EncryptionInspect & diagnose
M3U8 Encryption Detector
Detect explicit EXT-X-KEY tags and explain AES-128, SAMPLE-AES and key URI signals without bypassing access controls.
Tool workspace
Encryption DetectorUse Encryption Detector in your browser with a clean local workflow.
Quickly inspect a public URL and get an actionable decision.
Step 1
Manifest sourceEnter a URL, paste text, or import a fileSimple mode checks a public URL; Pro mode also accepts pasted or uploaded manifests.
M3U8 URLOnly the manifest is requested; key URIs and media segments are never fetched.
Usage boundary
Confirm support and privacy before you run
Check content authorization, source access rules, and browser capability first.
- Detect EXT-X-KEY and common encryption signals
- Separate clear, AES-128 and unknown states
- Provide facts for the next tool choice
- Detection is not decryption
- Does not obtain or guess private keys
- DRM and access rules remain source-owned
Do not enter passwords, cookies, private tokens, DRM keys or media you are not authorized to handle. Tool data should remain in browser storage as described by the plugin.
Workflow
Use this tool safely
Start with the tool, then use the explanation modules when a source is blocked, unsupported, or needs cleanup.
- 01
Provide an authorized manifest
Enter a public HLS URL, or use professional mode to paste manifest text or import a local file.
- 02
Inspect encryption declarations
Run detection, then review EXT-X-KEY, METHOD, URI and IV. Declared key URLs are metadata; the detector does not fetch them.
- 03
Review evidence before exporting
Read the declaration evidence in professional mode. Remove sensitive URL parameters before sharing a copied or exported report.
FAQ
Questions before using the tool
Understand encryption declarations, manifest access and the limits of the result.
01Does EXT-X-KEY mean this tool can decrypt the stream?
No. It reports manifest declarations such as METHOD, URI and IV. It does not fetch encryption keys, decrypt media or bypass DRM.
02Does no EXT-X-KEY mean there is no protection?
No. The result describes only the manifest supplied to the detector. Other playlists, licenses or access controls may still affect the source.
03Can I inspect a manifest when its URL cannot be fetched?
If you are authorized to use the text, paste it or import a local file in professional mode. Local analysis does not test HTTP access or CORS and does not remove source restrictions.