Private Vimeo Videos: Which Restriction You Have, and What Actually Downloads

Here is the thing that makes this topic so frustrating to search. You type "download private Vimeo video", you get a dozen articles that all say the same three things, you install the tool they recommend, and it fails. Not because the tool is bad, but because your video is restricted in a way the article never mentioned, and no tool of that kind was ever going to work on it.

Vimeo enforces five different privacy settings through three different mechanisms. Two of those mechanisms are trivially passed by anything running in your browser. One is not passable by any browser extension, by design. Sorting out which one you are facing takes about two minutes and saves you from trying tools in sequence and concluding that they are all broken.

1. The five kinds of private, and how to tell them apart

Run these checks in order. The first one that matches is your case. Vimeo documents the settings themselves in its guide to sharing videos with different privacy settings, though it says nothing about what any of them mean for downloading.

Open the link in a private window, signed out

If the video plays, there is no access check on it at all. It is either public or unlisted. Unlisted means the video is fully reachable by anyone with the link and is merely hidden from Vimeo search and from the creator's profile. People call these "private" all the time, and technically they are not restricted in any way.

Does the page ask for a password?

Then it is password-protected. Once you type the password, Vimeo records your authorization in a session cookie, and every subsequent request is checked against it.

Does it play on the course page but break on vimeo.com?

Then it is domain-restricted, which Vimeo calls privacy by domain. The video is only allowed to play when embedded on a whitelisted site, and the check is on the Referer header of the request. This is the setting that nearly every online course platform uses, so if your video lives inside Thinkific, Kajabi, Teachable or a company intranet, this is almost certainly your case.

Does it demand you sign in with a specific account?

Then it is private in the strict Vimeo sense: visible only to named Vimeo accounts. This is the strongest of the settings.

Is it inside a Showcase?

A Showcase is a collection rather than a privacy level, and it inherits whichever setting is applied to the videos in it. Find the underlying restriction with the checks above and treat it as that.

2. The matrix: what downloads and what does not

This is the table the rest of this page exists to justify. The middle column is the part that matters, because the mechanism is what decides the outcome, not the label Vimeo puts on the setting.

• Public → no check at all → downloads normally.
• Unlisted → no check at all, only hidden from search → downloads normally.
• Domain-restricted → the Referer header is checked → downloads from the authorized page, because that is exactly where the header comes from.
• Password-protected → a session cookie is checked → does not download with a browser extension.
• Account-private → your Vimeo account identity is checked → does not download with a browser extension.

The dividing line is not how private the video feels. It is whether the check is on a header, which travels with any request from the right page, or on a cookie, which does not.

3. If you own the video, none of this applies to you

Worth stating before the technical sections, because a surprising number of people arrive here looking for a workaround to a problem they can solve with a menu. If the video is on your own account, open it in your Vimeo library and download the source file directly. You get the original upload rather than a transcoded stream, which is strictly better quality than anything else on this page can produce.

The same applies one step removed. If a colleague or a course creator owns the video, they can enable downloads for viewers with a single setting, and then a download button simply appears for you. When someone has a legitimate need for a copy, this is nearly always faster than any technical route, and it is the only one that leaves everybody comfortable.

4. The cases that work: unlisted and domain-restricted

These two account for most of what people call private Vimeo videos, and both are within reach of an in-browser extension.

Unlisted videos

There is no access control to satisfy, so an unlisted video behaves exactly like a public one. Open the page, press play so the player fetches its configuration, then open Vidora and download. The general walkthrough is in the guide to downloading Vimeo videos, and nothing about the unlisted setting changes a single step of it.

Domain-restricted videos

This is the interesting one, and the reason the matrix above is worth publishing. Vimeo enforces domain restriction by checking the Referer header of the request, which means the restriction is satisfied by being on an authorized page rather than by holding any credential. When an extension working in that tab fetches the player configuration, it sets that header to the page's own origin, which is exactly what the check is looking for, so the configuration comes back and the video resolves. No cookie is involved at any point, which is why this case behaves so differently from the two below.

Practically: stay on the course lesson page or the company page where the video is embedded. Do not open the video on vimeo.com in another tab, because from there the request no longer comes from an authorized site and Vimeo refuses it. This is precisely why videos inside course platforms behave so differently from a genuinely private video, and it is the mechanism behind the platform-specific guides for Kajabi course videos and Teachable lessons, both of which sit on Vimeo Pro underneath.

What you get in either case is an MP4 with the audio track muxed in, at up to 1080p. Vimeo delivers most videos either as progressive MP4 files or as separate DASH video and audio streams that have to be recombined, which is the step where a lot of tools produce a silent file. The technical detail of that delivery is covered in the Vimeo streaming deep dive.

5. The cases that do not: password and account-private

Here is the part most articles will not tell you, and it is the most useful thing on this page.

Password-protected and account-private videos are authorized through a session cookie. Vidora resolves Vimeo videos with a request that carries no cookies at all, and that is a deliberate design decision rather than an oversight: Chrome rejects credentialed responses from the CDN hosts involved, so sending cookies would break the ordinary case without fixing this one. With no cookie, Vimeo never returns the player configuration, and there is nothing for the extension to download. It does not half-work or produce a corrupt file. It simply finds nothing.

We would rather write that sentence than have you install the extension, watch it find nothing, and assume it is broken.

So what does work, when your need is legitimate?

• Ask the owner to enable downloads. One setting on their side, a download button on yours. Unglamorous and by far the most reliable.
• Ask for the file. If it is a colleague, a client or a course creator you have paid, this is a normal request and usually a quick one.
• Screen recording, as a last resort. It always works, because it captures what is on your screen rather than what is on the network. The costs are real: an hour of video takes an hour, you capture at your screen resolution rather than the source quality, and every notification that pops up is recorded with it.

What does not work, whatever a page claims: no browser extension, no desktop application and no website can turn an absent authorization into a present one. If the video does not play for you, nothing will download it. Any tool promising otherwise is either describing the unlisted case under a different name, or lying.

6. Why paste-a-link sites fail on all five

Search results for this topic are full of websites offering to convert a Vimeo URL into a file. On restricted videos they fail structurally, and they are worse than a waste of time.

The technical failure. A remote server has neither your session cookie nor a request originating from an authorized domain. Every restriction that stops a browser extension stops it too, and domain restriction stops it as well, which the extension passes. A paste-a-link site is therefore strictly less capable than something running in your own tab, on exactly the videos you needed help with.

The confidentiality failure. Consider what you are pasting. The URL of a private Vimeo video is the address of unreleased client work, an internal recording or paid course material. Handing it to an anonymous server means an unknown third party now holds that address, along with your IP and a timestamp. For anything work-related, that is a leak you caused with one paste. An in-browser extension never transmits the URL anywhere, and Vidora's telemetry carries a strict no-URL policy set out in the privacy policy.

7. When this is allowed and when it is not

Vimeo's terms of service prohibit accessing, reproducing or redistributing content unless the service expressly allows it or you have prior written permission. A video being reachable is never the same as being authorized, and this matters more here than on public video, because private material usually belongs to someone who deliberately restricted it.

Normally fine:

• Your own uploads, including backups of them
• Videos whose owner has given you permission, ideally in writing
• Course material you have paid for, where the platform's terms allow personal copies
• Recordings your employer has made available to you, within your company's policy

Not fine:

• Video shared with you in confidence that you then redistribute
• Paid course material reuploaded, shared or resold, which is straightforward infringement
• Anything you reached through a link that was not meant for you

None of this is legal advice, and terms differ between platforms. The rule that holds up: a personal copy of something you already have the right to watch is a different act from redistributing it, and the second one is where people get into real trouble.

8. Frequently asked questions