Perfect video protection doesn't exist — and chasing it wastes time you should spend on your course. Screen recording makes any video copyable. The real question isn't "how do I lock down my files?" but "what's the minimum protection that stops casual sharing while I focus on building the experience students actually pay for?" The answer is simpler than most creators expect: domain-locked embedding, disabled downloads, and about ten minutes per video.
What you’ll walk away with:
- Videos that play only on your course platform — nowhere else
- Downloads disabled so students can't grab a clean MP4
- Videos hidden from Vimeo search and your public profile
- A repeatable checklist you can follow for every video you upload
Why privacy matters for paid course videos
When students pay for your course, they're paying for access — to your teaching, your expertise, the structure you've built. If your videos are trivially easy to share or download, you're relying entirely on goodwill to protect that value. Most students are honest, but it only takes one shared link on a forum to undermine months of work.
The goal isn't to build an impenetrable fortress. Determined pirates will always find a way to capture video — a screen recorder defeats any streaming protection. The goal is to make casual sharing difficult enough that it doesn't happen by accident. A student shouldn't be able to forward a link to a friend and give them your entire course for free.
Privacy settings also signal professionalism. When a prospective student sees that your content is properly protected, it reinforces that this is a real product worth paying for — not a loosely organized collection of public YouTube videos.
Vimeo: The strongest option for course creators
Vimeo is the standard choice for hosting paid course videos, and for good reason. Its privacy controls were designed for exactly this use case — protecting video that's embedded on specific websites.
Set domain restriction
This is the single most important setting. In your Vimeo video settings under "Embed," you can specify exactly which domains are allowed to play your video. If your course lives at courses.yourdomain.com, add that domain. The video will play when embedded on your course page but show an error message on any other site. Even if someone copies your embed code and pastes it onto their own website, the video won't load.
On Vimeo's Standard plan ($12/month billed annually) and above, domain restriction is included. This single feature justifies the cost for anyone selling courses with video content.
Disable downloads
In the same settings panel, turn off the download button. This won't stop someone from using a screen recorder, but it removes the most obvious path — clicking "Download" and getting a clean MP4 file. Combined with domain restriction, you've closed the two easiest ways content leaks: sharing a direct link and downloading the file.
Set privacy to "Hide from Vimeo"
Set your video's privacy to "Hide from Vimeo" so it doesn't appear in Vimeo's public search results, your Vimeo profile, or related video suggestions. The video exists only as an embed on your allowed domains. Students who try to find it by browsing Vimeo directly won't see it.
Embed on your course platform
Copy the embed code from Vimeo and paste it into your course lesson. At this point your video is domain-locked, download-disabled, and invisible on Vimeo itself. Combined with your course platform's login requirement — only enrolled students can reach the page — you have two independent layers of protection without any friction for paying students.
Password protection — useful for beta testing
Vimeo also lets you add a password to individual videos. This is useful if you distribute videos outside of an embed — for example, sharing a private link in an email to beta students. For videos embedded in a course platform, domain restriction is usually sufficient and doesn't add friction for the student.
YouTube: Why unlisted doesn't mean private
YouTube is free, familiar, and tempting as a video host for courses. The problem is that YouTube's privacy model wasn't built for paid content. Here's what you're working with:
- Unlisted videos — anyone with the link can watch. There's no domain restriction, no way to disable downloads (third-party tools download any YouTube video trivially), and no embed controls beyond "allow embedding or don't." One shared link gives away full access.
- Private videos — only viewable by specific Google accounts you invite (up to 100). This is unworkable for a course with more than a handful of students, and requires every student to have a Google account.
YouTube also surrounds your content with its own UI — suggested videos, channel links, share buttons. Even if you embed a YouTube video on your course page, YouTube actively encourages viewers to leave your site and watch something else. That's the opposite of what you want in a learning environment.
For free course content, YouTube is fine — the discoverability actually helps. But for paid courses where students are paying for exclusive access, YouTube's lack of privacy controls is a real liability. The Vimeo privacy features page gives a clear comparison of what's available on each plan.
Tips for course video privacy
Set domain restrictions before you share any links
Configure your privacy settings as soon as you upload each video, not after your course launches. It's easy to forget once you're in the rush of opening enrollment. Create a checklist: upload, set domain restriction, disable downloads, set to "Hide from Vimeo," then embed. Every video, every time.
Layer platform authentication with video privacy
Video privacy settings work best as one layer in a stack. Your course platform handles authentication — only enrolled students can access the page where the video is embedded. Vimeo's domain restriction ensures the video only plays on that page. Together, a student would need to be enrolled and viewing the video on your course site. Neither layer alone is sufficient; both together cover the realistic threat model.
Test your settings from a logged-out browser
After configuring privacy, open an incognito window and try to access your video directly on Vimeo. Try embedding the video on a different domain. Confirm that both attempts fail. It takes two minutes and catches configuration mistakes before your students (or anyone else) find them.
Limitations: Be realistic about what privacy controls can do
Screen recording defeats every streaming protection
No combination of settings will prevent a determined person from capturing your video. Screen recording software can capture anything that plays on a screen. Browser extensions can intercept video streams. If someone truly wants to pirate your content, they will.
Enterprise DRM is priced for enterprises
Forensic watermarking and Widevine-level DRM exist, but they require Vimeo Enterprise pricing (custom quotes, typically $500+/month). For independent course creators, the cost-to-benefit ratio doesn't make sense. Domain restriction and disabled downloads stop the scenarios that actually happen — casual sharing, accidental leaks, the "I'll just forward this to my friend" moment.
Protection is a floor, not a ceiling
This is not a reason to skip privacy settings — it's a reason to calibrate your expectations. Invest in making your course so valuable that students want to stay enrolled and engaged, not in building increasingly elaborate locks. Your time is better spent improving your teaching, adding live interaction, building community, and creating the kind of experience that can't be replicated by a downloaded video file.
Frequently asked questions
Can I use YouTube unlisted videos for a paid course?
You can, but it offers minimal protection. Anyone with the link can watch, share, or download your video. YouTube provides no domain restriction, no download disabling, and no watermarking. If a single student shares the link, your entire course is effectively free. For paid content, Vimeo's domain-restriction and download controls are significantly more reliable.
Does Vimeo domain restriction work with Ruzuku?
Yes. In Vimeo's video settings, add your Ruzuku course URL as an allowed domain. The video will play when embedded on your Ruzuku course page but refuse to load on any other website. This is the single most effective privacy control available for embedded course videos.
Should I add visible watermarks to my course videos?
For most course creators, no. Visible watermarks distract from the learning experience and can feel adversarial toward the students who actually paid. A better approach is forensic watermarking (available on Vimeo Enterprise), which embeds an invisible identifier that can trace a leak back to a specific viewer. But for the vast majority of courses, domain restriction plus disabled downloads provides enough protection without degrading the student experience.
Related guides
- How to Record Course Lessons Using Loom — record your lessons before worrying about where to host them
- How to Record Course Videos Using OBS Studio — free, open-source screen recording for higher production needs
- How to Run Live Course Sessions Using Zoom — live sessions as an alternative to pre-recorded video
- How to Design Course Materials Using Canva's AI Features — create branded video thumbnails and lesson graphics
Protect your content, then focus on teaching
Setting up video privacy takes about ten minutes per video and solves the problem for good. Domain-lock your Vimeo embeds, disable downloads, and move on. The real value of your course isn't the video files — it's the teaching, the feedback, the community you build around the content. Ruzuku gives you a complete course platform for free with built-in student management, discussions, and zero transaction fees — so you can focus on the parts of your course that actually matter.