Skip to content
Schedule Social Media

Press Esc to close.

YouTube drops the private-only rule for unverified API apps: what changes for scheduled uploads

Since 2020, uploads from unaudited YouTube API projects were locked to private. From November 2, 2026 they can be public, and they default to public.

YouTube no longer forces videos uploaded from unverified API projects to stay private: from November 2, 2026, they can go public straight away, and they default to public. The change matters for small or self-built scheduling tools, the agencies and creators who use them, and every developer who tests uploads from a development project.

What this means for you

Since 2020, a brand-new YouTube app had to pass a check by YouTube before anyone could see the videos it uploaded. Until then, each video was stuck on private, and someone had to go into YouTube Studio and make it public by hand. That rule is gone. A smaller scheduler, or a script someone on your team wrote, can now publish public videos without the wait.

There is one thing to watch. If the app doesn't say which privacy to use, YouTube now picks public. So a test video, or a video meant to go out later, could go live by mistake.

The details

YouTube's Data API revision history for November 2, 2026 says videos uploaded through videos.insert from unverified API projects "are no longer restricted to private viewing mode." It names the policy it reverses: the one announced on July 28, 2020.

That 2020 rule applied to unverified projects created after July 28, 2020. Their uploads stayed private until the project completed an audit to verify compliance with the YouTube API Services Terms of Service. Older projects were not affected. For years, that audit was the reason new YouTube schedulers could only post private videos at first.

The new default comes with the change. If a videos.insert request leaves out status.privacyStatus, the video "defaults to public". YouTube adds that certain uploads might still default to private based on the creator's account settings. Its Help Center gives one example: the default privacy for creators aged 13 to 17 is private, while 18 and over is public.

Scheduled publishing still works the same way. To publish later, a tool uploads the video as private and sets a publish time (publishAt), as our YouTube scheduling guide explains. A tool that forgets the private status now risks publishing the video at once.

A second change landed on November 3. thumbnails.set now accepts custom thumbnails for YouTube Shorts once processing is complete, and the thumbnails resource gains a shortsAspectRatio property. Tools that publish Shorts can now set the cover image too.

Both changes have changelog entries: the end of the private-only rule and custom thumbnails for Shorts. Everything else about posting to YouTube is on the YouTube hub.

What to do next

  • Business owners: Nothing, unless you post to YouTube with a small or home-made tool. If you do, its videos may now go public without the old manual step, so check one upload.
  • Marketers and agencies: For the next scheduled YouTube upload, check in YouTube Studio that its visibility and publish time are what you set.
  • Developers: Always set status.privacyStatus in videos.insert, keep test projects on private or unlisted, and remove any workaround that told users to flip videos to public by hand.

Questions people ask

Why were my YouTube API uploads always private?

Since July 28, 2020, YouTube restricted videos uploaded from unverified API projects created after that date to private viewing until the project passed a compliance audit. On November 2, 2026 YouTube reversed that policy, so those uploads can now be public.

What privacy does a video get if my app doesn't set one?

Public. YouTube's November 2, 2026 entry says a videos.insert upload without status.privacyStatus defaults to public. Some uploads still default to private because of account settings: YouTube Help says creators aged 13 to 17 default to private.

Do I still need a YouTube API audit?

Not to make uploads public. The November 2 entry removes the private-only restriction that the audit used to lift, and it says nothing about quotas or the Terms of Service.

Sources

Related

Get an email when a platform changes its API

One email per new entry: what changed, who is affected, and the deadline.

Follow with RSS, or per platform, for example X or Meta.