Google Widevine

Widevine is Google's DRM, built into Chrome, Firefox, Edge, Android, Android TV, and Chromecast, giving it the widest device coverage of any DRM. It operates at hardware-backed security level L1 or software level L3, and license servers can cap resolution per level. It does not run on Apple devices, which require FairPlay.

What is Google Widevine?

Widevine is Google's DRM, built into Chrome, Firefox, Edge, Android, Android TV, and Chromecast, the widest device coverage of any DRM. It lets these platforms play encrypted video without plugins.

How Widevine Works

Widevine typically protects MPEG-DASH streams encrypted with CENC common encryption. When a viewer plays a video, the browser or app requests a license, and the Widevine Content Decryption Module unwraps the content key and decrypts frames in an area the page cannot inspect. It operates at two security levels: L1, where decryption happens inside a hardware Trusted Execution Environment, and L3, a software-only path used by most desktop browsers.

Why Security Levels Matter

  • L1 (hardware-backed): Keys and decrypted video never reach normal memory; premium services allow HD and 4K.
  • L3 (software): Weaker isolation, so many services cap L3 devices at SD or 720p.
  • Server-enforced policy: License servers can require a minimum level for a given resolution.

The Apple Gap

Widevine does not run on Safari, iPhone, or iPad. Apple devices require FairPlay, which is why web-and-mobile platforms pair Widevine with FairPlay as a multi-DRM setup.

For Platform Owners

Widevine alone covers most Android and desktop-Chrome audiences, but a course or OTT platform that ignores Apple users will see protected playback simply fail on iPhones. Plan for multi-DRM from the start.

See Also: DRM (Digital Rights Management)Content Decryption Module (CDM)Trusted Execution Environment (TEE)Multi-DRM