What twiga can’t do

What twiga can’t do

It can’t hand you channels. twiga is relay software you point at a subscription you already pay for — the wire, not the content. You bring your own M3U or Xtream source; twiga plays it. It isn’t a content provider, and there is no catalogue to buy from us.

Play your movies or series. twiga is a live-TV player — it shows the live channels on your line, nothing else. If your provider bundles films or box-sets, they stay in your provider’s app.

It can’t play more than one stream at once. One playback per account, by design — open a second and the first stops. That’s the single-stream architecture, not a limit we’ll quietly lift; it’s the shape of the product.

It can’t unseal your provider login or your channels’ stream URLs if you lose both your key and your recovery code. Lose one — your key — and you’re fine: with the recovery code you saved at set-up you restore your vault yourself onto a fresh key, no email to us. Lose both and nobody can open them, us included: they’re sealed at rest, and there’s no reset email and no back door, because a door for you is a door for whoever shows up dressed as you. There’s no way back in — you start over with a new invite. Nothing leaks; your provider login was never stored readable. Keep the code somewhere your key isn’t.

It can’t play a format nothing on your device can decode. The server is a blind relay — no server-side transcode, no catch-up, no recording — so all decoding happens on your device. H.264 plays everywhere; HEVC plays natively where your browser supports it, and where it doesn’t we software-decode HEVC and MPEG-2 in the tab ourselves, as far as your device can keep up; where nothing can — AV1, or HEVC too heavy for a weak device — it hits an honest terminal failure rather than a faked picture. We’d rather say so than show you a black screen pretending to load.

It can’t hide from your provider that its own credentials are in use. Your provider stops seeing your home IP — it sees one of twiga’s VPN exits instead — but it still sees its account active and every request that account makes. twiga moves who sees your IP, not who owns the account.

And it can’t promise an M3U link never leaves your device. The URL usually carries your login, and the playlist behind it has to be fetched before there’s anything to seal — so the link reaches our server once, held in RAM for a single outbound fetch, then dropped. The honest claim for M3U is “never stored readable”, not “never leaves your device”. Only an Xtream login is sealed on your device before anything uploads; the whole distinction is spelled out on is it safe to give us your credentials?

What it doesn’t have yet

No iPhone or Mac app, and no Apple TV. The player runs in your browser — that’s the only way in during the beta. An Android TV app is in development, not part of this beta; we’ll name a TV platform when it ships, not before.

There’s no playlist URL to paste into an external player, and no Chromecast or AirPlay yet — you watch in the browser tab.

And twiga is in beta. During the beta everything is free — nothing is charged and there’s no checkout. €4 a month and €33 a year are the planned post-beta prices, in Monero — no card, no ID, and nothing on file linking the payment to your account. The full walk-through is on how do I pay?

What’s verifiably true — and how to check us

The limits above are the cost of a design that’s built to be checked, not taken on faith. Each claim below comes with the step an outsider can run to confirm it.

Every codec is decoded in your browser; the server relays opaque bytes. Open your browser’s DevTools while a channel plays: the server’s stream responses are raw MPEG-TS, and the WebAssembly decoders load and run in the page. Nothing on the relay reads what you watch, because there’s no decoder on it to read with.

Your provider sees a VPN exit, never your home IP. The player shows the exit your streams leave from; check it against what your provider-side panel reports as the connecting address — they match the exit, not you.

Your login and each stream URL are sealed on your device; at rest the server holds only ciphertext and a public key — channel names and groups stay in the clear so search and the guide work. In the DevTools network tab, watch a source get added: the seal payload that uploads is ciphertext, and no password crosses the wire — sign-in is challenge–response, a signature, not a secret.

The guide is fetched over Tor; streams and playlist refreshes leave via the VPN exits. Any one of these you could find on its own. What twiga does is hold all four at once — in-browser decode, a blind relay, a login and stream URLs sealed with your key, and VPN-exit routing on the provider side — in a browser tab. Each piece is checkable on its own; the point is that they hold at the same time.

Quick answers

Does twiga give me channels or a subscription?

No. twiga is relay software, not a content provider — it’s the wire, not the subscription. You bring your own M3U or Xtream source from a provider you already pay for, and twiga plays it. It sells no channels and hands out no logins.

Can I watch two channels at once on twiga?

No. twiga plays one stream at a time per account — one playback, by design. Open a second and the first stops. It’s a deliberate limit of the single-stream architecture, not a bug you can work around.

I lost my key — can I still get in?

Yes, if you saved your recovery code. Restore is self-serve: you present a fingerprint of the code, we hand back a second, code-wrapped copy of your vault key, your device unwraps it and rotates you onto a brand-new key and a fresh recovery code. No reset email and no support ticket — and no way for a stolen database to do the same, because the rotation is authorized by a signature only your recovery code can make. Only losing both your key and your recovery code is unrecoverable.

What happens if I lose my key and my recovery code?

Your provider login and every channel’s stream URL can’t be unsealed — not by you, not by us, not by anyone we could be compelled to help. They’re sealed at rest, and there is no reset email and no back door. There’s no way back in — you start over with a new invite. Nothing leaks; your provider login was never stored readable.

Does twiga hide from my provider that I’m using its subscription?

No. Your provider stops seeing your home IP — it sees twiga’s VPN exit instead — but it still sees its own account active and every request that account makes. twiga moves who sees your IP, not who owns the account.