Yes there is but when someone puts a year and a half into the work to build and secure an app and in less than 2 months of that work going public all those features showing up identical isn’t on chance . Apps like tivimate might not get all the new features from the dev because of it’s ease of being rebranded and him not getting the rewards . I’m not going to help this guy with the security of his app because of what I see. I paid for Tivimate a long time ago and still use it at times . I have been given lifetime subs to some better apps for helping with finding some problems and small bugs that were hard to figure. I really ain’t into that anymore too old to put the time into it.
Put all the thumbs down you want but the truth hurts sometimes .
Ok. Do tell. Which app did you help with on security?
@teehar We appreciate your trust 
And some great points in this discussion from @Ted6986, @sim_bill, @PapaS, and others. Although there is a free trial we usually don’t cover paid IPTV players. There are several quality players that exist that are either 100% free or use a freemium model with options to upgrade - 15+ Best IPTV Players for Android TV/Fire TV/PC (August 2026)
Thank you @Ted6986 for your comments and protecting the Insiders here. As @teehar mentioned All these new IPTV players lately have certainly raised some Red Flags with me and most here know I don’t have a Paranoid bone in my body. I’m not really one who likes to test/tinker with new stuff. I’m more interested in content and if something gives me TV Shows/Movies I see no reason to change until it breaks…And I been doing this long enough to know everything breaks at some point. But Tivimate is working great so I see no reason to try any of these new IPTV players
@Ted6986 Huge thanks! Agree @SoloWarrior!
Lol, thank you. Had a few things to address and can only post once a day
here.
By Ted’s standard every app here is bad, because I can see their databases
too. I pulled TiviMate’s the same way before I replied, and said so.
Cloud sync syncs to the cloud. That’s the whole feature. Favourites, history,
and your playlist creds encrypted in a vault so you can pick up your tablet
and carry on where the TV left off. Local-only playlists don’t touch it at
all.
Here’s the thing though. He never saw a database. Not mine, not anyone’s.
He decompiled the app and read code. The AI he pasted it into told him the
db was plaintext, and he posted that like he’d opened it and looked inside.
He didn’t. The catalog db is SQLCipher, creds sit in Keystore storage, and
when he went at the backend it handed him a 401.
What he read code for is the temp import file, so here’s how that actually
works. An import writes into a plain scratch db, the finished catalog gets
published into the encrypted one, and the scratch db is deleted. It’s plain
on purpose. Encrypting a file that lives for a few minutes and then gets
binned was costing 162 seconds on the VOD stage and 206 on EPG. That’s
minutes of your life, every import, for a file that doesn’t exist afterwards.
And what’s in it? Xtream rows go in with the URL blank, so it’s channel
names, numbers and groups. M3U rows can carry the source URL. Either way
it’s the same channel list TiviMate keeps permanently in plaintext, which
nobody seems to have a problem with. So a temp file that deletes itself is a
scandal and a permanent one is fine. Alright.
Then the AI part. He took a shot at me for using AI, then posted a writeup
stuffed with em dashes that reads exactly like model output. Fed the app in,
posted what came back, didn’t understand a line of it. Nothing wrong with the
tools, I use them and said so openly. Reading the output before posting it
would have helped. That’s how code for one temp file became “the complete
database is plaintext”.
That wasn’t a slip, it was a lie, and he never took it back. Criticism is
welcome, I’ve said so every time and I mean it. Lies get a reply.
Anyway the offer to go through the technical stuff together is still open.
How do you feel that tivimate does everything he called out and even worse? I decompiled their code and everything was in plaintext locally and has been for years. For that reason I decided to encrypt tvlok but got very bad performance, the solution was a temp file to speed up channel, movies and shows import.
One thing tivimate doesn’t offer though is cloud sync. The point of TVLok is to sync your data across devices, and the data needs to be saved somewhere. Saying some things go to our server so that’s a red flag is like saying Netflix is a red flag because they do the same thing. If there’s another way to provide this feature to users, I am happy to hear it.
TVLok was built by different people testing it, including people who hack iptv data. I had over 300 people giving feedback on what they wanted.
I welcome criticism and everyone knows me for this. But lying to destroy an emerging app and claiming (not a dev) with no proof can get anyone defensive. “Any bad guy can get your data” zero proof of this by the way, just a claim he made. The same way I can get your data when I grab your phone. He refused to engage after my comment for good reason. Refused to chat about technical details on how to address his claims. Posted a picture of him getting 401 trying to hit my servers (which is the biggest security win here) but said nothing and left it up to interpretation so non-technical people would think it’s a bad thing. That was the moment I felt bad intent, but I was still gracious enough to try and address his issues and even concede to things tivimate does and doesn’t care about.
Willing and ready to talk about the technical details. One thing i can say though is this, if you think TVLok is unsafe, then wait till you meet Tivimate ( I went out of my way to avoid all their security mistakes).
Sorry, this is the only way I can respond.
Thank you for mentioning TiviGlass. I honestly wasn’t planning to inspect another app just to make a point, but your comment made me wonder what TiviGlass does that supposedly makes it safer than TVLok.
I downloaded TiviGlass 2.0.5, and it took about two minutes to decompile.
Wow! I can see the database! Everything is plaintext! 
Wow, Tiviglass also sends your data to their servers too (the world has ended, totally unsafe).
That is obviously a joke, but it is the same standard Ted applied to TVLok.
TiviGlass’s permanent database is ordinary SQLite without whole-database encryption. It encrypts selected fields such as the Xtream username and password, but its server and M3U URL remain readable. An M3U URL can contain the complete username, password, or access token.
TVLok uses the same Android Keystore-backed protection for local credentials, then additionally encrypts its permanent databases with SQLCipher. TVLok also encrypts the complete cloud credential record, including the server, username, password, M3U URL, EPG URL, and Stalker MAC.
I also checked the rotating-key claim. TiviGlass downloads its encryption key from its own server using the account token. That means TiviGlass still controls the key, just as TVLok controls its cloud encryption key. It is not end-to-end or zero-knowledge encryption. I could not verify automatic key rotation from the application because its encrypted records contain no individual key identifier or visible support for multiple keys. Rotation may happen privately on the backend, but the client does not prove that claim.
I am not saying TiviGlass is unsafe. It does several things correctly. I am saying that when I apply the exact same inspection to both applications, TiviGlass is not fundamentally safer. Its permanent database actually has less complete protection than TVLok’s, and TVLok encrypts more of the credential record.
About tivimate, That is really my point. TiviGlass deserves credit because its credential protection is better than the TiviMate version I inspected, which stored provider credentials in readable form locally. TVLok goes further by protecting credentials with Android Keystore and encrypting its permanent databases (which actually makes tvlok slower honestly). The additional difference is that TVLok and Tiviglass offer cloud sync, so encrypted account data can follow users across their devices. Cloud sync does not automatically make an application less secure. What matters is how that data is protected and who is allowed to retrieve it.
TVLok has a better UI and will be available in IOS, WINDOWS, MAC AND ANDROID devices, try it when you can.
TED
Hey, if we hacked facebook’s backend we can get all their data. Same for every single website on earth. Lol, same with Tiviglass since they have cloud sync as well and do the exact thing tvlok does. How do you think they are able to do cloud sync?
I am trying to see your point. You have zero technical background and it shows. You have zero idea what you are talking about. Been wasting my time entertaining your ignorance. If any website in the world is breached we can see their data?
Just to be clear, even if tvlok is breached in the backend all your data is encrypted at rest and before they are saved. So your data is safe anyway, same as facebook, google, twitter etc. This is standard and probably what TIVIGLASS does as well (I can’t see their server so can’t tell). Tiviglass doesn’t encrypt M3U (wow), big deal!
Good luck promoting Tiviglass lol. This is hate from a competitor with no idea how anything works trying to destroy TVLOK because it’s beginning to gain traction, to promote another app he’s associated with because he does “security,” something he doesn’t fully understand and any programmer with even 6 months of experience can tell.
He didn’t think the owner of tvlok would actually respond and challenge him and even try the app he’s promoting. “AI backs me up” while posting something that applies to any website or app. Please kindly, copy his image, and feed it into any AI and then ask, does this apply if the DB is encrypted? Do some findings on your own and not allow this guy mislead you.
Will ignore you from now on.
Thank you for your further response and setting the record straight. 
Not entirely true about all cloud sync. Tiviglass is entirely different with what I think is a rotating key type of system. So a very safe cloud setup for customer protection. Not sure about Tivimate being not secure as I am certainly not a coder or Dev and without the dev here to defend those claims I have no opinion, other than I have had a paid Tivimate lifetime for over 5 yrs and not had any issues with the proviso. “Not that I am aware of” and I have some very excellent security apps as well as Dark web scanning and not seen any of my info posted anywhere. Thank you for your work and for being safety conscious, it’s important for a lot of us.
Oh and one more thing the Tiviglass Dev never said anything about your app so that accusation is entirely false. Don’t know where you got that info from but you’re wrong. The Dev for Tiviglass is a long time network security expert and has very robust security coded into his app. He certainly doesn’t want to justify this childish rant with a rebuttal, he’s to busy adding functions, options and abilities that ppl have been requesting. I also never said a single negative thing about your app ever. I never ever said Tiviglass was safer than your app. How could I? I haven’t ever installed TV Lok, or used it, so no understanding why you singled me out just because I mentioned Tiviglass. I also only mentioned about cloud storage and that Tiviglass has what I think is a rotating key type of system for security, which I am told makes it safe. For that I think I am owed an apology. If you noticed I actually moved all the posts mentioning Tiviglass into it’s specific thread as I didn’t want to clutter yours up with info about another IPTV app so your thread could be left to discuss your app and your app alone, as our guidelines mention.
Finally Tedd has absolutely nothing to do with Tiviglass, nor do I, either in development, coding or ownership. Comments were his and his alone and I have had no influence on any comments regarding your app at all either negative or positive. I never comment on any app unless I have actually used it. Kinda unfair of you to make such negative comments about a competitor IMHO.
I do wish you all the best and look forward to comments from actual users who have no skin in the game other than wanting an excellent IPTV Media Hub. But I respectfully request that you not draw me into this ridiculous debate, I am honestly way to busy to bother, and have this site to monitor and ppl on it to help. Thank you for your help and understanding.
Holy Toledo, Batman!
Some one awarded you longest 1st post ever yesterday. I will go ahead and say longest 2nd post as well.
I am with Solo, I don’t give a rats a$$ what’s under the hood and don’t want to learn. I just want it to work. I so much appreciate there are those in the world with interest and patience to make sure all the semi colons and comas are in the correct place, but it is not for me.
So, big thank you to you and all in your trade/profession.
Let us know when your player is ready for prime time and I’ll give it a shot. Heck, I have tried several and deleted after couple hours cause they just didn’t suit me. I’m not afraid to try’em.
For the record, I am big fan of Mytvonline3, Tivimate & UHF. So if you are going to have impact in a crowded field you are going to need to dazzle us. And just make it work.
I have removed my posts. Security is very important to me. Everyone can do whatever they want and use whatever they want.
How do you get the app so I can install it? I have a ONN 4K plus streaming device.
Downloader - code 3587280
How do you install it onn plus steaming device
i try does not work
i try on downloader did not work thank’s
hey Bill i got it had to turn my vpn off surfshark
I cant find it in the play store
Go to tvlok.com, set up an account, go to 7 day free trial, enter your info and cancel within the 7 day trial period it you don’t want it. Otherwise, recurring monthly fee will apply.
It isn’t in the play store. Use the Downloader code to load the player.
Some apps don’t work well with Surfshark unless you turn off the advanced security settings. Make sure you enable developer options and disable play protect on your device also before using Downloader.