Xtream Player 4K: IPTV Media

The QR Code That Skips the Password

Typing a long server URL and a password into an Android TV remote is a special kind of frustration. The Xtream Player 4K app — listed on Google Play as Vurio IPTV — sidesteps that entirely. Open the app on your TV, and a QR code appears on the screen. Scan it with your phone, and you are logged in within seconds. No remote typing, no repeated password errors. That single interaction changes how the app feels from the first use. The same Google account that holds your login also powers the cloud sync, so the app remembers which channels you added and where you stopped watching.

This player is built around the Xtream Codes API, which is the standard way many IPTV services hand over their channel lists. It also accepts M3U and M3U8 playlists from a local file or a URL. The app itself does not contain any channels, movies, or series. It is an empty shell until you feed it your own playlist or your Xtream Codes credentials. That disclaimer appears in the store listing and inside the app. The developer, Mert Uyaroğlu, is based in İzmir, Turkey, and the app has been live on Google Play since roughly March 2026.

Once you load a playlist, the interface organises everything into categories. Live TV, movies, and series each get their own section. The player supports 4K Ultra HD and Full HD streams, provided your source delivers that quality. Hardware acceleration handles the decoding, so the phone or TV box does not choke on high-bitrate video. Channel switching feels quick — the app uses smart buffering to keep the stream ready before you even click. But the real test comes when you try to use this across more than one device.

Cloud Sync and the Three-Device Wall

Cloud sync is the headline feature, but it comes with a hard limit. The app allows one Google account to sync data across up to three devices. Favorites, watch history, saved accounts, and playback position all stay in sync. Start a movie on your phone during your commute, and when you get home, open the app on your Android TV. The movie resumes from the exact second you paused it. That works smoothly when everything is set up correctly. The catch is that you must be signed into the same Google account on all three devices, and the app must be installed on each one. Reaching that fourth device means you are out of luck — the sync stops working, and you have to choose which three devices stay connected.

The QR login method is clearly designed for the TV experience. On a phone or tablet, you can type your Xtream Codes credentials directly. But on a TV, the QR code is the faster path. The app generates a fresh QR code each time you open the login screen on the TV. Your phone scans it, and the TV receives the authentication token. No Bluetooth pairing, no NFC, no extra apps. It just works. That workflow is one of the few areas where this app genuinely differentiates itself from competitors like TiviMate or IPTV Smarters, which often require typing on the TV remote or using a separate companion app.

The sync covers more than just playback position. It also saves your entire playlist structure. If you add a new M3U URL on your phone, that playlist appears on your TV the next time you open the app. The same applies to removing channels or reorganising favorites. The app uses Google's own backup infrastructure, so the data lives in your Google account, not on the developer's servers. That also means the app cannot sync across different Google accounts — you cannot share your playlist with a family member unless they use the same account.

What Happens When the Playlist Loads

Loading a large M3U playlist with thousands of channels reveals the app's real performance. The initial parse takes a few seconds, and the EPG (electronic program guide) data loads separately. Once the playlist is in, the category filtering helps you narrow down to the channels you actually watch. The search function scans channel names and groups, so typing "sport" brings up all sports-related channels. The favorites system lets you bookmark channels, and the watch history tracks everything you have played. You can disable watch history entirely if privacy is a concern.

Parental controls are built in with a PIN lock. You can set a four-digit PIN that blocks the entire app. Anyone trying to open the app without the PIN sees nothing but a lock screen. There is also an option to hide adult content categories, which keeps those channels out of the main view. The app does not filter content itself — it relies on the playlist provider's category tags. If your provider tags adult channels correctly, the hide function works. If they do not, those channels remain visible. The PIN lock is the more reliable safeguard because it blocks access to the entire app, regardless of how the playlist is tagged.

The player supports multiple audio tracks and external subtitle files. When a stream includes multiple language tracks, you can switch between them during playback. Subtitles can be loaded from an external SRT file or selected from the stream's embedded tracks. The aspect ratio can be adjusted between 16:9, 4:3, and full screen. The screen stays awake during playback, which prevents the device from dimming or locking while you are watching. These are standard features for any IPTV player, but they are all present and functional here.

One Feature That Breaks the Flow

Here is the original observation that the Play Store description does not mention. The QR login and the cloud sync are tightly coupled, but they work in opposite directions. When you scan the QR code on your TV, the app logs you in on the TV using the credentials that are already stored in your Google account. That means the TV does not ask for your Xtream Codes username and password — it pulls them from the cloud sync. If you have never used the app on any device before, the TV shows the QR code, but your phone also needs to have the app installed and signed in. If your phone does not have the app, the QR code is useless. You cannot scan the QR code with a generic QR scanner app — it only works with the Xtream Player 4K app on the phone. So the setup flow requires you to already have the app on your phone, logged in with your Xtream Codes credentials, before the TV login can work. That creates a circular dependency that is not obvious from the feature list. The app expects you to set up the phone first, then use the phone to set up the TV. If you try to set up the TV first, you hit a wall.

This dependency matters because the app is marketed as an Android TV player. The QR login is positioned as the easy way to get started on the TV. But in practice, the TV cannot be the first device. You need a phone or tablet with the app already configured. Once that phone is set up, the TV login becomes seamless. But that initial step is not explained anywhere in the app or the store listing. Users who download the app directly on their Android TV without a phone will find the QR code, scan it with a generic scanner, and get nowhere. The app does not fall back to a manual credential entry on the TV. So the QR login is only useful if you have a second device already running the app.

The app's encryption claims are worth examining. The store listing says account credentials are stored securely on the device and cloud data is AES-256 encrypted. The app does not collect any data, according to the Play Store data safety section. Data is encrypted in transit. The developer does not share data with third parties. These are strong privacy claims for an IPTV player, which typically handles sensitive playlist URLs and login credentials. The app does not require any special permissions beyond what is normal for a media player. It does not ask for location, contacts, or storage beyond what is needed to play local files.

The Bug That Keeps Coming Back

User reports from forums and review aggregators point to a recurring instability. The app crashes randomly during playback, especially on Fire Stick devices. The guide interface becomes buggy after scrolling through many channels. Some users report that the app fails to load streams entirely, requiring a restart. VPN compatibility is another pain point — the app often stops working when a VPN is active, forcing users to disable the VPN to watch anything. These complaints appear across multiple sources, not just a single isolated review. The app's changelog on APKPure mentions only "minor bug fixes and general improvements," which does not inspire confidence that the stability issues are being addressed directly. The developer has not published a detailed changelog on the Play Store, so users have no way of knowing what specific bugs were fixed in each update.

The app is free, with no in-app purchases and no ads. That is unusual for an IPTV player, many of which rely on ads or premium subscriptions. The lack of ads means the developer has no direct revenue stream from the app, which raises questions about long-term maintenance. The developer, BasTechnology (which appears to be a publisher name used by Mert Uyaroğlu), has only this one app on Google Play and has been active for about two months. That is a short track record. The app has no ratings on the Play Store in the English version, which suggests it has not yet gained significant traction among English-speaking users. The Chinese store listing shows a slightly different name and has more downloads, indicating the app may have been promoted in Asian markets first.

The APK size is around 30 MB, which is moderate for a media player. The app requires Android 7.0 or higher. It supports both touch and remote control navigation, so it adapts to phones, tablets, and TV boxes. The dark mode interface is clean, with no banner ads or pop-ups. The player uses hardware acceleration for decoding, which reduces battery drain compared to software decoding, though the exact battery impact is not documented.