What Is M3U8? HLS Playlists & Streaming Explained

M3U8 is the plain-text playlist format behind HTTP Live Streaming (HLS) — the technology powering most video streaming today. Instead of one large video file, HLS breaks a video into small segments, and the M3U8 playlist lists those segments in order so a player knows exactly what to fetch and play, and when.

This guide covers how M3U8 playlists work, why HLS breaks video into segments instead of one file, how adaptive bitrate streaming keeps video playing smoothly on any connection, and what it takes to deliver secure HLS streaming from your own site.

How Does an M3U8 Playlist Work?

An M3U8 playlist doesn’t contain any video — it’s a list of instructions telling the player which segment files to download, in what order, and how long each one plays. The actual video lives in separate small files the playlist points to.

A typical HLS delivery involves:

• Segmenting — Source video is encoded and cut into short chunks, usually 2-10 seconds each, traditionally in MPEG-TS format or the newer fMP4/CMAF format.
• Playlisting — Segments are listed in order inside a .m3u8 text file, each entry tagged with its duration.
• Fetching — The player downloads the playlist first, then requests each listed segment in sequence over standard HTTP.
• Updating (for live streams) — For live content, the playlist keeps updating with new segments as they’re produced; for on-demand video, it’s a fixed list from start to finish.

Master Playlist vs. Media Playlist — What’s the Difference?

An HLS stream almost always uses two layers of M3U8 playlist working together, and mixing them up is the most common source of confusion. The master playlist (Apple’s newer spec calls it the multivariant playlist) lists every available quality version of the video. The media playlist lists the actual segments for one specific quality version.

Here’s how they interact:

Next, the pipeline that turns a source video into something playable:

• The player reads the master playlist once, at the start, to see what quality options exist (e.g. 1080p, 720p, 480p) and their bandwidth requirements.
• Based on the viewer’s connection, the player picks one variant and starts reading that variant’s media playlist.
• The media playlist is what the player re-fetches repeatedly to get the next segments — continuously for live streams, once for on-demand video.

How HLS Uses M3U8 for Adaptive Bitrate Streaming

Adaptive bitrate streaming (ABR) is what lets a video keep playing smoothly even when a viewer’s connection changes mid-stream, and M3U8’s master/media structure is what makes it possible. Because the master playlist lists every quality variant upfront, the player can switch to a different media playlist — a lower bitrate when bandwidth drops, a higher one when it improves — without restarting playback or reloading the page.

This is exactly the problem HLS was built to solve: Apple introduced it for the original iPhone because mobile networks were unreliable enough that a single large video file would constantly stall or fail. Segmenting video and switching quality on the fly let playback recover from network drops and start almost instantly instead of waiting for a full download.

Is M3U8/HLS Secure?

An M3U8 playlist and its segments aren’t secure by default — anyone with the playlist URL can typically fetch the segments unless protection is added. HLS supports segment-level AES-128 encryption through a key tag in the playlist, which is a meaningful first layer. For content where piracy is a real risk — paid courses, enterprise training, premium subscriptions — that’s usually paired with full DRM (Widevine, FairPlay, PlayReady), which we cover in What Is DRM? Digital Rights Management Explained. Inkrypt’s video security features layer both together automatically.

M3U8/HLS vs. Other Streaming Formats

• Vs. plain MP4 download — A single MP4 has no adaptive quality and no recovery from a network drop; a poor connection just means buffering or a failed load. HLS’s segmented, multi-quality approach was built specifically to fix this.
• Vs. MPEG-DASH — DASH uses the same segmented, adaptive approach as HLS but with its own manifest format (MPD instead of M3U8). It’s not natively supported on Apple devices, which is part of why HLS remains the more universal default for cross-platform delivery.
• Vs. RTMP — RTMP was built for live streaming but is mostly used today to get video into a platform (ingest) rather than to deliver it to viewers; HLS and DASH have largely taken over on the delivery side.

Common Use Cases for M3U8/HLS Streaming

• Online courses and on-demand video — Smooth playback across student devices and connection speeds, without buffering interruptions.
• Live streaming events — Real-time delivery that keeps updating the playlist as new segments are produced.
• Enterprise training and internal video — Reliable playback across corporate networks with varying bandwidth.
• Premium subscription platforms — Adaptive delivery paired with encryption to protect paid content.

How to Add HLS/M3U8 Streaming to Your Videos

Getting HLS streaming running comes down to using a platform that handles segmenting and playlist generation automatically — building and maintaining an adaptive bitrate ladder by hand is a real ongoing engineering task most businesses shouldn’t take on themselves.

1. Choose a hosting platform that auto-generates HLS output rather than encoding and packaging manually.
2. Upload your source video — the platform encodes it into multiple quality renditions.
3. Master and media playlists are generated automatically, along with the segment files.
4. Embed an HLS-compatible player — native on Safari and iOS, via a library like hls.js elsewhere.
5. Add protection — AES-128 encryption at minimum, full DRM for higher-risk content.

If you’re comparing platforms, our guide on choosing a video delivery platform with CDN and encryption support walks through what to look for. And our breakdown of cloud video hosting platforms covers how this fits into a broader hosting decision.