Recommended Free Tools
If YouTube rejects a stream key from a Hetzner server, first copy the current key from the intended stream in YouTube Live Control Room and update your encoder. Then verify the stream URL and protocol, confirm the encoder supports RTMPS if you use it, and check outbound firewall rules and return traffic. A failed connection does not by itself mean Hetzner is blocking YouTube: the cause could be a stale key, a URL or TLS mismatch, network policy, or a channel-readiness issue.
Diagnose the failure before changing firewall rules
Separate an authentication error from a connection or channel-readiness problem. A key rejected at encoder startup points first to the key and stream configuration; a timeout or certificate error points toward the URL, protocol, encoder support, or network path. If the feed reaches YouTube’s Live Control Room preview but the event cannot be started, check the channel and live-event status.
| Diagnostic branch | Clue | First check | Action |
|---|---|---|---|
| Key mismatch or stale key | Encoder reports an error at start, or stream settings were changed or reused | Compare the encoder’s key with the intended stream in Live Control Room | Copy the current key; if necessary, reset it and update the encoder |
| Wrong RTMP/RTMPS URL or TLS problem | Invalid SSL certificate or RTMPS connection timeout | Inspect URL scheme, host and port; check RTMPS support in the encoder | Use the matching URL from Live Control Room; for YouTube’s documented SSL error, try port 443 |
| Hetzner Cloud egress rule | Connection fails on the server or after firewall policy changes | Check custom outbound rules and whether they allow the required destination | Permit the required outbound connection; Cloud Firewalls allow established and related return traffic |
| Dedicated firewall return path | Outbound filtering is active, but the connection does not establish | Check response-packet rules as well as outbound rules | Allow appropriate return traffic for the actual ruleset |
| Channel or stream readiness | Feed reaches YouTube, but the live event cannot be made available | Check preview, channel verification and live-stream restrictions | Resolve the account or stream-side condition |
These are diagnostic clues, not guaranteed mappings to identical error text across encoders. The title alone does not identify the encoder, operating system, Hetzner product, firewall rules or exact YouTube message.
Refresh and protect the stream key
- Open YouTube Studio and select Go Live, then the Stream tab. Choose the stream configuration you intend to use.
- Copy that stream’s current key and replace the saved key in your encoder. Do not assume a key saved for another configuration is the right one.
- If the key may have been exposed or compromised, reset it in Live Control Room and update the encoder with the replacement.
- Start the encoder again and check Live Control Room. YouTube advises waiting for the preview before going live.
YouTube describes stream keys as “like your YouTube stream’s password and address” (YouTube Help: Manage live stream settings). Treat the key as a secret: do not include it in screenshots, logs shared publicly or support posts. If you ask for help, redact it.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
YouTube’s third-party encoder troubleshooting recommends getting a new stream key in Live Control Room and updating the encoder for startup errors (YouTube Help: Troubleshoot your YouTube live stream).
Verify the stream URL and protocol
The server URL and stream key are separate encoder inputs. A correct key paired with the wrong server URL can still fail. In YouTube Live Control Room, confirm the Stream URL for the same stream configuration as the key, and put the key in the encoder’s stream-key field. Do not substitute an old URL or guess an ingest address.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
- Compare the encoder’s server URL with the current URL displayed for the intended stream.
- If you are using RTMPS, copy the RTMPS URL from Live Control Room and ensure the encoder is configured for RTMPS. YouTube notes that the ordinary RTMP URL is shown by default in the relevant workflow.
- For YouTube’s documented “invalid SSL certificate” error, try adding port 443 to the URL or configuring port 443 in the encoder.
- If the checked URL still times out, confirm that your encoder supports RTMPS. Update it to the latest version recommended by YouTube.
YouTube describes RTMPS as “RTMP over a Transport Layer Security (TLS/SSL) connection” that provides encryption (YouTube Help: Encrypt your stream using RTMPS). Port 443 is a specific troubleshooting suggestion for the documented SSL-certificate error, not a universal port setting for every stream.
Check outbound access on the Hetzner server
An encoder running on the server initiates a connection to YouTube. The relevant server-side question is whether the required outbound connection and its return traffic are allowed. Opening an inbound RTMP port is not a fix for a server-originated connection to YouTube.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsRank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
If the server uses a Hetzner Cloud Firewall
- In the Hetzner Cloud Console, inspect the firewall applied to the server and review its outbound rules.
- If custom outbound rules exist, confirm that they allow the connection to the ingestion endpoint and port specified by the current YouTube stream URL.
- Check the server’s operating-system firewall too; a permissive Cloud Firewall does not establish that local policy permits the connection.
Hetzner says that if no outbound rules are defined for a Cloud Firewall, all traffic is allowed. When custom outbound rules are defined, new traffic that does not match them is dropped; established and related return traffic is allowed because the firewall is stateful (Hetzner Docs: FAQ: Cloud Firewalls). This applies to the Cloud Firewall, not every Hetzner firewall product or the local host firewall.
If the server uses a Hetzner dedicated-server firewall
Do not apply Cloud Firewall assumptions to the dedicated-server firewall. Hetzner documents its dedicated-server firewall as stateless. If outgoing filtering is enabled, response packets in the opposite direction may also need to be allowed. Review the rules for the actual server configuration, including applicable response traffic; Hetzner’s documentation illustrates TCP ACK and ephemeral-port rules, but an example should not be copied without checking the ruleset (Hetzner Docs: Firewall).
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Do not guess a fixed YouTube destination IP. Use the current endpoint and port in Live Control Room, and make firewall changes only after identifying the product and effective rules.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Use YouTube preview and account checks to find the boundary
- Enter the verified URL and key, then start the encoder.
- Open Live Control Room and check whether the feed appears in preview. YouTube instructs creators to wait for the preview before going live (YouTube Help: Create a YouTube live stream with an encoder).
- If no preview appears, investigate the key, URL/protocol, encoder support, DNS and reachability, and outbound firewall policy.
- If the feed reaches YouTube but the event cannot be started or made available, check the channel’s live-stream eligibility. YouTube says a channel must be verified and must have had no live-streaming restrictions in the previous 90 days (YouTube Help: Get started with live streaming).
Also check the encoder’s own diagnostics and update it to the latest version. YouTube’s troubleshooting guidance recommends checking encoder status and the outbound internet connection when stream health is poor (YouTube Help: Troubleshoot your YouTube live stream).
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Common symptoms and fixes
- “Invalid” or rejected key at startup: copy the current key for the intended stream, replace the encoder’s saved value, and reset the key if it may have been exposed.
- “Invalid SSL certificate”: verify the RTMPS URL, then try port 443 as YouTube specifies for this error.
- RTMPS timeout: verify the current RTMPS URL, confirm encoder support, and inspect outbound and return traffic rules.
- No preview despite a running encoder: check the key and URL independently, then verify the server and host firewall permit the connection.
- Preview works but the event will not go live: check channel verification and any live-stream restriction in the previous 90 days.
These steps distinguish likely causes; the exact error, encoder and version, operating system, Hetzner tier and effective rules are needed to identify a specific failure. Never send anyone the unredacted stream key.
Or let it run in the cloud
If your aim is to keep prerecorded video live on YouTube without maintaining an encoder on the Hetzner server, StreamNeo is a separate cloud option: upload a recording or build a playlist, add your YouTube stream key, and go live. It loops the uploaded video from the cloud, so nothing has to stay on at home. Each slot streams the upload as made, up to 4K 60fps, at one price per slot, with automatic recovery if YouTube drops the stream. The first day is free with no card; monthly billing is $9.99 per month. StreamNeo plays uploaded videos and streams to YouTube; it does not go live from a camera.
Quick Recap
Start your free StreamNeo day.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
