Last updated: October 2026 · GreatestIPTV editorial team · the login type most services issue by default
The short answer
Xtream Codes is an API, not a file. Instead of downloading one fixed channel list, your player holds a live conversation with the service — which is why it gets the seven-day TV guide, the on-demand library, catch-up and proper channel groups, while a plain M3U link usually gets channels and nothing else. You are given three things: a server URL, a username and a password.
What Xtream Codes actually is
Xtream Codes began as panel software that IPTV providers used to manage subscribers and deliver streams. The panel software itself is no longer the point; what survived and became a de facto standard is its API — the agreed set of requests a player can make to a server. When an app says “Login with Xtream Codes API”, it means it speaks that protocol.
That matters because it is the difference between a one-way handout and a two-way connection:
| Your player asks | M3U can answer | Xtream Codes can answer |
|---|---|---|
| What channels exist? | Yes | Yes |
| How are they grouped? | Crudely | Properly |
| What is on for the next 7 days? | Rarely | Yes |
| What films and series are there? | No | Yes, searchable |
| What aired yesterday? | No | Yes, where supported |
| Has anything been added since? | Only on refresh | Automatically |
The three fields, and the one that breaks logins
- Server URL. The address of the service, written in full: the
http://prefix and the port number, likehttp://server.address:8080. No trailing slash. - Username. Exactly as issued. Capitals matter.
- Password. The same.
The port is where almost every failed login comes from. Players report a missing port as “invalid credentials”, which sends people hunting for a typo in a password that was never wrong. If a login is rejected, check the server URL before anything else.
Setting it up
In any player, choose Login with Xtream Codes API rather than “Load playlist from URL”. Enter a name for the profile (anything — it is a label on your device), then the three fields, then save. The channel list and guide download in under a minute on a normal connection; let the EPG finish before judging it, because a full seven-day guide takes a moment.
Step-by-step screens for each device are in the setup guide, and the Smarters guide walks the exact fields in the most common app.
When a plain M3U link is still the right tool
Xtream Codes is better for daily use, but keep the M3U URL your provider gives you, because it has two real uses:
- A fifteen-second sanity check. Paste it into VLC on a laptop and you know immediately whether a service is alive. Nothing else is that fast.
- Hardware that speaks nothing else — some Smart TV apps, older boxes, network media players and recording setups.
GreatestIPTV issues Xtream Codes by default and will send an M3U URL on request.
Treat the credentials like a password
This is the part people get wrong with real consequences. An M3U URL has your username and password embedded in it as plain text; Xtream Codes details are equally sensitive. Anyone holding either has your subscription.
- Never post either in a forum, a review, a Reddit comment or a screenshot — crop carefully, the URL bar counts.
- Never share with friends. Extra concurrent streams cut you off, not them, and repeated over-use can suspend the account.
- If you think they have leaked, ask us to reissue. It takes minutes.
When something is wrong
| Symptom | Cause | Fix |
|---|---|---|
| “Invalid credentials” | Usually a missing port in the URL | Add :port; check http:// is present |
| Login spins, then fails | Server unreachable from your network | Restart the router; try on mobile data to isolate it |
| Channels load, no guide | You signed in with M3U | Delete the profile, re-add with Xtream Codes |
| No films or series | Same cause | Same fix |
| Worked yesterday, not today | Expired plan, or too many streams at once | Check both before reporting a fault |
| Everything loads but stutters | Not the login type | See the buffering fix list |
MAG and Enigma2: the exception
MAG boxes and Enigma2 receivers do not use Xtream Codes. A MAG uses a portal URL tied to the box’s MAC address, which the provider registers at their end — send us the MAC from the box’s system screen and the line-up appears on the box. Enigma2 receivers use their own bouquet files. Both are supported; neither uses the three fields above.
Next steps
If you already have details, set up with Xtream Codes using the setup guide. If you do not, ask for a trial and we will send Xtream Codes details so you can see the guide and the library working on your own TV. New to all of this? Start with what IPTV is.