Offline Downloads in Streaming Apps: DRM and Limits 2026

Updated October 2026: verified download limits for Netflix, HBO Max, Prime Video, Peacock and YouTube Premium, offline license renewal and proof of deletion on Android and Apple, subtitles and audio tracks in downloads, plus a short answer and an FAQ.

What are offline downloads? The short answer

Offline downloads let a viewer save an episode or film inside a streaming app and play it later with no internet connection. The app stores two things while the device is still online: the encrypted video segments and a persistent DRM license that holds the decryption key and the expiry rules. In airplane mode the player reads both from local storage. That is why a download stays protected, expires on schedule, and only plays inside the app that saved it. For the one-line definition, see the offline playback glossary entry.

How long downloads last: on most subscription services, an unwatched download expires about 30 days after you save it. Once you press play, you get about 48 hours to finish. In October 2026, HBO Max, Peacock and Prime Video subscription titles all publish that 30-day / 48-hour pair in their help centers. YouTube Premium instead asks the device to reconnect at least every 29 days. Offline streaming is not a separate technology: it is the same download, played back from the device instead of the network.

Why this matters

Downloads are how a streaming service keeps watch time on commutes, flights, and anywhere the network is weak or metered, and they are a headline feature in almost every subscription app, so a product manager scoping a roadmap will be asked for them early. The trap is treating "downloads" as a small front-end task when it is really a content-protection feature: get the license model wrong and a viewer's saved movie either refuses to play in airplane mode or, worse, plays forever after the rental should have ended and breaks a studio deal. This article explains offline download and playback in plain language so you can scope the work, judge a vendor's player SDK, and have an accurate conversation with both your engineers and your content owners. It is the deep companion to the offline section in iOS and Android playback and sits next to the OTT client matrix, which maps every screen you must cover.

Offline is a second playback path, not a setting

Start with the mental model, because it is the thing teams get wrong first. When a viewer streams, the player reaches out across the network for two things, continuously: the small chunks of video, called segments, and — for protected content — a license, the data packet that holds the decryption key and the rules for using it. Both arrive on demand and neither is meant to outlive the session. Offline flips that. The app fetches everything ahead of time, while there is still a connection, and writes it to the device so that later, with the network switched off, the player can read from local storage instead of the internet.

That single difference — pre-fetch and persist, rather than fetch on demand — ripples through the whole stack. You need a download manager that can pull a whole title reliably in the background and survive the app being closed. You need a secure place on the device to keep the encrypted video. And, the part that surprises non-specialists, you need a special kind of license that is allowed to be written to disk and read again with no server in reach. Streaming code does none of these things, which is why offline is built and tested as its own path rather than bolted onto the player.

Figure 1. Offline is two downloads, not one: the media and a persistent license, both captured while online and read back later with no server in reach.

Two downloads, never one

The most useful sentence in this article: an offline download is two downloads, not one. The first is the obvious one — the video and audio segments, the same files the CDN already serves for streaming. The second is the license, and it is the one that decides whether anything plays.

When you stream, your player asks your license server — the service that hands out decryption keys after checking the viewer is entitled — for a license each time it starts a protected title, and that license is thrown away when the session ends. For offline, the player must ask for a different kind of license during the download, while the device is online, and store it next to the media. Later, in airplane mode, the player reads that stored license, gets the key, and decrypts the video locally. If you forget the second download, the media is on the device but every frame is a black screen, because the key never came along. How the key exchange itself works is covered in license servers and key delivery; here the point is simply that offline means you capture the license too, and you capture it early.

The persistent license is the whole game

The kind of license that is allowed to live on the device is called a persistent license, and it is a precise technical concept, not a marketing word. The web standard that governs browser playback, the W3C Encrypted Media Extensions specification — usually shortened to EME, a 2017 W3C Recommendation — defines three types of decryption session. (A second edition, EME v2, is still a W3C Working Draft; the latest draft is dated 13 October 2026, so the 2017 Recommendation remains the version browsers are measured against.) A temporary session keeps nothing: the license and keys vanish when the session ends, which is normal streaming. A persistent-license session is the offline one: in the words of the standard, the license "will be persisted," and a record of its destruction must also be persisted when the keys are deleted. A third type, persistent-usage-record, keeps only a log of what was played, for reporting. Offline download is the persistent-license type, and the standard marks support for it as optional — which is the first hint that offline is not available everywhere.

The native systems mirror this exactly under their own names. On Apple devices, Apple's content-protection system FairPlay Streaming returns a content key the server has flagged as either transient or persistent; when it is persistent, the device writes an offline key it can read back later. On Android, Google's Widevine issues an offline license that the player stores as a small identifier. On Windows and many smart TVs, Microsoft's PlayReady keeps a persistent license in non-volatile storage that "lasts for the lifetime of the store or until a time-based restriction is reached." Three vendors, one idea: a license that is permitted, by policy, to outlive the network connection.

Two consequences follow, and both matter for scope. First, you must fetch the persistent license while the device is online — there is no way to obtain it later in airplane mode, so the download flow has to acquire and verify it before it tells the viewer "ready to watch offline." Second, a persistent license is more sensitive than a streaming one, because the key now sits on the device, so content owners demand a higher security bar to issue one — typically hardware-backed protection — which is why offline is often blocked on rooted or jailbroken devices and on software-only playback paths.

The same encrypted file, a different kind of license

Here is the reassuring part for anyone worried that offline doubles their encoding bill: it does not. The video a viewer downloads is the identical file you already stream. Modern streaming encrypts each title once using the cbcs scheme of the umbrella standard Common Encryption (ISO/IEC 23001-7), packaged in the CMAF fragmented-MP4 container (ISO/IEC 23000-19), and that one encrypted package already plays under FairPlay, Widevine, and PlayReady alike. We cover that convergence in multi-DRM: one workflow, every device and the scheme detail in CENC, CTR, and CBCS explained.

Offline reuses all of it. You do not produce an "offline copy" of the catalog. You download the same cbcs segments and pair them with a persistent license instead of a temporary one. Keep the two ideas separate in your head: the media is unchanged; only the license type changes. That distinction is what lets a service add downloads without a second encode of thousands of hours of video.

Per-platform reality: iOS, Android, and the web

Like streaming, offline is built per platform, and the pieces differ. The table below is the coverage map; read down the column you are scoping. The "Native support" column is the one that decides feasibility — offline is comfortable on the two mobile platforms and genuinely hard in a plain browser.

On iOS, you download HLS content with AVAssetDownloadURLSession driving an AVAssetDownloadTask, and for protected titles you request a persistable FairPlay key through AVContentKeySession during the download and store it; Apple's framework manages the encrypted asset store for you. On Android, the ExoPlayer engine inside Jetpack Media3 (latest stable 1.11.1, September 2026) uses a DownloadManager (run from a background DownloadService) for the media, and a helper called OfflineLicenseHelper downloads the Widevine offline license, returning a small keySetId you keep and hand back to the player to unlock the file. A minimal sketch of that Android swap — illustrative, not production code:

// 1) While online: pre-fetch the offline Widevine license.
val keySetId = offlineLicenseHelper.downloadLicense(format)  // store this blob

// 2) Later, offline: build the source with the stored key, no license URL.
val drmConfig = MediaItem.DrmConfiguration.Builder(C.WIDEVINE_UUID)
    .setKeySetId(keySetId)          // use the saved key instead of a server URL
    .build()

On the web, offline is the weak corner. The persistent-license session type exists in EME, and players such as Shaka Player can store content and licenses in the browser's local database (IndexedDB). But support is inconsistent across browsers, persistent licenses are not available everywhere, and browser storage is explicitly best-effort — the operating system may reclaim it when the device runs low on space, so a "downloaded" film can simply vanish. For a dependable download feature, a native app, or at least an installed app wrapper, is the realistic answer; the browser path is a bonus, not a foundation. The web DRM machinery sits in the EME browser DRM stack and web playback.

Figure 2. The offline coverage map. Green cells are natively supported; the web column is mostly amber because browser storage is best-effort and persistent licenses are inconsistent.

Which streaming services allow offline downloads? Limits in October 2026

Every major subscription service supports offline downloads on phones and tablets, but each one sets its own limits by plan. The table below is taken from each service’s own help center, checked in October 2026. Read it as a set of product decisions, not technical limits: the same persistent-license mechanism sits under all of them, and only the policy numbers differ.

Three patterns repeat. First, ad-supported tiers get fewer downloads or none: Netflix meters its ad plan monthly, and HBO Max and Peacock keep downloads for their top tiers. Second, the 30-day / 48-hour pair is the industry default for subscription titles. That is the two-clock model described below, with these exact numbers. Third, caps are counted on the server, not on the device. The service counts active persistent licenses per account or per device and refuses a new one when the cap is reached. That is why deleting a download (which releases its license) frees a slot.

Two clocks: the storage window and the playback window

This is the part product managers most often get wrong, and it is the most important rule in the article. A downloaded title is governed by two separate clocks, set by the content owner and enforced by the persistent license, and whichever runs out first ends playback.

The first clock is the storage window, sometimes called the rental or storage duration: how long the license is allowed to live on the device after it is issued. A common value is 30 days. Download a film today, do not open it, and the license still expires in 30 days. In a license server this is one number — 30 days is 30 × 24 × 3600 = 2,592,000 seconds — and after it elapses the device deletes the license and the download stops playing.

The second clock is the playback window, or playback duration: a shorter timer that starts the first time the viewer presses play. A common value is 48 hours. The classic rental rule "30 days to start watching, 48 hours once you do" is exactly these two clocks working together — the storage window gives you a month to begin, and pressing play trips the 48-hour window that then governs the rest. PlayReady even supports a "real-time expiration" mode for very short, precisely timed rentals. The two-clock model is set in license policy, which we cover in full in license policy: rentals, offline, and output control.

Figure 3. Two clocks govern every download. The storage window counts from the download; the playback window counts from first play; the earlier deadline wins.

Work a quick example out loud. A viewer downloads a film on the 1st with a 30-day storage window and a 48-hour playback window. If they never open it, it expires on the 31st — the storage clock. If they press play on the 20th, the playback clock starts and the film stops working on the 22nd, eight days before the storage window would have ended — because the earlier of the two deadlines always wins. Your app's job is to show the viewer the relevant clock: "Available for 29 more days" before they start, then "Expires in 47 hours" after they press play. Getting that message wrong is the most common offline support ticket.

A subscription download behaves the same way mechanically, just with friendlier numbers: the storage window is often tied to the subscription (the download keeps working as long as the membership is active and the device checks in periodically), and there may be no playback window at all. The mechanism — a persistent license with an expiry — is identical; only the policy values change.

License renewal and proof of deletion: keeping downloads valid

A download does not have to be fetched again when its license runs out: the app can renew the license over the network and keep the media. HBO Max, for example, lets a viewer renew an expired download several times, as long as the device is online, signed in, and the title is still available in that country. YouTube Premium does the same thing on a timer: the app must check in at least every 29 days so the service can remove titles that are no longer licensed for offline viewing.

Both native platforms expose this directly. On Android, Media3’s OfflineLicenseHelper has renewLicense() to extend a stored Widevine license, getLicenseDurationRemainingSec() to read both clocks, and releaseLicense() to give the license back when the viewer deletes a title. On Apple platforms, AVContentKeySession handles persistable FairPlay keys. It can ask the key server for an expiry date (makeSecureTokenForExpirationDate). It can also invalidate a key and return a signed record that the key server can check as proof of deletion (invalidatePersistableContentKey).

That proof of deletion is what makes per-device download caps enforceable. The server only gives a slot back once it has confirmed that the old license is gone. If you are designing a service for “no frequent license revalidation”, the setting to choose is the check-in interval. A long storage window with an occasional silent renewal (the YouTube-style 29 days) gives frequent travellers the fewest surprises. A short window protects premium or early-release titles better.

Subtitles, audio languages and HDR in downloads

A download only contains the tracks the app chose to save, so subtitles and extra audio languages have to be picked at download time. On iOS, AVAssetDownloadConfiguration lets the app list the media selections (audio languages and subtitle tracks) to fetch alongside the video. On Android, Media3’s DownloadHelper chooses which video, audio and text tracks go into the download request. If a viewer later switches to a language that was not downloaded, offline playback cannot show it, so good apps download the device language plus the viewer’s last-used subtitle and audio by default.

Codec and HDR follow the same rule. A downloaded rung is just another rendition from the ladder, so HDR offline needs an HDR rung that is offered for download, a device that can decode it, and a license policy that allows that quality on that device. Services often limit download quality on purpose. HBO Max offers Good, Better and Best, with Good as the default and about 1–2 GB per hour, because storage, not bandwidth, is the constraint on a phone.

Storage math: what a season costs on a phone

The other number that surprises teams is disk space, and it is worth showing the arithmetic, because it drives a product decision. A 1080p stream at 5 megabits per second uses 5 ÷ 8 = 0.625 megabytes every second. Over an hour that is 0.625 × 3600 ≈ 2,250 megabytes — about 2.25 GB per hour. A 45-minute episode is therefore roughly 1.7 GB at that quality, and a ten-episode season about 17 GB — enough to fill the free space on a budget phone with a single show.

That is why mature download features never silently grab the highest quality. They offer a download-quality choice — "standard" versus "high," for example — and default to the lower one. The savings are large because a lower rung uses a smaller bitrate: many services download in the efficient HEVC codec at around 720p, landing near 250 MB per hour for standard and roughly 500 MB per hour for high, against the 2.25 GB of a full 1080p rung. Offer the viewer that choice and a season drops from 17 GB to 2–4 GB. Many platforms also add smart downloads — automatically fetching the next episode and deleting the watched one — so a binge-watcher's device stays roughly constant rather than filling up. The encoding ladder these rungs come from is the subject of the encoding ladder explained.

Figure 4. Download quality is a storage decision. Defaulting to a standard rung can cut a season's footprint by roughly five times.

What the content owner allows — offline is a rights decision

The final reframe: much of what your offline feature can do is not your choice at all. Whether a title can be downloaded, how long the storage and playback windows run, how many devices may hold a copy at once, and whether a download survives a lapsed payment are all content-owner rights decisions, expressed in the license your server issues and enforced by the device's DRM. Some studios forbid offline for premium or early-window titles entirely; your catalog can then be a patchwork where some titles show a download button and others do not, and that state has to come from your entitlement system, not a global toggle.

Device count is part of the same picture. Major services cap how many devices may hold downloads at once and how many downloads each one may keep. Netflix, for example, allows downloads on 2 devices at a time on Standard with ads and Standard and on 6 on Premium; ad-free plans keep up to 100 active downloads per device, while the ad plan is limited to 15 downloads per device per calendar month (Netflix Help Center, October 2026). These are business rules layered on top of the DRM, and they live in your billing and entitlement logic, which we cover in subscription billing and entitlement. The security bar matters too: because a persistent key sits on the device, content owners usually require hardware-backed protection (Widevine's L1 level, or Apple's Secure Enclave) for HD and 4K offline, and block downloads outright on rooted or jailbroken devices where that protection cannot be trusted.

Common mistakes — the five that break downloads. First, forgetting the second download: the media is saved but no persistent license, so every offline frame is black — always acquire and verify the license during the download, while online. Second, trying to fetch the license in airplane mode — it cannot be done; pre-fetch it. Third, showing the wrong clock, so a viewer who pressed play sees "29 days left" and is shocked when it dies in 48 hours — surface the active window. Fourth, defaulting to full-quality downloads and filling the user's phone — offer a quality choice and default low. Fifth, assuming the browser can do reliable offline — plan a native app for dependable downloads, because browser storage is best-effort and can be reclaimed.

Frequently asked questions

What are offline downloads?

Offline downloads are videos saved inside a streaming app so they can play with no internet connection. The app stores the encrypted video plus a persistent DRM license that unlocks it and sets when it expires.

How does offline downloading work on tablet and mobile streaming apps?

While online, the app downloads the encrypted segments in the background and requests a persistent license (FairPlay on iPhone and iPad, Widevine on Android) that it stores next to the media. Offline, the player reads both from the device and decrypts locally.

How do streaming subscriptions handle downloads for offline viewing?

Downloads stay valid only while the subscription is active and within the license windows, typically 30 days to start and 48 hours to finish. Plans differ in how many devices and downloads they allow, and ad-supported tiers usually get fewer downloads or none.

Which streaming services let you watch downloads longest without reconnecting?

As of October 2026, YouTube Premium allows up to 29 days offline before the app must reconnect. Netflix, HBO Max, Peacock and Prime Video subscription titles typically expire 30 days after download, or 48 hours after you start watching, and some can be renewed online.

Can you download subtitles and other audio languages for offline playback?

Yes, if the app saves those tracks at download time. Any subtitle or audio language that was not downloaded is unavailable offline.

What are the challenges of offline fallback for streamed content?

The hard parts are getting the persistent license before the network drops, storage on small phones, showing the right expiry clock, enforcing per-device caps, and the browser, where storage is best-effort and persistent licenses are not supported everywhere.

Is offline streaming the same as offline downloads?

Yes, in practice. “Offline streaming” means playing a downloaded copy inside the streaming app, not streaming without a network. The technology is the same download plus persistent license.

Where Fora Soft fits in

Offline tends to surface every weak point in a streaming build at once, because it must work at the scale of a full catalog, across iOS and Android, under each content owner's rights rules, and with a persistent license that has to be acquired, stored, and expired correctly on the device. Fora Soft has built video streaming, OTT/Internet TV, e-learning, and telemedicine apps since 2005 — 250+ projects across 20+ years — so the offline patterns here (persistent FairPlay and Widevine licenses, the two-clock rental model, download-quality management, and the entitlement rules that gate it) are part of the day-to-day of our streaming work. We are vendor-neutral: we translate each content owner's offline policy into a download flow that holds up in the field, rather than reselling a single DRM SDK. On new builds this ships inside our OTT and Internet TV app development, and the iOS and Android download managers, storage limits and background-transfer logic come from our mobile app development team.

The handbook

Fora Soft Video Engineering Handbook

We wrote a seven-volume handbook that works through the whole video stack across 9,000+ pages, and a download feature touches three of its layers at once. Volume 3 carries the part this article leans on hardest - DRM and the license layer, players and CDMs, and the economics of delivery - Volume 2 covers the CMAF packaging and manifests that produce the very segments a device saves, and Volume 1 explains the encode ladder whose rungs decide whether a season costs 1.9 GB or 17 GB on a phone. Read the three and you can specify the license policy, the download manager and the quality choice yourself. Written by Nikolay Sapunov, CEO at Fora Soft.

Browse the handbook on Amazon →7 volumes · Kindle & paperback

See our case studies

References

1. Encrypted Media Extensions. W3C Recommendation, 18 September 2017. Defines the temporary, persistent-license, and persistent-usage-record MediaKeySession types; the persistent-license type is the offline-download session and its support is marked optional. Tier 1 (primary standard). https://www.w3.org/TR/encrypted-media/
2. Common Encryption in ISO base media file format files — ISO/IEC 23001-7. ISO/IEC. Defines the cenc (AES-CTR) and cbcs (AES-CBC) schemes; the same cbcs-encrypted segments are what a device downloads for offline, paired with a persistent rather than temporary license. Tier 1 (primary standard). https://www.iso.org/standard/68042.html
3. Common Media Application Format (CMAF) — ISO/IEC 23000-19. ISO/IEC. The fragmented-MP4 container for the downloaded segments; one package serves streaming and offline alike. Tier 1 (primary standard). https://www.iso.org/standard/79106.html
4. HTTP Live Streaming — IETF RFC 8216. IETF, 2017. The HLS format Apple's AVAssetDownloadURLSession downloads for offline playback on iOS. Tier 1 (primary standard). https://www.rfc-editor.org/rfc/rfc8216
5. Persistent and Non-persistent Licenses — Microsoft PlayReady. Microsoft Learn. States that persistent licenses are stored in non-volatile memory for offline playback and last for the lifetime of the store or until a time-based restriction (date/time expiration, expiration after first play, real-time expiration). Tier 3 (first-party). https://learn.microsoft.com/en-us/playready/overview/license-persistence
6. Discover how to download and play HLS offline — WWDC20; FairPlay Streaming. Apple. AVAssetDownloadURLSession/AVAssetDownloadTask for HLS download and the persistent FairPlay content key (CKC content-key type) stored for offline playback. Tier 3 (first-party). https://developer.apple.com/videos/play/wwdc2020/10655/
7. OfflineLicenseHelper — Android Media3 / ExoPlayer. Google, Android Developers. downloadLicense() returns a keySetId for a Widevine offline license, swapped in via setKeySetId for offline playback. Tier 3 (first-party). https://developer.android.com/reference/androidx/media3/exoplayer/drm/OfflineLicenseHelper
8. Offline Storage and Playback — Shaka Player. Google / shaka-project. Browser offline via IndexedDB and the EME persistent-license session type; storage is best-effort and content must be treated as transient. Tier 3 (first-party). https://github.com/shaka-project/shaka-player/blob/main/docs/tutorials/offline.md
9. DRM Offline Licensing — storage duration vs playback duration. DRM service documentation (Gumlet / Insys Cloud). The two-window rental model: storage duration (how long the license persists, e.g., 30 days = 2,592,000 s) and playback duration (max time after first play; the example uses 7,200 s = 2 h, and consumer services typically use 48 h). Checked October 2026. Tier 5 (vendor). https://docs.gumlet.com/docs/drm-offline-licensing
10. Download titles to watch offline; download limits. Netflix Help Center, checked October 2026. Up to 100 active downloads per device on ad-free plans, 15 per device per calendar month on ad-supported plans, 2 download devices on Standard with ads and Standard and 6 on Premium (help.netflix.com/en/node/24926), and expiry windows (7–30 days, or 48 h after first play); standard ≈250 MB/h and high ≈500 MB/h at ~720p HEVC. Tier 6 (industry reference for current numbers). https://help.netflix.com/en/node/54816
11. Download HBO Max shows and movies. HBO Max Help Center, checked October 2026. Plans that can download, 30/100 download caps, 30-day and 48-hour expiry, renewal, Good/Better/Best quality. Tier 6 (industry reference for current numbers). https://help.hbomax.com/US-en/answer/detail/000002511
12. Prime Video Usage Rules. Amazon, checked October 2026. Two devices at a time for subscription titles, 30 days / 48 hours, rentals on one device, purchases on four. Tier 6. https://www.primevideo.com/usage/en
13. Peacock downloaded content. Peacock Help, checked October 2026. Premium Plus only, 25 downloads across devices, 30-day and 48-hour removal. Tier 6. https://www.peacocktv.com/help/article/can-i-watch-peacock-content-offline
14. Watch videos offline with YouTube Premium. YouTube Help, checked October 2026. Offline for up to 29 days before reconnecting; 48 hours in some regions. Tier 6. https://support.google.com/youtube/answer/11977233
15. AVContentKeySession. Apple Developer Documentation. Persistable content keys, makeSecureTokenForExpirationDate and invalidatePersistableContentKey for expiry and proof of deletion. Tier 3 (first-party). https://developer.apple.com/documentation/avfoundation/avcontentkeysession
16. Encrypted Media Extensions (EME v2), W3C Working Draft, 13 October 2026. W3C Media Working Group. Tier 1 (primary standard, draft). https://www.w3.org/TR/encrypted-media-2/

Where sources disagreed, the official standard was followed. Popular "offline is just a download toggle" framing was overridden by the W3C EME definition, which shows offline requires a distinct persistent-license session type whose support is optional. Vendor "download anything" marketing was overridden by the per-platform reality that the browser path is best-effort and persistent licenses demand a higher device-security bar.