← Blog

I made a track with Udio. What should I do before I post it?

2026-10-12 · OpenStela

Before a track goes anywhere, register the exact file you're about to post, so its fingerprint and the date are on record before anyone else has a copy. Then read Udio's current terms for your plan yourself, not a summary of them. And if you remix or re-master the track later, register that version as a new work and link it back to the first, instead of replacing the original.

There's one catch specific to Udio right now. Udio's own help center says that downloading of audio, video and stems has been disabled, as one of the changes that followed its partnership with Universal Music Group on 29 October 2025 (Udio Help Center, article last updated 17 February 2026, checked 12 October 2026). So the first question isn't "how do I fingerprint my track", it's "what do I actually have in my hands". This post goes through both.

First, check what you actually have

A fingerprint is computed over bytes. What you can register depends on which bytes you hold.

The first two rows are the strong ones. Months later, anyone holding the same file can recompute its SHA-256 and match it to your record and to the chain. The third row is weaker, and we'll get to why.

If downloads are off on your account, don't try to get around it. Whether you may record, capture or re-export a stream is a question for Udio's terms, and we won't tell you it's fine. Register what you lawfully hold.

Fingerprint the exact file before it goes anywhere

The fingerprint is the SHA-256 of the file: every byte of your mp3 or wav. Change one byte and it's a different fingerprint. That has a practical consequence. If you export the track again, convert it to another format, trim the silence, or normalise the loudness, you have a new file with a new fingerprint. And the copy a listener streams after an upload pipeline has processed it will usually not be byte-identical to yours.

So register the file you're about to release, and keep that exact file. The chain can vouch for a fingerprint. It can't vouch for audio you no longer have.

1. Pick the final file. This is the version you're going to post or send to a distributor, not a draft. Earlier takes can be registered too, later, and linked as versions.
2. Open the works page, choose Register a work, then Upload a file. Audio can be mp3, m4a or wav, up to 30 MB per file.
3. Attribution: the name the track will be published under. A pen name is fine. Created on: the date you made it, or leave it blank if you're not sure. Don't guess a flattering date. It's your statement, and it's frozen into the record.
4. Tick This work was made with AI tools and put "Udio" in Which tools, plus anything else you used: a DAW, a vocal tool, a mastering plug-in.
5. Write Your contribution. It's required for AI-assisted work. Be specific about what you did: "Wrote all lyrics; ran about 30 generations and kept sections from four; re-sang the chorus; arranged and mixed in Reaper." A vague line here is worth little later.
6. Rights. For audio the form asks you to confirm two things separately: the composition and the recording. A song is two sets of rights, not one, and the form won't take a single tick for both. Only tick what's true for you under your plan.
7. Choose whether it shows on your public page. If the track isn't out yet, leave it private. The record is anchored that night either way, and you can make it public on release day.

Registration is free. Each account has 300 MB of upload space, and there's a daily cap on how many works one account can register (see pricing). After registering you get a public page for the work, a downloadable record, and a Proof Pack: a zip with a PDF summary, the record with its Merkle proofs, and a README. That pack can be checked without us. How a registered song is verified walks through the check step by step.

If all you have is the Udio link

You can paste a Udio song link into Paste a link on the same page. Udio isn't one of the music sites we read specifically (those are StreetVoice, Suno and SoundCloud). A Udio address is handled like any other web page: we fetch the page as it's served at that moment, save that snapshot, and fingerprint the snapshot. If the page can't be fetched, you get an error and nothing is registered.

Be clear about what that record says. It shows that this address returned this page content on this date, and that you named it as your work. It doesn't contain the audio, so it can't be matched against a file later. We haven't tested what a Udio song page returns to a plain request, so we can't tell you how much of the title or artist name ends up in the snapshot. Check the record after registering.

If you did make parts of the track yourself (the lyrics, a sung line, a cover image), register those files too. Your own material is the part of an AI-assisted song where your contribution is clearest, and those files do have fingerprints you control.

Read Udio's terms for your plan yourself

What you may do with a Udio output (post it, sell it, send it to a distributor, use it commercially) is set by Udio, not by us, and it can depend on your plan and on when the track was made. Udio's Terms of Service showed "Last Revised on November 12, 2025" when we checked on 12 October 2026. Read the current version for your account, along with the help center article on what changed after the partnership.

We aren't going to paraphrase those terms here. They've changed before, and a summary goes stale faster than the page does. Registering a track with us doesn't change what Udio's terms allow. If the terms don't let you release a track, a dated record doesn't make releasing it all right.

Whether an AI-assisted song is protected by copyright at all is a separate question, decided by the law where you are and by how much of the work is yours. Can AI-generated art or music be copyrighted? covers it with official sources. This is general information, not legal advice.

Remixes and new masters: a new record, linked back

Musicians rarely release one version. There's the radio edit, the extended mix, the re-master with a new vocal, the acoustic take. Each of those is a different file with a different fingerprint, and each deserves its own record. Don't delete the first registration to make room for the second. The first record is the earliest date you have.

1. Register the new version as a new work, with its own date and its own contribution text ("New vocal recorded by me; re-arranged the bridge; re-mastered").
2. Link it to the original as a version. If both works are bound to the same character, open the new one on the character's page and pick the original under Version of:. If the track isn't bound to a character, the link can be set through the API: PATCH /api/aworks/{id} with derived_from set to the original's id (see developers). The MCP connector doesn't have a tool for this yet.
3. That link is written as its own dated record and anchored in the nightly batch, the same as the works themselves. It carries the original's record fingerprint, so the chain from version two back to version one can be checked.

Two limits. The version link is your declaration of the order the versions came in. We don't compare the audio and we don't judge whether the remix sounds like the original. And you can only link to a work in your own account that hasn't been deleted, and not in a loop.

If the track belongs to a virtual singer, binding it to the character adds one more dated record. How to prove a song belongs to a character that has no face covers that. If you've already done this for a Suno track, the Suno version of this guide is the same steps with a different tool name.

What the record shows, and what it doesn't

A record shows that a specific file existed on a specific date, under the name you gave, with the tools and contribution you wrote down. If the same track turns up under someone else's name later, you have a dated, verifiable record to point to: evidence if a dispute comes up.

It doesn't decide who owns the track. It doesn't settle whether the song is protected by copyright, and it doesn't change what Udio's terms let you do. It also doesn't stop Udio, or any other model, from producing something similar for someone else. Your contribution text is your own statement, and we don't check it.