# how to invalidate a stream key

**URL:** <https://community.wowza.com/t/how-to-invalidate-a-stream-key/46726>\
**Category:** Wowza Streaming Engine\
**Created:** [March 15, 2016, 5:20pm UTC](https://community.wowza.com/t/how-to-invalidate-a-stream-key/46726 "2016-03-15T17:20:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Reid\_Moran](https://avatars.discourse-cdn.com/v4/letter/r/97f17d/32.png) [@Reid\_Moran](https://community.wowza.com/u/Reid_Moran)\
**Post date:** [March 15, 2016, 5:20pm UTC](https://community.wowza.com/t/how-to-invalidate-a-stream-key/46726/1 "2016-03-15T17:20:21Z")

</div>

Once i’ve issued a stream key to a user and that user completes their stream, how do i make wowza ignore that stream key from then on so they are not able to connect and add to that stream?

thanks for help, sorry if it is a newb question, but ive google several queries and not found an answer.

---

<div class="post-metadata">

**Author:** ![Michelle\_B](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/michelle_b/32/394_2.png) [@Michelle\_B](https://community.wowza.com/u/Michelle_B)\
**Post date:** [March 21, 2016, 1:16pm UTC](https://community.wowza.com/t/how-to-invalidate-a-stream-key/46726/2 "2016-03-21T13:16:46Z")

</div>

Hi,

How are you generating the stream key and how is it being handled in Wowza? It sounds like functionality that is covered by our [SecureToken](https://www.wowza.com/docs/how-to-protect-streaming-using-securetoken-in-wowza-streaming-engine) module, where you can have Wowza authorize playback requests based on a generated hash string. This hash can be based on properties such as the client IP address, and an expiry token (start time/end time).

Michelle