YouTube says "Sign in to confirm you're not a bot": what it means and what works

You paste a YouTube link into a downloader, and instead of a video you get one line: "Sign in to confirm you're not a bot." The same video plays perfectly in your browser. This guide explains what the message really means, why it hits download websites far more than it hits you, what we measured when it happened to our own server, and which fixes are safe.

What the message actually means

YouTube decides, for every request for a video, how much it trusts the place the request came from. When the trust is too low, it does not send the video data. It sends this message instead and asks for a signed-in session.

The important part is the word place. The check is about the network address the request comes from, not about you and not about your Google account. It appears even when nobody is signed in at all.

Several things feed into that decision. The yt-dlp project, the open-source download engine behind most serious downloaders, documents the visible parts:

• How many requests an address makes. Its FAQ explains that HTTP errors 429 and 402 mean "the service is blocking your IP address because of overuse", and that this is usually a soft block.
• Whether a request carries the extra token YouTube now expects. Its PO Token Guide describes a "Proof of Origin Token" as "a parameter that YouTube requires to be sent with requests from some clients".
• Whether there is a session at all. Its Extractors guide gives rough limits of about 300 videos an hour for a guest session and about 2,000 for a signed-in account before YouTube starts refusing.

None of these is the full story, because YouTube does not publish its rules. What it does not hide is the effect: some addresses are refused almost every time.

Why download websites see it more than you do

An online downloader is a website. When you paste a link, it is the website's server that asks YouTube for the video, not your phone. Those servers sit in data centres: rented machines whose addresses are publicly known to belong to hosting companies.

YouTube treats those addresses very differently from home and mobile connections:

• A home connection is used by a few people watching a normal number of videos.
• A data-centre address is shared by automated tools of every kind, and download sites send far more requests from one address than any person could.

So a downloader that worked yesterday can start showing this message today without changing anything, and it can work for one visitor and fail for the next, depending on which of its servers answered.

What we measured on our own server

On 4 October 2026 we moved Raptor Downloader to a new server in a Helsinki data centre and tested YouTube from it, using a short public video, "Me at the zoo". The same request had worked from a home connection the same day.

Two things stand out. First, switching the server to its IPv6 address, a trick that sometimes helps, made no difference. Second, Reddit refused the same server with its own version of the message. Sites protect themselves against data-centre traffic in the same way, and YouTube is simply the strictest.

What works, and what to avoid

What you can do depends on whether you are using a downloader or running one.

The table points to the honest summary: the fix is moving the request back to a normal connection, either by using YouTube's own offline feature or a tool that runs on your own device.

Never give a downloader website your Google login

Many "fix" guides tell developers to pass their browser cookies to the download tool. That can be acceptable on your own computer, for your own account, if you understand the risk. It is never acceptable to type your Google password into a download website, or to upload your cookies to one.

• A YouTube sign-in cookie is a Google sign-in cookie. Whoever holds it can act as you across Google: Gmail, Drive and Photos, not just YouTube.
• The yt-dlp project warns plainly: "By using your account with yt-dlp, you run the risk of it being banned (temporarily or permanently)."
• A website that asks for your login to "unlock" downloads is either taking that risk with your account or doing something worse with it.

Raptor Downloader never asks for a YouTube or Google login, and never will.

Is downloading from YouTube allowed?

YouTube's Terms of Service say you may not download content except where the service expressly authorises it, or with permission from YouTube and the rights holder. They also forbid accessing the service by automated means such as robots and scrapers. The authorised route is YouTube Premium's offline downloads, inside YouTube's apps.

Copyright law is a separate question that depends on your country and on what you do with the file. Saving your own uploads, videos with an open licence, or videos you have permission to use is the safe ground. This guide is general information, not legal advice.

How Raptor Downloader handles it

When we found our own server was being refused, we had two choices: let every YouTube download fail with a vague error, or say what is happening. We chose the second. If you paste a YouTube or Reddit link on the website today, it tells you straight away that the site is refusing our server, rather than making you wait for a failure.

Everything else keeps working. TikTok, X, Twitch, Bilibili, VK, Telegram, Flickr and more than twenty other sites download as normal, with the same check-before-download that warns you about a problem before you press the button. A desktop version that runs on your own connection, which this kind of block does not affect, is planned.