Digital rights management (DRM) encrypts digital content and releases the decryption key only to approved players that follow licence rules, such as rental periods or device limits. It raises the effort needed to copy content, but it cannot stop a determined person from capturing what a screen or speaker shows.
What problem is DRM trying to solve?
Digital copies cost nothing to make. A film studio, publisher or software company wants to sell access under terms: watch for 48 hours, use on three devices, no sharing. DRM tries to make those terms enforceable by technology rather than by contract alone.
Note what it is not: it is not confidentiality for secrets. The user who paid is the intended viewer. DRM protects against that same user redistributing the content, which is why its security model is unusual.
How does it work in broad terms?
- Encryption. The content is encrypted before delivery, often with a key per title or per quality level.
- Packaging. The encrypted file or stream is delivered by ordinary servers, since without the key it is useless.
- Licence request. When a user presses play, the player asks a licence server for the key and presents proof of what device and software it is.
- Licence decision. The server checks the account, region, rental period and device security level, then returns a licence containing the key, with usage rules.
- Protected decryption. A trusted component on the device decrypts and plays the content, ideally inside a protected environment so other programs cannot read the decrypted data.
What is the browser standard?
The W3C Encrypted Media Extensions specification extends the HTML media element with APIs to control playback of encrypted content. It supports use cases from simple clear key decryption up to high value video, given an appropriate user agent implementation. Licence and key exchange is controlled by the application, which lets sites build playback applications supporting a range of content decryption and protection systems.
In plain terms: the web page requests a licence from its own server and hands it to a decryption component in the browser. The standard defines the interface, not a single DRM system, and different platforms use different underlying systems.
What can DRM protect against?
- Casual copying of downloaded files.
- Sharing a file outside an account.
- Use beyond licence limits, such as after a rental ends.
- Playback on devices with weak protection, since servers can set stricter terms for high quality content.
What are its limits?
- The analog hole. Whatever a person can see or hear can be recorded.
- Weak endpoints. Software only protection can be bypassed more easily than hardware backed protection.
- Usability costs. Legitimate users face playback failures, device limits and loss of access if a service closes.
- Privacy. Licence requests can reveal what someone watches and on what device.
- Preservation and interoperability. Content locked to a system can become unplayable when support ends.
- Security research and law. Rules on circumventing protection vary by country, so legal advice matters if you research it.
A constructed example
A learning platform sells video courses. Without protection, anyone who downloads a lesson can post it online. The platform adds encrypted streaming with licence checks tied to the buyer's account and a limit of two active devices. A student who shares a password finds the third device refused. A determined person can still record the screen. The platform decides this is acceptable because the aim is to stop casual sharing, not to defeat every attack.
How to check or apply this
- Define what you are protecting and from whom. If the threat is casual sharing, light protection may be enough.
- Compare the cost of DRM, including playback failures and support load, with the revenue at risk.
- Use platform supported systems and the standard browser interface rather than building your own cryptography.
- Keep licence servers secure and log requests with privacy in mind.
- Set clear user terms, and plan what happens to purchased content if you close the service.
- Test playback on the oldest devices you support.
Quick check
Does DRM prevent piracy completely?
No. It raises the effort and stops casual copying, but captured output can still be recorded.
Is DRM the same as encryption?
Encryption is one part. DRM adds licence rules, key delivery and device trust on top.
Sources
Last reviewed: 18 October 2026.
