01 /
Encrypted end to end
AES-256-GCM runs in your browser before a single byte leaves the tab. The plaintext never touches a server, and storage only ever holds ciphertext.
01 — For freelance video editors
Send the cut, not the file.
MovoLink is a review link for work that has not been paid for yet. Your video is encrypted in your browser, streamed to the client in fragments behind a password, and stamped with their identity in the pixels — so you can show the edit without handing anyone a file they can keep.
Free to run yourself · Bring your own Supabase project
movolink.tech/v/8fq2kd91Session locked
01:24 / 03:42Fragment 12 / 31
AES-256-GCM2 MB fragmentscanvas watermarkno download
256-bit
AES-GCM, browser side
2 MB
Fragment size
0
Downloadable files
6
Wrong passwords, then lockout
02 — The protections
How it protects your work
Six layers, each doing one job. Together they mean a client can watch your edit without ever being handed the file.
02 /
No downloadable file
The cut is delivered as 2 MB fragments through a session-gated endpoint. The buffer is evicted as it plays, so the whole video is never sitting in the page.
03 /
Forensic watermarking
The viewer identity is composited into the pixels by a canvas as the frames are drawn. It is not an overlay element, so it cannot be removed from the DOM.
04 /
Strict passwords
Share passwords are hashed with scrypt and never stored in the clear. Six wrong attempts inside 15 minutes locks the link out of further guessing.
05 /
Expiry, view caps, device binding
Give a link a deadline, a maximum number of views, and a binding to the first device that opens it. Revoke kills sessions that are already playing, not just future ones.
06 /
Capture telemetry
Devtools, print-screen and focus loss are logged per viewer, with watch time alongside them. You see who opened the link, how long they stayed and what they tried.
03 — In the interest of honesty
What this does not do
No web player can stop an OS-level screen recording. OBS, QuickTime, Cmd+Shift+5 or a phone pointed at the monitor will all capture what is on screen, and nothing running inside a browser tab can prevent that.
Only platform DRM — Widevine L1 or FairPlay — actually blocks the capture path, and only on hardware that implements it. MovoLink does not use DRM, so it does not block anything at that level.
What it does instead is make capture costly and traceable. The viewer identity is burned into the pixels, so a recording that leaks carries the name and session of whoever made it. Devtools, print-screen and focus loss are logged as they happen.
That is the honest trade: a leak stops being anonymous, which is usually enough to stop it happening. Anyone claiming a browser can make video impossible to steal is selling you something.
04 — Three steps
How it works
- 01
Upload
Your master is compressed in the browser and encrypted before it leaves your machine. What lands in storage is ciphertext you hold the key to.
- 02
Share
Generate a link with a password, an expiry, a view cap and watermark settings. Send the link to your client and keep the file.
- 03
Watch
They stream it in a hardened player, stamped with their own identity. You see every session, every event and the total watch time.
Create an account
Takes about a minute. Your first share link works right after.