Links that give access without signing in

There are four things in your account that work on their own, with no username and no password. Whoever has them can use them. Treat them like passwords.

What gives access to what

Link	What it lets whoever has it do	Expiry	How to kill it
Control widget	Full control of that OBS: switch scenes, start and stop the stream, touch the audio	30 days	Revoke on the server, or all of them at once in Account → Security
Your OBS connect link	Connect the OBS at home to your dashboard account	Shown only once	Revoke, or Regenerate link (the previous one dies)
Playback URL	Watch your feed live	As long as the key is alive	Rotate the key
Platform stream key (optional)	Broadcast in your name	As long as it stays active	Rotate the key

Control widget

This is the link you hand to your moderator. The dashboard itself warns you before you copy it: “This link grants FULL control of your OBS (start/stop stream, switch scenes). Do not share it or embed it publicly: anyone who has it controls your OBS.” It expires after 30 days and you can revoke it sooner. See A widget for your moderator.

Your OBS connect link

It’s only shown once: “Copy it now: for security it’s only shown once.” If you lose it we can’t show it to you again, but you can generate another one. When you regenerate it, the previous one stops working and your OBS disconnects until you paste the new one in. See Connect your OBS.

Playback URL and stream key

The playback URL carries your key inside it. With it, anyone can watch your stream exactly as it arrives, before it goes through your platform. And with the bare key, anyone can broadcast pretending to be you. The only way to invalidate them is Rotate, which kills the previous one instantly. See Playback URL and Rotating and security.

Note

The failover channel has its own ingest key, with its own Rotate key button. When you rotate it, you have to update it in your encoder.

When to revoke

Revoke without thinking too hard about it if:

• The link or the key showed up on screen during a stream, even for a second.
• Someone stops being a moderator.
• You handed the widget to someone “just for one night” and that night is long gone.
• You changed phone or computer and you don’t know what got saved where.
• You simply can’t remember how many people you gave it to.

Revoking is free and you undo it by generating another link. Not revoking gets expensive.

Revoking everything at once

1. Go into Account → Security.
2. Hit Revoke links.
3. Confirm: “All widget links for your servers will stop working immediately. You can generate a new one from each server’s detail page.”

That’s what to do when you’ve lost track of which link is out there. Afterwards, generate a new one only for whoever genuinely needs it.

What must never end up on screen

Before you share your screen

• The publish URL and the key: in the dashboard the key stays hidden until you hit Show key; don’t put it on camera.
• Any control widget link.
• That platform’s own stream key — the one Twitch, Kick or YouTube gives you and that you save in your streaming channels. It isn’t the same thing as your Enhanced IRL stream key.

If you’ve shown one by accident, rotate the key or revoke the link before you carry on broadcasting.

If you think someone is using your account, open a ticket from Support or write to support@enhancedirl.com.