Treat the administration URL as a password
Anyone who knows the administration access can change the team without discovering a username or passing another form. Keep it out of captured address bars, visible bookmarks, on-stream history and screenshots sent to chat.
The viewing URL has a different job: it displays state and belongs in OBS. Separating the two prevents edit capability from reaching people who only need the result.
Keep administration outside the captured environment
Open administration in a profile or window that is never captured. Prefer game or window capture over full desktop capture. Rehearse the exact edit flow from a safe scene and check what appears when switching windows.
Keep two tested ways to recover the run
Keep the private URL in a password manager or a bookmark outside public screens. In My games → Share → Save game, download the .nzpk file. It preserves access to the same game on the server: it is not an independent team snapshot and cannot undo changes.
Recover access with Load game by pasting the admin URL or identifier, or opening the file. Testing access in another tab can disconnect the previous one. Continue in a single tab to check recovery.
Add to NuzPoke Link also gives the desktop app admin access. Use it from a private window outside capture and treat that access as carefully as the URL.
Act if the link appears on screen
- Switch immediately to a safe scene.
- Stop distributing the recording and remove the segment before publishing the VOD.
- Review the team and record unexpected changes.
- If you need to stop using the exposed access, create another game and configure its team and OBS source again.
Delete in My games blocks administration and hides the overlay. For 30 days it can be restored using the admin link, including by someone else who saved it; then it is permanently deleted with its team. To stop using an exposed link, create a new run and replace the OBS source URL. Remove only clears the local reference to a run that no longer exists. The other-tab warning does not replace keeping the link private.
Use a sixty-second pre-stream routine
Verify that OBS uses viewing access, administration is outside capture, recovery is available and the emergency scene works. Repeating these four checks costs less than rebuilding a compromised run.