A company is adjusting the privacy settings on a video with Cinema8's video hosting platform.

Purple video player control bar with play button, volume control, progress slider, settings, share, fullscreen options, and Cinema8 logo.

How to gate video content: access options and when to use them

Video gating restricts who can watch a video and under what conditions. The right gating method depends on who the audience is, how sensitive the content is, and what happens when access needs to be revoked. Choosing the wrong method creates either too much friction for the viewer or too little security for the content. This page covers the main video gating options and the scenarios each one is suited to.

Start free trial

Trusted by leading brands around the world

What is the difference between a private video and a gated video?

A private video is hidden from public search and discovery but may still be accessible to anyone who holds the link. A gated video requires the viewer to pass an authentication step before playback begins, regardless of whether they have the link. The distinction is important because a private link shared in an email can be forwarded to anyone, while a gated video requires each viewer to meet the access condition independently. For content where confidentiality matters, gating is the appropriate control. For content where you simply do not want public discoverability, private or unlisted status is sufficient without requiring an authentication step.

When should you use password protection to gate a video?

Password protection is appropriate when the audience is small, the content has a short relevance window, and setting up a formal authentication system is not proportionate to the risk. A client preview, a pre-launch briefing, or a short-term campaign video are all cases where password protection provides adequate control with minimal configuration. The limitation is that a password can be forwarded with the link, meaning access cannot be revoked for an individual viewer without changing the password for everyone who holds it. For any scenario where individual access control matters, password protection alone is the wrong gating method. It works best as a lightweight option for low-sensitivity content with a defined and trusted audience.

When should you use domain restrictions to gate a video?

Domain restrictions limit where a video can be played. A domain-restricted video will only load when embedded on an approved website or internal system, making this the right gating method when the risk is unauthorised embedding or redistribution rather than unauthorised viewing by a specific individual. A training video embedded in an internal portal, a product demo restricted to a specific landing page, or a client video limited to a partner's website are all cases where domain restrictions apply. Domain restrictions do not replace viewer-level authentication: anyone who visits the approved domain can still watch the video. They work best in combination with a viewer-level control when both risks are present. Cinema8's secure video hosting platform supports domain and IP restrictions applied at the asset or folder level.

When should you use SSO to gate a video?

SSO, or Single Sign-On, is the appropriate gating method when the video audience is defined by organisational membership and access needs to be managed at the individual level. Internal communications, compliance training, and HR content are all cases where SSO is the right choice because access is tied to an active employee account rather than a shared credential. When an employee leaves the organisation, their access to the video is revoked automatically as part of the identity provider offboarding process, without requiring a separate action in the video platform. SSO is also the only gating method that produces viewer-level analytics tied to a verified identity, which is relevant when completion records are required for compliance or audit purposes. The trade-off is setup complexity: SSO requires integration with the organisation's identity provider, which is a developer task on the first deployment.

When should you use expiring links to gate a video?

Expiring links are appropriate when access needs to be time-limited regardless of whether the viewer has valid credentials. A video shared as part of a time-bound campaign, a quarterly all-hands recording accessible only during the relevant quarter, or a proposal video sent to a prospect with a defined decision window are all cases where an expiring link is the right control. The link becomes inactive after the defined period without requiring any manual revocation step. Expiring links are often used in combination with other access controls: an SSO-authenticated viewer might also receive a link that expires after 30 days, ensuring that even a valid employee account cannot access content past its relevance window. Cinema8 supports expiring and one-time access links as part of its secure video hosting controls.

How do you choose between different gating methods?

The decision of which gating method to choose comes down to three questions: how sensitive is the content, how large and defined is the audience, and does access need to be revokable for individual viewers. Low-sensitivity content with a small trusted audience and no individual revocation requirement suits password protection. Content where the risk is unauthorised redistribution suits domain restrictions. Content where the audience is defined by organisational membership and individual access control is required suits SSO. Content with a defined relevance window suits expiring links. Most organisations with an active internal video programme use a combination of these methods, applying different controls to different content tiers based on sensitivity and audience rather than applying the same setting across the entire library.

How does Cinema8 support video gating?

Cinema8 is a secure video hosting platform with built-in access controls covering password protection, domain and IP restrictions, SSO integration, expiring links, and one-time access links. Controls are applied at the asset or folder level, meaning different content tiers in the same library can carry different access settings without requiring separate platform configurations. Viewer-level analytics for SSO-authenticated sessions produce per-viewer completion records, supporting compliance reporting without a separate tracking system. Cinema8 is ISO 27001 certified for information security management and BESA accredited, scaling from self-serve plans through to enterprise teams with SSO, domain restrictions, and unlimited seats.

★★★★★

See why companies use Cinema8 for private and gated videos.

During travel restrictions, Cinema8 proved valuable as a tool. Its platform offered straightforward yet complete tools, allowing us to give virtual demonstrations of our solutions in a secure and efficient way.

Jay Yalung

Art Director, Marketing and E-Commerce / Leica Geosystems

Cinema8 software engaged and motivated students with 360-degree videos at the Tate Gallery, featuring past student projects. Staff support was responsive and helpful with training. A valuable tool for educational institutions.

Chi-Ming Tan

Unit Lead Lecturer LCCA / London College of Contemporary Arts

Cinema8 has been instrumental in compiling all of the videos for a research project on employment for the blind or visually impaired, by offering an easy-to-use web-based platform for building Interactive Videos.

Sarah Moody

Communications Coordinator / Mississippi State University

Cinema8 was chosen for its ease of use and ability to create interactive videos through an intuitive interface. The team received great support and reasonable pricing. leading to a renewal of their partnership. Cinema8's support helped them meet project deadlines.

Michel Sohel

Media Consultant / Eastern Michigan University

Starter

$12

per month billed annually

Everything in Free, plus: