HDCP

High-bandwidth Digital Content Protection — encryption applied to the cable itself, between a video source and the screen it feeds. DRMDRMEncryption of the video file plus a licence server that issues a per-session key — so a downloaded copy stays unplayable.Open definition → protects the file up to the player; HDCP protects the last metre, where a capture card would otherwise sit and read a clean signal.

Updated: August 2026 6 min read Security
In short

HDCP encrypts video on the HDMI or DisplayPort cable between a device and its screen, so a capture card wired in between records only scrambled data instead of a clean copy.

What is HDCP?

HDCP is a copy-protection layer for digital display connections, developed by Intel and licensed through Digital Content Protection LLC. It runs on HDMI, DisplayPort and DVI, and its job is narrow: keep the picture encrypted while it travels from a source to a screen.

The scope matters. HDCP knows nothing about your video file, your account rules or your licence server. It secures one hop — the physical link — and that is the hop where every other protection has already finished its work.

How the handshake works

Authentication

Before any picture is sent, the source checks that the display holds valid HDCP keys. A device without them gets no signal, or a deliberately degraded one.

Shared secret

Both ends derive a session key and the video is encrypted with it for the whole connection. Unplugging and reconnecting starts the exchange again — which is why a switch flip can cause a two-second black screen.

Repeaters

An AV receiver or splitter in the middle is a repeater: it must authenticate downstream and report back what is attached. Devices that fail this are the single most common cause of HDCP errors in a home setup.

Revocation

Sources carry revocation lists. A device whose keys were compromised and published can be refused by everything that receives an updated list.

Versions, and what 4K requires

VersionIntroducedTypical ceilingStatus
HDCP 1.420091080p1080p (Full HD)Full HD at 1920×1080 — just over two million pixels. The default target for course, sales and web video.Open definition → over HDMIMaster key leaked in 2010; strippers exist
HDCP 2.2 20134K4K (2160p)Ultra HD at 3840×2160 — four times the pixels of Full HD, and the point where codec choice starts paying for itself.Open definition → and HDRNew cryptography plus locality checks
HDCP 2.320184K and aboveCurrent; hardens the 2.x handshake

Protected 4K content generally refuses to play over 1.4. This is why the same source can feed 1080p to an older television and go black at 4K.

Why HDCP errors happen

An HDCP error rarely means the content is broken. It means two devices could not agree on the link, and the chain is almost always at fault:

A splitter or switch in the path

Inexpensive units often fail the repeater role. Connect the source directly to the display to confirm.

A version mismatch

The source demands 2.2 for 4K, the display speaks 1.4. The fix is a lower resolutionResolutionThe pixel dimensions of a video frame — 480p, 720p, 1080p, 2160p (4K). Determines how sharp the picture looks on a given screen.Open definition → or newer hardware — there is no software workaround.

An adapter or dock

USB-C to HDMI adapters and docking stations vary in how they carry HDCP. Swapping the adapter is a faster test than swapping the display.

A capture device

Recorders and streaming boxes in the chain are exactly what HDCP is designed to refuse. That is the system working, not failing.

HDCP and streaming DRM

For anyone delivering video rather than watching it, HDCP appears through a different door: as an output-protection requirement inside a DRMDRMEncryption of the video file plus a licence server that issues a per-session key — so a downloaded copy stays unplayable.Open definition → policy.

When a licence server issues a key it can attach conditions about the output. Studio-grade rules typically pair Widevine L1 — hardware-backed decryption — with HDCP 2.2 on the display link before releasing 1080p or 4K, and fall back to a lower rendition when either is missing. Both halves must hold: hardware decryption on the device, encryption on the cable.

For paid courses and corporate video, that strictness is usually more than the content needs. A policy that blackscreens a student because their laptop dock does not carry HDCP protects a file no studio licensed, and generates a support ticket that reads "your player is broken". Knowing the mechanism lets you set a resolution ceiling deliberately instead of inheriting a broadcaster's default.

What HDCP does not cover

ThreatCovered?What actually handles it
Capture card between device and screenYesThe link is encrypted end to end
Software screen recordingNoHappens before the display link — OS protections and watermarkingWatermarkingA mark burned into the frames. It prevents nothing — it makes a leaked copy point back at the account it came from.Open definition →
Downloading the streamNoDRMDRMEncryption of the video file plus a licence server that issues a per-session key — so a downloaded copy stays unplayable.Open definition → encryption on the file itself
Replaying a harvested CDNCDN (Content Delivery Network)A global network of edge servers that caches video close to viewers, cutting latency and absorbing traffic spikes.Open definition → linkNoSigned URLsSigned URLA playback link carrying an expiry and a cryptographic token — it stops working once the window closes, and a tampered link never works.Open definition → with an expiry
A camera pointed at the screenNoNothing prevents it — watermarking makes it attributable

Analogue capture is the honest boundary of every scheme in this family. HDCP closes the cable; it cannot close the room.

Further reading

Denis Konnov

Written by

Denis Konnov Verified

CMO at Kinescope

Denis leads marketing and content at Kinescope, working closely with the platform's engineers. This glossary is reviewed and kept up to date by the team building Kinescope's streaming, encoding and CDN delivery infrastructure.

FAQ

Can’t find the answer you need? Check out our Help Center.

HDCP (High-bandwidth Digital Content Protection) encrypts video on the cable between a source and a display — HDMI, DisplayPort or DVI. The two ends authenticate each other before any picture appears, so a recorder inserted between them receives encrypted data instead of a clean copy.

Almost always a link problem rather than a content problem. The usual causes are an HDMI splitter or switch that does not pass HDCP through, a cheap adapter, a display too old for the HDCP version the source demands, or a capture device in the chain. Connecting the source straight to the display resolves most cases.

HDCP 2.2 or later. Protected 4K content generally refuses to play over HDCP 1.4, which is why an older TV can show 1080p from the same source but drop to black or downscale at 4K.

It stops capture on the display link — a capture card between a laptop and a monitor gets nothing usable. Software screen recording runs before the signal reaches that cable, so HDCP has no say there; that gap is covered by the operating system's own protections and by watermarking.

No, they protect different segments. DRM protects the file and the stream up to the player. HDCP protects the last hop, from the device to the screen. Studio-grade policies usually require both, which is why a DRM licence can demand HDCP on the output before releasing high resolutions.

The 1.4 master key leaked in 2010, and inexpensive strippers that exploit it exist. Version 2.2 changed the cryptography and added locality checks, and the licensing body can revoke compromised devices through renewability messages. Treat HDCP as one layer, not a guarantee.

You do not switch HDCP on yourself — it is negotiated between the viewer's device and their display. What you control is the DRM policy that asks for it, and the resolution ceiling applied when the output cannot provide it.