An entertainment system includes a memory connected to a processor and storing program code that executed by the processor to perform operations to securely pair and communicate with a user device based on multiple security controls. The operations include receiving a request to pair the user device to a network interface of the entertainment system. Responsive to the request to pair, generating an encrypted code. The encrypted code includes network credentials for connecting to the network interface and a time-limited authentication application for connecting to the server. The encrypted code is communicated to the user device to decrypt. The user device is connected through the network interface based on the user device presenting the network credentials from the decrypted code. The entertainment system includes server having a first certificate that is digitally signed. The entertainment system receives a request from the user device having a second certificate that is digitally signed to connect to the server. Responsive to the request to connect, generating a connection authorization decision for the user device based on two-factor authentication. The two-factor authentication includes validating the second certificate and validating a time-limited authentication application from the user device. The entertainment system connects the user device to the server when the connection authorization decision authorizes the connection based on successful two-factor authentication.