&password

Sets a password to view a stream or to join a room

General Option! (&push, &room, &view, &director)

Aliases

• &pass

• &pw

• &p

Options

Example: &password=PASSWORD123

Value	Description
(no value given)	prompts you to select a password
(string)	1 to 49-characters long: aLphaNumEric-characters; case sensitive.

Details

To make your stream or your room more secure, you can set a password by adding &password=xxx to the URL.

If no password value is provided via the URL parameter, the system will prompt for one when connecting.

You will want to add the password value to the URL if loading it into OBS.

Passwords apply to both Stream IDs and Room IDs.

Please use alphanumeric-characters only; spaces or other characters may cause the mechanism to fail.

Passwords are CASE-SENSITIVE; mobile users should watch-out for auto-capitalization when entering them.

Hiding passwords from server logs

For additional security, you can place the password in the URL fragment (after #) instead of the query string (after ?). Fragment parameters are never sent to the server, keeping them hidden from Cloudflare logs:

https://vdo.ninja/?push=cam1#p=mysecretpassword

You can combine this with a hash fallback in case the fragment is stripped during URL sharing:

https://vdo.ninja/?push=cam1&hash=99e5#p=secret

If the fragment survives, p=secret is used directly. If stripped, the user is prompted to enter a password, which is then validated against &hash.

See Fragment URL Parameters for more details.

Using hashed passwords

Adding &hash=HASH_VALUE will act as if &password=PASSWORD was added.

The hash is generated from password + salt (salt defaults to the room name). Hash values can be 1-6 characters; shorter hashes are more secure (reveal less about the password) but more prone to false positives.

Use this link to get the hash for the password: https://vdo.ninja/examples/changepass.html

Related

Fragment URL Parameters&hash&codirector&prompt&maindirectorpassword