# Disable default \_definst\_ live with no credentials

**URL:** <https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715>\
**Category:** Wowza Streaming Engine\
**Created:** [December 6, 2010, 2:58pm UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715 "2010-12-06T14:58:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kevin\_McDermott](https://avatars.discourse-cdn.com/v4/letter/k/e19b73/32.png) [@Kevin\_McDermott](https://community.wowza.com/u/Kevin_McDermott)\
**Post date:** [December 6, 2010, 2:58pm UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715/1 "2010-12-06T14:58:00Z")

</div>

Hi,

I apologize if the answer to this question is documented somewhere. I’ve searched but haven’t been able to find an answer:

How can I disable the default live “myStream” application/stream that doesn’t require any credentials to publish? I want to ensure that all streams being fed to the Wowza server require credentials.

Thanks.

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [December 6, 2010, 8:08pm UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715/2 "2010-12-06T20:08:15Z")

</div>

There is no default stream. As long as you have secured each application you are covered.

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [December 6, 2010, 10:07pm UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715/3 "2010-12-06T22:07:58Z")

</div>

Kevin,

Use the Wowza MediaSecurity Addon Package:

[https://www.wowza.com/docs/media-security-overview](https://www.wowza.com/docs/media-security-overview)

For live application, use ModuleRTMPAuthenticate to protect publishing. If you want to also protect content in a player you add the Property “secureTokenSharedSecret” to enable SecureToken when using ModuleRTMPAuthenticate.

In a vod application, you can do it the same way, or you can use ModuleSecureToken instead of ModuleRTMPAuthenticate.

If you are re-streaming, and have an application with StreamType “rtp-live” (for example, re-streaming from an IP camera), then use the StreamNameAlias packge to limit what streams can be re-streamed:

[https://www.wowza.com/docs/how-to-get-the-streamnamealias-addon](https://www.wowza.com/docs/how-to-get-the-streamnamealias-addon)

Richard

---

<div class="post-metadata">

**Author:** ![Kevin\_McDermott](https://avatars.discourse-cdn.com/v4/letter/k/e19b73/32.png) [@Kevin\_McDermott](https://community.wowza.com/u/Kevin_McDermott)\
**Post date:** [December 6, 2010, 4:58pm UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715/4 "2010-12-06T16:58:42Z")

</div>

Thanks Richard. But how exactly do I secure each application? I must be missing something. I copied the …/conf/live/Application.xml into the application that I created, but even though the stream name is named something else, I can always send a stream to “myStream” without credentials. And in the stream manager it displays “testapplication/_definst_” (in this case the application is named testapplication).

Kevin

---

<div class="post-metadata">

**Author:** ![Kevin\_McDermott](https://avatars.discourse-cdn.com/v4/letter/k/e19b73/32.png) [@Kevin\_McDermott](https://community.wowza.com/u/Kevin_McDermott)\
**Post date:** [December 7, 2010, 10:10am UTC](https://community.wowza.com/t/disable-default-definst-live-with-no-credentials/35715/5 "2010-12-07T10:10:32Z")

</div>

Much appreciated! Thanks

Kevin