MediaSeal – encryption while you work

MediaSeal® file encryption at-rest is designed to encrypt all types of media files during the editing and review stages of post-production in order to help protect against leaks caused by shared access, accidental distribution, system hacks or piracy. By integrating encryption at-rest with an advanced access control system it ensures that files remain protected. MediaSeal is about the only solution where your files stay encrypted, not just during fast transfer but after the recipient has accessed the content and while it is being worked on for example in editing. 

MediaSeal is based on a trusted user model preventing file access to anyone but the intended recipient. It cannot prevent trusted users from saving out files or screen capture but does report instances of saved out files where remote authentication is active with audit logs to report on the trusted user’s activity with the encrypted file.

Through a monthly per user per month subscription pricing model MediaSeal is affordable on a pay-as-you-go basis where you pay for when you use it. 

MediaSeal has multiple access authentication points making it stronger than any other solution:

  • Remote authentication against the key server
  • Password
  • Decryptor software
  • The iLok key or soft key with client
“When I saw how easily we could encrypt files with MediaSeal at file level, it became the cornerstone of our media protection process for our stages in L.A. and New York City. We love knowing that encrypted MediaSeal files are rendered unplayable outside of our facilities.” Mark Kondracki, Principal of Outloud Audio

Outloud Audio Adopts Fortium’s MediaSeal File Level Encryption to Meet Heightened Security Threats - Latest News. Become MediaSeal enabled or set up a no-obligation encryption while-you-work trial by contacting us -

Introducing new LiveFolders - Encryption on-the-fly

Encryption on-the-fly with LiveFolders is a new, upcoming solution that makes it easier to protect your content

Self-protect your workflow - Simply make any folder a Live Folder™ and any content you copy in to it or create in it will be protected with a preset protection policy.

Encrypted end-to-end transcoding - Keep the workflow encrypted throughout transcoding engines. Import an encrypted in and exported a transcoded file out that's ready for editing.

Share your Live Folder with colleagues - You can create a Live Folder on a shared server, allowing colleagues to auto-encrypt their sensitive files

Re-encrypt edited files - In any editing program, like Avid Pro Tools, Media Composer or Adobe Premiere, you can copy or create new edited files in the Live Folder to encrypt them

Fast File Transfer - Extend encryption beyond distribution and keep files protected through the workflow. With Live Folders, files are never unprotected on disk either in the cloud or with the client.

Contact us for more information on how Live Folders encryption on the fly could help you keep sensitive content secure.


If you have series premier or movie in the pipeline and are concerned about the risk of leaks ahead of release, then MediaSeal is the ideal solution to use during post production. MediaSeal secures files in collaborative workflows when shared across departments and vendors during post production protecting from accidental or unauthorized distribution. MediaSeal is file agnostic and compatible with all professional editing programs (Avid, Adobe, Final Cut etc). Sunrise sunset & revocation DRM, multiple factor authentication and used by leading TV and film studios.

MediaSeal file security enables to be encrypted at-rest while being worked on in any programs during collaborative workflows. Files can only be accessed by authorized users. All user activity is audited and logged by the administrator:

  • Relevant for all premium content
  • Encryption at-rest - all files all programs
  • Easy to use, no impact on workflows
  • Risk mitigation from leaks & piracy
  • Audit & logging of content

MediaSeal is a robust, multi-layered content security platform that has been specifically designed for post-production environments. It ensures that all sensitive files can be encrypted while being worked on in sound and picture editing, localisation and marketing. Its multi-layer security authenticates authorized users through hardware keys with AES encryption wrappers.

MediaSeal is the only solution compatible with complex workflows for protecting sensitive content from pre-release piracy.

How MediaSeal works

MediaSeal users are split into two categories: Encryptors and Decryptors. The Encryptor user encrypts sensitive content via the MediaSeal Encryptor application. During this process, they select from a list of Decryptor users who will be able to access the encrypted file(s). After encryption is complete, files are sent to the Decryptor user using standard workflow methods (Fast File Transfer, email attachment, Dropbox, physical storage etc.).

The Decryptor recipient is the person in post-production (audio, sound, translation, vfx etc.) who will access the file. They would attempt to open the file as normal and and find it is MediaSeal protected; they simply enter a password as prompted by the MediaSeal Decryptor application and then, whilst their iLok is inserted, will continue with their normal workflow.

  • Post-production files are encrypted at-rest – and stay encrypted while being accessed.
  • Completely file agnostic, works with any file in any application in Mac, Windows and Linux.
  • Sunrise/Sunset timed access means files can set to open at a given time, be automatically locked on a given date and access can be revoked.
  • Our On-Boarding portal means new users can easily set up within minutes.
  • Full audit trails for who has accessed or saved out files – and whether unauthorized access has been attempted.
  • Integrates into the Avid Suite – with integration directly into Avid features actively being developed.
  • Integrates into Fast File Transfer solutions from Aspera and FileCatalyst

Why use MediaSeal?

A stolen clip, script, audio track or image can be the most costly and unwelcome event for a producer; especially for a TV series premier, new movie or audio recording. Content theft not only has a business impact, but is a personal violation of the creative process. In the short term, content can be unfairly judged causing lost viewings and ticket sales (According to Carnegie-Mellon research, a leak before release can cause box-office takings to be 19.1% lower than a leak after release).

Pre-release leaks will always occur. Even the best internal controls, which are often costly, can leave you vulnerable to a laptop being lost, accidentally including the wrong email recipient to Dropbox download link. This is why MediaSeal was created for, and designed by, NBC Universal one of the largest media groups. MediaSeal protects all file types compatible with Windows and Mac OS including video, audio, images and script documents.

MediaSeal encrypted files play back seamlessly on all standard programs, including professional authoring systems like Avid’s ProTools & MediaComposer, Final Cut and Adobe Premier, making it a vital insurance policy to ensure the highest levels of seamless security and delivery during production. MediaSeal improves security in your workflow without adding time. It is currently used by over 125 different facilities worldwide. MediaSeal has been in commercial use on numerous TV and movie productions – which did not leak before intended release.


MediaSeal Encryption at-rest: Protecting Content

MediaSeal Encryption at-rest: Viewing encrypted content

Frequently Asked Questions

General FAQ

Do I need to decrypt a MediaSeal encrypted asset before I can use it inside my application?

No, MediaSeal works transparently at the file system level.  As long as the application in question is on our MediaSeal approved list it should open seamlessly without first requiring to decrypt the asset first.

What's the Decryptor Software?

To open a MediaSeal encrypted file you need to install MediaSeal Decryptor software. Email: to license and download the Decryptor software.

The Decryptor software enables the intended recipient to open protected files in the relevant editing program or media player. The application sits silently in the Apple menu bar or in the Windows system tray, and together with a licensed-iLok key, you will be prompted for a password when you open a MediaSeal-encrypted file.

Where can I find an iLok?

To source an iLok key go to or from Pace, Amazon, Avid and others.

What's an iLok?

An iLok is a USB device that hosts licences for certain software products. MediaSeal uses iLok's as another means for authorizing users, since every iLok has a unique identifier.

Do I need an iLok for MediaSeal to work?

MediaSeal can be used with a 'soft' licence, although we do recommend using an iLok for the extra layer of security it provides.

Do I need to download any software to access encrypted files?

Yes, you'll need our decryptor application. Without this software, your workstation will not be able to gain access to encrypted files.

Do I need to be online to make MediaSeal work?

MediaSeal can be implemented in both online and offline working environments.

MediaSeal is more feature rich when users can use point-to-point server authentication. We can help you with setting this up if needed.

What file types can be encrypted?

MediaSeal encryption is file agnostic. This means any type of file can be encrypted. They also stay encrypted whilst being accessed.

Can I use any program to access the encrypted files?

Any program on the MediaSeal list of approved applications can access encrypted files. If you need an additional application added to our list please contact

Through our own internal testing the only program we have found that doesn't work with MediaSeal is Digital Performer 9.

What happens if I leave the encrypted files open but take my iLok key with me?

Files will remain open, however a spoiler screen will appear blocking visual access to the screen until either the iLok is placed back into the machine or encrypted assets are closed.

What if I have accidentally sent encrypted files to the wrong person?

Nothing whatsoever. The files are encrypted, so the unintended recipient would not be able to access them.

Does MediaSeal support multi-factor authentication? What factors are these?

A file can only be accessed if:

  • The person attempting access is authorized to access the file (DRM server authentication)
  • They have their unique iLok that corresponds to their MediaSeal Decryptor account (physical authentication)
  • Password to access the file


Without all these being correct, the user cannot gain access to an encrypted file.

How fast is the encryption?

The encryption overhead is very small, hence the encryption can easily match the speed of a simple copy operation.

How technical is all this to setup?

Not very. We handle as much of the implementation as we can, so you can focus on whatever project it is you are working on.

I need a password to access files. Is this different for each file or user?

The password can be changed for each file that is encrypted. You can also have MediaSeal set up so each user has a unique password that only they can use to access a file.


"I've been doing a lot of international work from my studio which brings up the encryption question... and I have to say MediaSeal was quite amazing. That was one of the most secure methods I've come across."

Dave Whitehead - White Noise - Taken from Asia Pacific Broadcasting Magazine