# SecureToken for JWPlayer 6.0

**URL:** <https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156>\
**Category:** Wowza Streaming Engine\
**Created:** [February 18, 2014, 2:19pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156 "2014-02-18T14:19:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hussan\_Choudhry](https://avatars.discourse-cdn.com/v4/letter/h/58956e/32.png) [@Hussan\_Choudhry](https://community.wowza.com/u/Hussan_Choudhry)\
**Post date:** [February 18, 2014, 2:19pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156/1 "2014-02-18T14:19:04Z")

</div>

Hi,

I have read that in the new versions of JWPlayer that you cannot compile the SecureToken into the flash player, you have to set the token as a javascript variable in the HTML page. This seems like a major security risk, has anyone solved this or any suggestions how to make this more secure?

---

<div class="post-metadata">

**Author:** ![Vichea\_Cheth](https://avatars.discourse-cdn.com/v4/letter/v/d2c977/32.png) [@Vichea\_Cheth](https://community.wowza.com/u/Vichea_Cheth)\
**Post date:** [February 19, 2014, 2:40pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156/2 "2014-02-19T14:40:07Z")

</div>

Hi there,

Yes, as I know you can compile the Secure Token with JW Player open source version, but for licensed version you cannot do it, and LongTail company (JW Player) didn’t provide coding/compiling with the licensed version.

But I have found a way to put Secure Token with this licensed JW Player version, you need to put this code with JW Player code on your web page:

> rtmp: {
> 
> securetoken: “MySecretCode”
> 
> },

Hope this help.

Best Regards,

---

<div class="post-metadata">

**Author:** ![J\_van\_Marion](https://avatars.discourse-cdn.com/v4/letter/j/dc4da7/32.png) [@J\_van\_Marion](https://community.wowza.com/u/J_van_Marion)\
**Post date:** [February 18, 2014, 11:52pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156/3 "2014-02-18T23:52:43Z")

</div>

as far as i know you still can/have to compile it in jwplayer 6

[https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player](https://www.wowza.com/docs/how-to-add-securetoken-protection-to-jw-player)

otherwise it is best to ask on the jwplayer forum. Wowza can secure the stream, but isn’t the developer of jwplayer 😉

---

<div class="post-metadata">

**Author:** ![Stream\_4life](https://avatars.discourse-cdn.com/v4/letter/s/97f17d/32.png) [@Stream\_4life](https://community.wowza.com/u/Stream_4life)\
**Post date:** [February 19, 2014, 12:22pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156/4 "2014-02-19T12:22:18Z")

</div>

You can compile secure token with JW Player opensource version. I have did that before. The problem is that , they wont provide premium version source code so we have to obfuscate the code in some external js file.

---

<div class="post-metadata">

**Author:** ![Stream\_4life](https://avatars.discourse-cdn.com/v4/letter/s/97f17d/32.png) [@Stream\_4life](https://community.wowza.com/u/Stream_4life)\
**Post date:** [February 19, 2014, 5:08pm UTC](https://community.wowza.com/t/securetoken-for-jwplayer-6-0/39156/5 "2014-02-19T17:08:45Z")

</div>

> Hi there,
> 
> Yes, as I know you can compile the Secure Token with JW Player open source version, but for licensed version you cannot do it, and LongTail company (JW Player) didn’t provide coding/compiling with the licensed version.
> 
> But I have found a way to put Secure Token with this licensed JW Player version, you need to put this code with JW Player code on your web page:
> 
> Hope this help.
> 
> Best Regards,

It is a very weak practice since anybody who views the source code can identify the secure token.