An Xtream Codes login is three fields — username, password and server URL — that a player uses to talk to your provider's API rather than downloading a static playlist. Because it is an API, the player gets the programme guide, a separate on-demand section and automatic list updates, none of which a plain M3U link provides reliably.
What the name refers to
Xtream Codes was panel software used by a great many IPTV operators. The software's own history is complicated, but its API format became a de facto standard — and today “Xtream Codes login” simply means “a username, password and server URL in that format”, regardless of what panel a provider actually runs.
When a player offers “Login with Xtream Codes API”, it is offering to speak that format. Your provider either supports it or does not; ours does.
What it gives you that an M3U link does not
| Capability | M3U URL | Xtream Codes login |
|---|---|---|
| Live channel list | Yes | Yes |
| Programme guide | Only with a separate EPG URL | Automatic |
| On-demand as its own section | No — mixed into the channel list | Yes, with posters and descriptions |
| Series organised into seasons | No | Yes |
| Channel list updates itself | Manual refresh in many players | Automatic |
| Account expiry date visible | No | Yes, in most players |
That last row is quietly useful: it means you can see exactly when your subscription ends without asking anyone.
Entering it correctly
Choose the Xtream Codes option
In IPTV Smarters it is “Login with Xtream Codes API”; in TiviMate it is a playlist type. Choosing the M3U option instead is the most common mistake.
Enter the server URL with its port
http://example-server.com:8080— protocol, domain, colon, port. No trailing slash, and nothing after the port.Enter the username and password exactly
Case matters. Paste rather than retype where you can, and watch for a trailing space.
Give it a name
Any label you like. It only matters if you add a second playlist later.
Let it load
Two to three minutes on a first run, because it is fetching channels, on-demand metadata and guide data together.
Putting the whole M3U URL into the server field. The server field takes only http://domain:port — the username and password go in their own boxes.
When a player does not support it
Some players — Roku channel-store apps, several smart TV apps, VLC — accept only an M3U link. That is fine: ask your provider for the M3U URL, which is generated from the same account. Nothing about your subscription changes.
If you also want a working guide in that player, you will usually need the EPG URL as well. Both are covered in EPG and TV guide problems, and the general comparison is on the M3U playlist page.
A note on “free Xtream Codes”
Search results and social posts offering free Xtream Codes logins are one of three things: credentials stolen from a paying customer, an expired trial, or bait for a malicious download.
- Stolen credentials stop working the moment the real owner notices — usually within days.
- Using someone else's account consumes their connection limit and gets their line suspended.
- The sites distributing them are a well-documented route for malware.
A 24-hour legitimate trial costs nothing and carries none of that. There is no version of this where the free codes are the better option.
Frequently asked questions
What is an Xtream Codes login?
A username, password and server URL that a player uses to connect to your provider's API. It brings the programme guide, a browsable on-demand section and automatic list updates.
Xtream Codes or M3U — which is better?
Xtream Codes, wherever the player supports it. It updates automatically and includes the guide and on-demand library; an M3U link often needs an EPG URL added separately.
What goes in the server URL field?
Only the protocol, domain and port — for example http://example-server.com:8080. Not the full M3U link, and no trailing slash.
Are free Xtream Codes safe to use?
No. They are stolen or expired credentials, they stop working quickly, and the sites distributing them are a common malware route. A free trial is the safe equivalent.
Last reviewed September 22, 2026 by The HakunaXTR team · About the team
