Secure Offline Mode: Let Students Study Without Internet (Without Leaking Videos)

In much of the Middle East, Africa, and South Asia, students face a daily reality of unstable internet — slow speeds, frequent drops, data caps, or complete blackouts during exam season. For these students, a stream-only LMS is unusable; they need to download course content and study offline. But raw MP4 downloads mean any student can grab the file, share it on Telegram, and your premium course is pirated within hours. This trade-off — stream-only or piracy-prone downloads — has been the status quo for years. Encrypted offline mode is the third way: students can download and study offline, but the content remains encrypted and unplayable outside the app.

How Encrypted Offline Mode Works

When a student taps "Download for offline" on a Ukkera course video, the app doesn't download an MP4 file. Instead, it downloads an encrypted blob — a chunk of AES-128 encrypted data that is meaningless without the decryption key. The key itself never lives on the device in plaintext; it's wrapped in a key-encryption-key that's tied to the app session and the specific device hardware. When the student plays the video offline, the app decrypts each chunk in memory, renders it to the screen via the secure decoder pipeline, and immediately overwrites the decrypted chunk — at no point does the raw video exist in storage. If a student tries to extract the file (via a file manager, by connecting the device to a computer, by extracting the app's sandbox), they find only encrypted bytes that cannot be played by any video player.

Key Tied to Device Hardware — Copied Files Cannot Be Decrypted

The decryption key is bound to the specific physical device that downloaded the content. Even if a student copies the encrypted blob to another device (using a file manager, sharing via Bluetooth, uploading to a cloud drive), the receiving device cannot decrypt it — the key simply doesn't exist there. This is fundamentally different from password-protected files (where anyone with the password can open them); this is hardware-bound encryption (where only the original device has the hardware key needed). For students who upgrade their phone, they simply re-download the content on the new device — the old downloads auto-expire and become unplayable.

Instructor Controls — Expiry, Limits, and Remote Revocation

Instructors stay in control even after content is downloaded. Per-course, you can set: (1) Download expiry — the downloaded content becomes unplayable after N days (typically 7-30 days), forcing students to re-sync for fresh content. (2) Download limits — the maximum number of videos a single student can have downloaded at any time, preventing bulk downloading for redistribution. (3) Remote revocation — if you discover a leak or simply want to update content, you can remotely revoke all downloaded copies of a course, and they become unplayable the next time the student's device connects to the internet. These controls mean you're never locked into keeping old content in the wild — you can pull it back anytime.

Same Playback Experience Online and Offline

From the student's perspective, encrypted offline mode is invisible. They tap "Download" on a course section, the video downloads in the background, and a small "Available offline" indicator appears. On a plane, in a metro, or during an internet blackout, they can play the downloaded video exactly as if they were online — same quality, same speed, same features (watermarks and quiz interactivity still work). When their device reconnects, the app syncs their progress back to the server, and any content updates or remote revocations take effect. The student experience is seamless; the security is invisible.

Built-In Storage Manager — Students See What's Downloaded

The Ukkera Student app includes a built-in storage manager so students can see exactly how much each course is consuming and delete old downloads. This matters because encrypted video blobs are roughly the same size as unprotected video (100-200 MB per hour of SD, 300-500 MB per hour of HD), so a student with 5 courses downloaded could easily consume 5-10 GB of storage. The storage manager shows a per-course breakdown, lets students delete individual lessons or entire courses, and warns when downloads are about to expire. This self-service approach eliminates "my phone is out of storage" support tickets.

Why Most LMS Platforms Don't Offer This

Building encrypted offline mode is genuinely hard. It requires a native app (not just a web wrapper), OS-level DRM integration on five platforms (iOS, Android, Windows, macOS, HarmonyOS), a key management infrastructure, an encrypted CDN, and a remote-revocation system. Most LMS platforms are web-first and don't want to maintain native apps for five platforms. So they offer either "stream-only" (no offline) or "download as MP4" (instant piracy risk) — neither of which actually works for students in low-connectivity regions. Ukkera invested in this because we serve MENA markets where offline isn't optional — it's the difference between a course that sells and one that doesn't.