Your footage stays yours

• No passwords to steal or reuse. Accounts sign in with a 6-digit code emailed to them. A code works once, expires after 10 minutes, and is cancelled after 5 wrong tries. Sign-in requests are rate-limited per address and per network.
• Two-step sign-in. Any account can add a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy and others), so a compromised inbox alone can’t get in. Each app code works once. Ten single-use recovery codes cover a lost phone; we store only scrambled (hashed) copies of them.
• Required for our admins. Neon Diesel can require two-step sign-in for every staff account with admin access, and an admin can’t switch it off for themselves while that’s on.
• You see every device. Your Security page lists each browser signed in to your account, where it signed in from and when it was last used. Sign out any one of them, or all but the one you’re on.
• New-device alerts. We email you when your account is used from a device we haven’t seen before, and whenever two-step settings change or a recovery code is used.
• Locked-down sign-in cookies. Sign-ins use a secure, HTTP-only cookie that page scripts can’t read, and expire after 30 days. Changes are only accepted from our own pages.

• Unlisted links. Each session has its own random code. Sessions aren’t listed or searchable anywhere; people get in with the link you send.
• Private stream keys. Every camera has its own key, and only that key can send picture into the session. Replace a key with one click: the old one is cut off immediately.
• Encrypted to every viewer. Picture, program sound, talkback voices and shared screens reach viewers over WebRTC, which is always encrypted (DTLS-SRTP). Pages, chat and sign-in use HTTPS.
• Encrypted sending, too. Encoders and apps can send to us over RTMPS (RTMP inside TLS). Plain RTMP and SRT are also accepted for equipment that can’t do RTMPS, so choose RTMPS where your gear supports it.
• Our own stream server. Video goes through a stream server we run ourselves, not through a third-party video platform.

• A watermark that names the viewer. Turn on Lockdown for a session and every picture carries the session code, the viewer’s name, their IP address and the time: a faint pattern across the whole frame plus a label that moves around so it can’t be cropped out.
• Burned into frame grabs. Stills and frame grabs taken in a locked-down session carry the same marks in the image itself.
• Names required, and a record of who watched. Viewers must give a name to join. You can see everyone who opened the session while it was locked, with their address, browser and when they watched.
• Harder to lift. Picture-in-picture and “Save video” are switched off, and the picture hides if someone keeps removing the watermark.

Lockdown is a deterrent and a trace, not copy protection: nothing stops someone filming a screen with a phone. What it does is make sure any leaked recording shows exactly who it came from.

• Every sign-in and change, recorded. Sign-ins and sign-outs, wrong two-step codes, sessions created or deleted, cameras added, stream keys replaced and lockdown switched on or off, each with the time and the address it came from.
• Changes we make show up too. If our team changes something on your account, it appears in your log marked “by Neon Diesel”.
• Yours to export. Download the full log as a spreadsheet (CSV) from your Security page, for your own records or your security team.