Sharing Netflix, Disney, other passwords is illegal according to new guidance

The Intellectual Property Office (IPO), the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebook’s parent company.

The general issue on piracy is about the use of illegal streaming boxes and apps and how these not only expose children to age-inappropriate content due to lack of parental control but also risk putting sensitive personal information in the hands of hackers and digital thieves. What's noteworthy—as TorrentFreak pointed out—is that the UK now flags password sharing, a most talked-about issue in the realm of streaming services, as piracy. Therefore, it is illegal and a potential crime.

Blog Photo

A section of the new piracy guidance from the UK government’s Intellectual Property Office (IPO), who worked with Meta to create the campaign (highlight ours). (Source: GOV.UK)

When TorrentFreak reached out to the IPO for clarification, it was told: "There are a range of provisions in criminal and civil law which may be applicable in the case of password sharing where the intent is to allow a user to access copyright-protected works without payment."

"These provisions may include breach of contractual terms, fraud or secondary copyright infringement depending on the circumstances."

Under Section 11 of the Fraud Act of 2006 in the UK, someone using "services of a members' club without paying and without being a member" is considered fraud.

It's unlikely that streaming services are going to start dragging password-sharing subscribers and moochers (those who borrow subscriber credentials) to court, but the guidance could serve as (1) a deterrent for people who’re thinking about sharing their subscriber credentials and (2) a good conversation starter between the subscriber and the relative or friend who doesn't live with them but shared their credentials with them.

A lose-lose situation

Regardless of how the UK public takes the IPO’s new guidance, the fact remains that sharing one’s streaming service credentials with others is risky, security- and privacy-wise, for subscribers and usually yields negative results for the service provider. That said, these providers could lose money and will continue to as long as they let this behavior go on. According to survey findings from Beyond Identity, a passwordless identity platform, streaming services, on average, lose $642 per account moocher each year. 

It also said that HBO Max stands to lose the most at around $700 a year per moocher.

And let’s not forget the cost of piracy estimated by Parks Associates, a research firm, in 2019. The report reveals that US video providers, which include streaming services, lost $9.1B to credential sharing. This amount is estimated to rise to $12.5B by 2024.

With such figures, a crackdown is inevitable—and everyone knows it.

In October, Netflix announced its plan to do just that in 2023. To pave the way for this, the company introduced features to members in Chile, Costa Rica, and Peru where they can share their account with anyone outside their household safely: new profiles can be added to accounts (for an added cost to the subscriber, of course), and profiles can be transferred to a new account or sub-account. Expect Netflix to follow through on its plan even after seeing a rise in subscribers in Q3 this year.

The company also released a feature that lets subscribers log out of individual devices. Lastly, in Latin America, Netflix rolled out additional fees for using accounts outside a household associated with them.

AT&T, the company owning HBO Max, flags "rampant" abuse when an account is used by many different households. Hulu limits same-time viewing to two screens. This is called screen capping. Disney+ uses technology at the back end that monitors account usage. However, it warns password sharing won’t be allowed forever.

"[Streaming services] don’t necessarily want people to go elsewhere," said Research Director of Entertainment and Consumer Technology at Parks Associates Paul Erickson in an interview. "We'll see them navigate that difficult middle ground where they’re not trying to give the service away, but they’re also not trying to drive people away either."

Source: Malwarebytes Blog

AI Usage Transparency Report

AI Era · Written during widespread use of AI tools

AI Signal Composition

Rep Tone Struct List Instr
Repetition: 52%
Tone: 45%
Structure: 59%
List: 1%
Instructional: 3%
Emoji: 0%

Score: 0.19 · Low AI Influence

Summary

The UK government has released new guidance on piracy and online counterfeit goods, which includes flagging password sharing as a form of piracy. This could lead to a crackdown on streaming services, with Netflix already announcing its plan to do so in 2023.

Related Posts

Leaving Flickr: Migrating 20,000+ Photos to Synology and Taking Back Control

There’s a certain kind of friction you start to notice when you’ve been using a service for a long time. Not enough to make you leave immediately, but enough to make you pause. Flickr had been that kind of service for me. It quietly held years of photos, uploads from old phones, albums I hadn’t looked at in ages, and a massive "Auto Upload" collection that had grown into something I didn’t fully understand anymore.

Read more

How I Finally Passed the PMP Exam (After 12 Years of Waiting)

Back in 2013, I registered for a PMI membership with every intention of pursuing my PMP certification. I downloaded the handbook, bookmarked the eligibility requirements, and even told a few friends that I was going to do it "soon." At the time, I thought getting certified would be a straightforward process, but little did I know what lay ahead in terms of studying and preparation.

Read more

The Evolution of Apple Certification: A Journey Through Versions, Challenges & Growth

When I recently passed the Apple Certified Support Professional (ACSP) exam again, I paused to reflect — not just on this milestone, but on the long path I’ve walked through Apple’s certification landscape. My first certification dates back to macOS 10.5, and over the years, I’ve earned credentials across nearly every version since. In that time, the exams — and Apple itself — have transformed significantly.

Read more

Secure Software, Secure Career: How I Passed the CSSLP

After passing the CISSP earlier this year, I decided to follow it up with the **Certified Secure Software Lifecycle Professional (CSSLP)** certification. For those unfamiliar, CSSLP is an ISC2 certification that focuses specifically on secure software development practices across the full SDLC—from requirements and design to coding, testing, deployment, and maintenance. My goal in pursuing this certification was to further develop my skills in ensuring the security of software throughout its entire lifecycle.

Read more

Managing Bring Your Own Device (BYOD) for Android with Microsoft Intune

Alright, so today we're going to be talking about the management of bring your own device BYOD for Android devices. There's a lot of information out there for the management of iOS devices and you can do that with pretty much any Apple MDM on the market. We just happen to use Jamf where I work, but you could use anything from Braavos to SimpleMDM to Kanji or JumpCloud. Mosyle is also a great option.

Read more

BYO with me in 2025: iOS with User Enrollment in JAMF Pro

It really depends on your company's needs. For example, many companies need to hire 1099 contractors and in such a case they come with their own devices but not the correct security settings or enforcements. Remember BYOD is a security construct. The idea here is that you should be securing the company's sensitive data in all forms. This may involve implementing policies for contractor-owned devices, ensuring that all devices accessing company data meet minimum security standards, and regularly reviewing and updating these standards to stay ahead of emerging threats.

Read more

Securing BYOD Email Access: Exploring Strategies in Microsoft 365

In today’s mobile-first world, organizations increasingly rely on Bring Your Own Device (BYOD) programs to empower employees while optimizing costs. However, this flexibility introduces unique challenges, particularly around securing email access. To mitigate risks, we are implementing a comprehensive strategy to block email access on non-company devices by default and ensure only sanctioned apps can access organizational email accounts. This approach will help prevent unauthorized access and data breaches, aligning with our commitment to maintaining the security and integrity of company communications.

Read more

How I Conquered the CISSP Exam: 9 Months, Top Resources, and Proven Strategies

Passing the CISSP (Certified Information Systems Security Professional) exam is no small feat. It’s known for its breadth, depth, and ability to test not just your knowledge but your practical understanding of cybersecurity. After nine months of intense preparation, I’m thrilled to say I’ve joined the ranks of CISSP-certified professionals! Here's a detailed account of my experience, including the resources I used, some tips that helped me along the way, and what I learned from the process itself.

Read more

Get more out of scripting than you may expect

Expect is an extension to the Tcl scripting language written by Don Libes. The program automates interactions with programs that expose a text terminal interface. Expect, originally written in 1990 for the Unix platform, has since become available for Microsoft Windows and other systems. Its functionality allows users to interact with these programs through scripted commands, eliminating the need for manual input.

Read more