If you sell recorded courses, you’ve probably seen it. Enrolment numbers look fine, but the same account is logged in on a phone in one city and a laptop in another. Someone paid once, and a small group is studying for free.
Login sharing is the most common way online courses leak, far more common than anyone ripping video files. The good news is that it’s also the easiest to stop. This guide covers why students share, what it costs you, and the practical steps that make it stop working.
Why students share course logins
Most students who share a login don’t think of it as piracy. From their side, it looks like this:
- It’s easy. A username and password fit in a single message.
- It feels harmless. “I paid for it, I’m just letting a friend watch.”
- It’s low risk. On most platforms, nothing happens when two people use one account.
- It splits the cost. Groups of friends chip in for one enrolment and share it.
That last point matters. Sharing is often organised, not casual, which is why one leaked login can turn into a whole study group.
What login sharing actually costs you
The obvious cost is lost fees. As a simple illustration: if 100 students enroll in a batch and one in five shares their login with two friends, you’re teaching 140 people and being paid for 100. That’s 40 lost enrolments in a single batch.
The less obvious costs add up too:
- Your analytics lie. Watch time and progress reflect several people, so you can’t tell who is actually struggling.
- Support gets messy. Password resets, lockouts and “someone changed my password” tickets usually trace back to shared accounts.
- Paying students notice. When the class knows half the group didn’t pay, the value of enrolling drops.
Seven ways to stop login sharing
No single measure solves it. The combination below makes sharing inconvenient enough that most people simply pay.
1. Limit how many devices each student can use
This is the most effective control by far. Set a cap on the number of devices a student account can log in from, typically two or three to cover a phone and a laptop. Once the cap is reached, another device can’t sign in with that account.
A shared password becomes almost useless: the first few people to log in lock everyone else out. Make sure the limit applies to students only. Teachers and admins need to sign in from wherever they are without tripping the same rule.
2. Watch for logins from unexpected places
If your students are in one or two countries, a login from somewhere else is a signal worth acting on. A good LMS lets you choose whether to simply flag these logins for review or block them outright. Flagging suits academies with travelling or international students; blocking suits local coaching centers.
3. Keep lectures inside native apps
Browsers make sharing easy: anyone with the password can sign in from any computer, and a browser tab exposes links and page resources. Native apps for phones and desktops give you far more control over where lectures play. If your platform lets you switch off browser access, do it for your highest-value courses. We cover this in detail in Native App vs Browser LMS.
4. Stop relying on shareable video links
Unlisted video links and shared drive folders aren’t login sharing, but they cause the same problem, only faster. A link can be forwarded in seconds and needs no password at all. Move lectures into a platform where playback requires a signed-in, enrolled student.
5. Put it in your enrolment terms
Technical controls work best alongside a clear rule. State in your enrolment terms that each account is for one student, that devices are limited, and what happens if sharing is detected. Most students respect a rule they were told about up front. It also gives you firm ground if you need to suspend an account.
6. Use your analytics
Watch-time analytics and activity logs show patterns that point to shared accounts: one student watching far more hours than the rest of the batch, overlapping sessions, or logins at odd times from new devices. Per-student progress data also helps you spot the opposite, students who have paid but stopped watching, which is worth a follow-up in its own right.
7. Make the paid experience clearly better
People share when a login is all they get. Give enrolled students things a borrowed password can’t easily deliver: direct messaging with the teacher, class group chats, progress tracking and a completion certificate in their own name. When the real enrolment is noticeably better, the shared one loses its appeal.
What not to do
Security that punishes honest students backfires. Avoid:
- A one-device limit for everyone. Most students use a phone and a laptop. Start at two or three.
- Locking out staff. Faculty shouldn’t be caught by student rules.
- Changing rules without warning. Tell students before you tighten limits, especially mid-course.
- Slow processes for genuine device changes. Students replace phones. Make it easy for an admin to help.
A simple setup for most academies
If you want a sensible starting point, this works for most coaching centers and course creators:
- Device limit of two or three per student, staff exempt.
- Location policy set to flag logins outside your main countries, with blocking for local-only courses.
- Browser access switched off for premium courses, left on for free or trial content.
- One line in your enrolment terms: one account, one student.
- A monthly look at watch-time outliers and activity logs.
Because these are settings, not code, you should be able to tighten them before exam season and relax them afterwards. If your platform needs a new app release to change a security rule, that’s a problem.
How Floral Gray LMS handles login sharing
Floral Gray LMS was built around this problem. Admins set per-student device limits (staff and faculty are never restricted), flag or block logins by country, and switch browser access off so lectures play only in the native Windows, macOS, iOS and Android apps. Every setting takes effect live, with no rebuild. You can see how each control works on our security page.
Pricing is per enrolled student, batch by batch, which is one more reason to make sure every viewer is actually enrolled. See how pricing works.