What does YouTube Error 153 mean?

YouTube Error 153 indicates that an embedded-player request is missing the HTTP Referer header or equivalent client identification that YouTube expects. Website security headers, Referrer Policy settings and the configuration of the embed can all affect whether that information is available.

Why did the YouTube video fail on iPhones but work elsewhere?

In this case, the website had a restrictive page-level Referrer Policy while the individual YouTube iframe specified a different policy. The resulting behaviour wasn't consistent across the browsers and devices we tested, with the failure becoming apparent on iOS. Correcting the underlying page-level policy resolved the problem.

What does strict-origin-when-cross-origin mean?

strict-origin-when-cross-origin is a Referrer Policy designed to balance functionality and privacy. When one secure website requests content from another origin, the browser can send the originating site's domain without sending the complete URL of the page the visitor is viewing. This gives services such as YouTube useful information about where a request originated while limiting unnecessary disclosure.

Why not use a standard YouTube embed if that fixes the problem?

A standard embed may bypass privacy or consent controls built into a website's normal video implementation. In this case, doing so made the video work but undermined the site's consent configuration. The correct solution was to fix the Referrer Policy while retaining the existing privacy controls.

August 2026

Why did a YouTube video work everywhere except on iPhones?

A client recently contacted us about a YouTube video embedded on their WordPress website. It worked correctly on desktop computers and some mobile devices, but on an iPhone it returned “Error 153: Video Player Configuration Error”. There was another apparently …

by Jim Semlyen 25 Aug 2026

The importance of infrastructure in the age of AI bots

At a glance AI bots generate significant website traffic, placing additional demands on hosting infrastructure. Dynamic WordPress requests are expensive. Repeated uncached requests can consume PHP, database and server resources quickly. Caching and CDN infrastructure matter, reducing the work required …

by Jim Semlyen

Is your website infrastructure ready for AI crawlers?

Preparing a website for AI search isn’t only about content. AI crawlers place new demands on website infrastructure, from ensuring important content is accessible without relying on JavaScript to managing potentially enormous volumes of automated traffic. We look at what this means for WordPress performance, caching, CDNs and bot management.

by Jim Semlyen 16 Aug 2026

Website security doesn’t end at launch: why WordPress needs ongoing management

A WordPress website can be secure today and vulnerable tomorrow. Plugins change, vulnerabilities emerge, staff come and go, integrations are added and AI agents are beginning to interact directly with websites. We look at why website security requires ongoing management and why, for organisations that take security seriously, managed WordPress is a governance decision rather than simply a hosting choice.

by Castlegate IT 14 Aug 2026

Castlegate’s AI hub: preparing your organisation for AI

Helping organisations understand AI, prepare for change and make informed decisions. Artificial intelligence is changing how organisations operate, communicate, and make decisions. For many, the challenge is not whether to engage with AI, but how to do so confidently, responsibly, …

by Jim Semlyen 12 Aug 2026

rankings to recommendations featured image

From rankings to recommendations: Why SEO needs to evolve for the age of AI search

At a glance AI is changing search from rankings to recommendations. People increasingly ask AI systems for answers rather than choosing from a list of links. Traditional SEO still matters, but ranking highly may no longer be enough on its …

by Jim Semlyen 11 Aug 2026

An image to illustrate Castlegate's technical expertise

Castlegate’s technical insights hub

Practical case studies from our work managing complex websites. Every website presents its own technical challenges, and solving them well requires more than theory. This section shares the real problems we encounter, the investigations we carry out, and the solutions …

by Jim Semlyen 10 Aug 2026

A lock to illustrate the concept of cybersecurity

10 practical cybersecurity improvements small organisations can make this week

At a glance Use MFA wherever possible, especially for email, administrator accounts and sensitive systems. Avoid shared accounts and give people only the access they need. Protect your email domain with correctly configured SPF, DKIM and DMARC. Encrypt devices and …

by Jim Semlyen 1 Aug 2026

August 2026

Archive: August 2026

Why did a YouTube video work everywhere except on iPhones?

The importance of infrastructure in the age of AI bots

Is your website infrastructure ready for AI crawlers?

Website security doesn’t end at launch: why WordPress needs ongoing management

Castlegate’s AI hub: preparing your organisation for AI

From rankings to recommendations: Why SEO needs to evolve for the age of AI search

Castlegate’s technical insights hub

10 practical cybersecurity improvements small organisations can make this week

Categories

Archives

Featured project

Featured project

Get in touch

Office address

Registered address

Sales

Support

Reviews