What is an activation code?

Why apps use codes instead of a password box

Typing a long password with a TV remote is slow and error-prone, and it means your password is keyed in on a shared living-room screen. The code approach solves both problems. The TV shows a harmless, short-lived code; you type that code on a device where you are already securely signed in; the service matches the two and tells the TV to proceed. Your password never touches the TV, and you get to use your phone's keyboard, password manager and two-step verification instead of the remote.

The anatomy of a code

• Short: easy to read across a room and type quickly. Some services use only letters, some only digits, and many add a dash in the middle purely to make it easier to read.
• Temporary: it expires after a short time, so it is useless to anyone who sees it later. Each service sets its own lifetime.
• Single-use: once it links one device, it cannot link another. A second TV gets its own code.
• Paired with a web address: the code means nothing on its own; it only works on that service's official activation page.
• Built for phones: the published standard behind many of these screens suggests codes that are quick to type on a phone keyboard, for example letters without vowels so a random code never spells a word, and suggests the service ignore upper or lower case and the dash. Not every service follows those suggestions, which is why it is still best to type the code exactly as shown.

What happens behind the scenes

The moment the TV displays the code, it starts asking the service, every few seconds, "has anyone approved my code yet?". When you submit the code on your signed-in phone, the service answers "yes, and here is the account", and the TV finishes sign-in. That is why the TV must stay on the code screen, and why both halves have to happen before the code runs out. If you are curious about the polling, the expiry and the "approve" step in more detail, read device code sign-in, explained.

Where the idea comes from

Signing in on one device by approving it on another is an established pattern. The Internet Engineering Task Force published it in 2019 as the OAuth 2.0 Device Authorization Grant, RFC 8628, for devices that lack a convenient keyboard, such as smart TVs, media consoles and printers. Large account providers document their own versions for app developers; Google's guide to OAuth for TV and limited-input device applications is one public example. Streaming services may build their own systems on the same idea, so the screens look alike even when the technology behind them differs.

Activation codes vs other codes you might see

Plenty of short codes appear during setup, and mixing them up is a common reason an activation "fails". Here is how the activation code differs:

• Pairing code: connects two of your own devices, such as a phone and a TV, usually on the same Wi-Fi. It does not sign you in to an account. See pairing code vs activation code.
• Activation link: some services email you a link to click instead of showing a code. The goal is the same, the route is different. See activation link vs activation code.
• QR code: a picture version of the activation page with the code already filled in. See QR code activation.
• Verification code (by text or email): a one-time number that proves you are you when you sign in. Never read it out or forward it to anyone; it is not something a TV asks you to type on another site.
• Product key or licence key: a long code that proves you bought software. It is permanent and tied to a purchase, not a temporary sign-in.
• Gift card or redeem code: adds credit or a subscription to an account. It is entered on a redeem page, not an activation page.

What a code can and cannot do

An activation code can do exactly one thing: sign one device in to the account that approves it. It cannot reveal your password, change your plan or charge your card. The one real risk is the reverse situation, where someone else's device shows the code and you are persuaded to approve it, which would sign their device in to your account. That is why you should only ever enter a code that your own screen is showing. Our guide to whether it is safe to enter an activation code covers the warning signs.

After the code: staying in control

Once activated, a device usually stays signed in until you sign out, change your password or the service ends the session. A few related guides help from here:

• Signed in on a TV that is not yours, such as a rental or a hotel room? See streaming on a hotel TV safely and how to sign out of all devices.
• Seeing a "too many devices" message after activating? See too many devices streaming errors.
• Asked for a new code again and again? See why your TV keeps signing you out.

Ready to do it? Follow activating a streaming app by code, or activate without a code if your screen does not show one.