# \&password

General Option! ([`&push`](https://docs.vdo.ninja/advanced-settings/setup-parameters/push), [`&room`](https://docs.vdo.ninja/advanced-settings/setup-parameters/room), [`&view`](https://docs.vdo.ninja/advanced-settings/mixer-scene-parameters/view), [`&director`](https://docs.vdo.ninja/advanced-settings/director-parameters/director))

## Aliases

* `&pass`
* `&pw`
* `&p`

## Options

Example: `&password=PASSWORD123`

<table><thead><tr><th width="335">Value</th><th>Description</th></tr></thead><tbody><tr><td>(no value given)</td><td>prompts you to select a password</td></tr><tr><td>(string)</td><td>1 to 49-characters long: aLphaNumEric-characters; case sensitive.</td></tr></tbody></table>

## Details

To make your stream or your room more secure, you can set a password by adding `&password=xxx` to the URL.

If no password value is provided via the URL parameter, the system will prompt for one when connecting.

![](https://2943598173-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MZHXv1G8N0MDxwotaT9%2Fuploads%2FCDBJmkNdnrNHtf410ZJo%2Fimage.png?alt=media\&token=4b4c8714-7497-4a76-aad3-215d36d23799)

You will want to add the password value to the URL if loading it into OBS.

Passwords apply to both Stream IDs and Room IDs.

Please use alphanumeric-characters only; spaces or other characters may cause the mechanism to fail.

{% hint style="info" %}
**Passwords are CASE-SENSITIVE**; mobile users should watch-out for auto-capitalization when entering them.
{% endhint %}

### Hiding passwords from server logs

For additional security, you can place the password in the URL **fragment** (after `#`) instead of the query string (after `?`). Fragment parameters are never sent to the server, keeping them hidden from Cloudflare logs:

```
https://vdo.ninja/?push=cam1#p=mysecretpassword
```

You can combine this with a hash fallback in case the fragment is stripped during URL sharing:

```
https://vdo.ninja/?push=cam1&hash=99e5#p=secret
```

If the fragment survives, `p=secret` is used directly. If stripped, the user is prompted to enter a password, which is then validated against `&hash`.

See [Fragment URL Parameters](https://docs.vdo.ninja/help/privacy-and-security-details/fragment-url-parameters) for more details.

### Using hashed passwords

Adding [`&hash=HASH_VALUE`](https://docs.vdo.ninja/advanced-settings/setup-parameters/and-hash) will act as if `&password=PASSWORD` was added.

The hash is generated from `password + salt` (salt defaults to the room name). Hash values can be 1-6 characters; shorter hashes are more secure (reveal less about the password) but more prone to false positives.

Use this link to get the hash for the password:\
<https://vdo.ninja/examples/changepass.html>

## Related

{% content-ref url="../../help/privacy-and-security-details/fragment-url-parameters" %}
[fragment-url-parameters](https://docs.vdo.ninja/help/privacy-and-security-details/fragment-url-parameters)
{% endcontent-ref %}

{% content-ref url="and-hash" %}
[and-hash](https://docs.vdo.ninja/advanced-settings/setup-parameters/and-hash)
{% endcontent-ref %}

{% content-ref url="../director-parameters/codirector" %}
[codirector](https://docs.vdo.ninja/advanced-settings/director-parameters/codirector)
{% endcontent-ref %}

{% content-ref url="../settings-parameters/and-prompt" %}
[and-prompt](https://docs.vdo.ninja/advanced-settings/settings-parameters/and-prompt)
{% endcontent-ref %}

{% content-ref url="../director-parameters/and-maindirectorpassword" %}
[and-maindirectorpassword](https://docs.vdo.ninja/advanced-settings/director-parameters/and-maindirectorpassword)
{% endcontent-ref %}