You downloaded the episode. You're in airplane mode. You tap play, and a grey error screen stares back at you like a bouncer who doesn't care that your name is literally on the list.
The file is on your phone. Your subscription is active. Nothing is wrong, technically, except everything.
That's DRM doing exactly what it was designed to do.
The lock that requires a key from someone else's house
Digital Rights Management doesn't just scramble a video file and hand you a password. The architecture is more deliberate than that. Content gets encrypted using a standard like Widevine (Google's system, running across Android, Chrome, and most streaming apps) or FairPlay (Apple's equivalent, baked into iOS and macOS). The encrypted file sitting on your device is useless without a decryption key, and that key doesn't live on your device permanently. It lives on a license server operated by the content provider.
Every time playback starts, your app sends a license request to that server. The server checks: is this account still active? Is this device still authorized? Has the offline license for this specific download expired? If yes to all three, the server issues a short-lived decryption key. Your device uses it to decrypt and play the content in real time, and the key itself often expires within hours, sometimes within a single session.
This is why airplane mode kills downloads that should, by any common-sense reading, work offline. The file is local. The key is not.
What a Widevine license actually looks like in practice
Here's a concrete scenario. You download an episode on a streaming service that advertises 30-day offline access. The app stores the encrypted video file locally and caches a license alongside it. That license isn't a permanent unlock. It's a cryptographically signed token with an expiry timestamp baked in, typically 48 to 72 hours from when you last connected, though the outer 30-day limit is enforced server-side.
Day two of your camping trip: no signal, cached license still valid, episode plays fine. Day four: the cached license has expired. The app reaches for the license server, finds nothing, and blocks playback. The file hasn't changed. Your subscription hasn't lapsed. The only thing wrong is a timestamp.
Marco downloads the same show the night before a flight and watches it without a hitch. Priya downloads it four days before the same flight, forgets to open the app in the meantime, and hits the grey screen at 35,000 feet. Same app, same content, completely different outcome, driven entirely by license cache timing.
What people assume (and why it trips them up)
The common assumption is that "downloading for offline" means the content is yours to play freely until you delete it.
It doesn't.
It means you have an encrypted local copy and a time-limited permission token. The moment that token can't be validated, the content is effectively inaccessible, even though the gigabytes are physically on your storage. Calling it a "download" is, honestly, a bit of a lie. It's more like a very long rain check.
People also assume this is purely about piracy prevention. Piracy is part of it, but the architecture does a lot more work than that. It lets rights holders enforce geographic restrictions, subscription tiers, and content licensing windows without ever pushing an update to your device. A film licensed for streaming in one region only, until a theatrical window closes elsewhere, gets enforced dynamically at the license server. Your downloaded file can be switched off remotely by simply refusing to reissue licenses after a certain date. The file on your device becomes an inert brick. No notification, no explanation.
That dynamic kill switch is the part the industry doesn't advertise, and it should bother you more than the airplane mode problem.
There's also a hardware layer most people never see. Widevine runs in three security levels (L1, L2, L3), and L1 requires decryption to happen inside a hardware-protected enclave on the device's chip. High-definition downloads on services like Netflix only unlock on L1-certified devices. On a device that only supports L3 (software-only decryption), the same app will cap you at a lower resolution, because the content agreement demands a specific level of hardware security before handing over the HD key.
Ever wondered why your new laptop streams 1080p fine but your older tablet tops out at 480p on the same app? That's L1 versus L3. Your connection has nothing to do with it.
Ask yourself what you actually paid for when you hit download. If a rights holder can silently revoke access to a file already on your device, at any point, for any business reason, the answer is murkier than the word "offline" implies. Streaming's version of offline means a deferred online check, not a true local copy. The gap between those two things is where the grey screen lives.