand library, and the playlist route generally does not.
Put in the server address
It wants the complete address, http:// leading it and the port closing it, in the shape http://example.com:8080. Nothing whatsoever follows the port. More failed logins trace back to this one field than to everything else combined, and it fails in a manner indistinguishable from a wrong password, which is how people come to spend an hour investigating the wrong thing entirely.
Know which value does what
The server address says which machine to talk to and on which port. The username identifies your line on it. The password proves the line is yours. That is the whole model, and it is why the same three values behave identically in every player: none of them is app-specific, and no app can hold them hostage. Understanding that is what turns a failed login from a mystery into a two-minute check of one field.
Put in the username and password
Take both directly from the message and watch the capitalisation, because they are case sensitive. Whatever you enter as a profile name is decorative and has no effect on anything. Where you are typing with a television remote, consider doing the first setup on a phone where pasting is possible, then repeating it on the television once you know for certain the values are right.
Save and let it synchronise
Channels, on-demand content and the programme guide download by themselves. Now do the part almost nobody does: keep those three values somewhere you can find them again. Adding a second television later takes under a minute with them to hand, and a message to support without them.
Understand what you are actually holding
Those three values are your subscription. Not the app, which is free and replaceable, and not the device. Anyone who has them can use your line, which is why they should not be posted in forums or shared around, and it is also why you are never locked into a particular player. If an app stops being maintained, you take the credentials elsewhere and lose nothing.
Test the credentials somewhere easy first
Before fighting a television remote, put the same three values into the browser player or the desktop app, where you can paste rather than type. If they work there, you know for certain the account is fine and the problem on the television is a typing error. If they fail there too, the account itself needs looking at and you have saved yourself an argument with a remote control.
When it does not work
The app insists on an M3U URL instead
Certain older players speak nothing but playlists. Feed them the M3U link out of that same activation message; it holds precisely the same line, wrapped differently. The M3U page explains what to do from there, and nothing about your subscription has to be altered to accommodate it.
Login rejected on one device but fine on another
Compare the two character by character rather than assuming, because one of them has a typing error and it is nearly always the one entered with a remote. Where both are genuinely identical, check whether the plan's simultaneous stream limit is already in use elsewhere in the house.
It worked, then stopped, with no change made
Check the subscription end date first, because an expired line and a broken login are indistinguishable from the sofa. After that, some internet providers block particular server addresses; testing the same credentials over mobile data settles which of the two you are looking at in about thirty seconds.
Two devices, one works and one does not, values identical
Check the simultaneous stream limit before anything else, because a plan at capacity refuses the next connection in a way that looks exactly like a rejected password. A one-stream plan with a television already playing will do this every time, and the fix is either turning the other device off or moving up a tier.
Other apps the same credentials open
IPTV Smarters Pro
IPTV Smarters Pro setup for Firestick, Android, Samsung, LG, Apple TV and desktop. Sign in with Xtream Codes, load the guide and fix the usual errors.
TiViMate
Adding your subscription to TiViMate on Android TV, a Firestick or an Android box: the Xtream login, the guide, and what Premium is actually for. 25,000+
Every guide
The full list of hardware and apps, on one page.
Try it on your Xtream Codes login before you pay
A test line costs nothing and settles whether the channels you want are really there. Plans open at $15 a month for the same 25,000+ line-up.
What people ask about the Xtream Codes login
Is Xtream Codes legal?
The format is nothing more than a convention for handing over a username, a password and a server address, and perfectly ordinary applications throughout every app store rely on it. There is nothing restricted or unusual about it whatsoever. Where the legal question actually lives is in whether the service sitting behind those credentials holds the rights to distribute what it carries, and our article on legality deals with that properly.
Can I change my password?
Ask support and we reissue the line. It is worth doing if you ever shared the credentials with someone and would rather not have. Bear in mind every device then needs the new values entered again, so do it at a moment when you can get to all of them.
What is the port number for?
It tells the player which door to knock on at that server. Different providers use different ports and there is no universal one, which is why guessing does not work and why the address must be copied exactly as issued. Leaving it off is the commonest single mistake in this entire process.
Can I use these credentials in more than one app?
As many as you like, on as many devices as you like. The credentials are not tied to an app or a device — only the number of simultaneous streams is limited. That portability is the main practical advantage of the Xtream format and the reason accounts are issued this way rather than as a proprietary app login.
What if I lose them?
Message support and we resend them, generally within minutes. It is not a problem, merely a delay. Saving them somewhere retrievable when they first arrive removes even that, and takes about fifteen seconds at a point when you have them on screen anyway.
Is it safe to keep these in my password manager?
Safer than leaving them in a chat thread, which is where most people leave them. A password manager is exactly the right place: they are credentials in the ordinary sense, they do not expire between renewals, and having them to hand turns setting up a new device into a one-minute job.
Does the server address ever change?
Occasionally, if capacity is moved or a route is replaced. We tell you when it does and the username and password stay the same, so it is a one-field edit in each player rather than a fresh setup. It is not something that happens often.