A security incident that may involve your Plex account information • Hacker News Board

Re: A security incident that may involve your Plex account information

#31

Post by wiether » Wed, Sep 10, 2025, 3:36 PM UTC

hnlmorg wrote: post #13

colordrops wrote: post #4

Earlier quoted context omitted.

Or better yet use Jellyfin.

I’ve been considering switching to Jellyfin. I’m getting increasingly frustrated at just how badly Plex behaves for home set ups. Which is the entire point of installing something like Plex. Most annoying still, I’ve even paid for their premium products in the hope that it would make things behave better and it did not. The only reason these security incidents happen is because Plex try to extort home users. There is…

I am part of a network of "Plex admins", meaning each one of us own and maintain their own Plex server with their own library.

Thanks to the centralized Plex account, we can share our libraries with each other in a few clicks.

You can do the same if you don't have a server also, basically being a member of various Plex server and accessing everything through a single account and interface.

Sure, requiring an account if all you want to do is being the single user accessing your own instance is useless, and if it's your usecase, then Plex is not the right tool for you.

I tried Plex, Emby and Jellyfin, but I staid with Plex because of this easy sharing feature.

Re: A security incident that may involve your Plex account information

#32

Post by mixedCase » Wed, Sep 10, 2025, 5:23 PM UTC

cprecioso wrote: post #24

wiether wrote: post #19

PSA: If you are the owner of your Plex server and follow the _Sign out connected devices after password change- as they suggest, your server claim will also be expired. So you'll have to get a new claim from https://www.plex.tv/claim and set it on your server; through the PLEX_CLAIM env var if your setup involves Docker. They talk vaguely about it under _Common Issues_ but it wasn't on the original email, so I lost 1…

Yep, this was a huge hassle for me, I didn't realize it would happen! Another option is to do `ssh -L 32400:localhost:32400 ` and connect to http://localhost:32400/web, it will let you claim the server as it detects the connection being local.

Thanks for the one-liner, solved it within 30 seconds!

Re: A security incident that may involve your Plex account information

#33

Post by m4tthumphrey » Wed, Sep 10, 2025, 8:01 PM UTC

stinky613 wrote: post #30

m4tthumphrey wrote: post #17

I am a huge Plex power user; watching something at least once a day. Unfortunately, Plex is a bit of a mess these days - constantly pushing Live TV on us, requiring internet access to access local media (this is a killer whenever internet goes down), overly complex, clunky remote access (altho this is much better these days). But it still isn't bad enough to make me try and migrate. I love my local setup (Sonarr and…

> requiring internet access to access local media Good news! You can whitelist exceptions by IP/subnet Go into Plex Settings, then Settings > Network (show advanced). Scroll down to "List of IP addresses and networks that are allowed without auth" "Comma separated list of IP addresses or IP/netmask entries for networks that are allowed to access Plex Media Server without logging in. When the server is signed out and…

NO WAY!! I will check this out later! Thanks!

Re: A security incident that may involve your Plex account information

#34

Post by bigiain » Thu, Sep 11, 2025, 1:25 AM UTC

ksynwa wrote: post #21

bigiain wrote: post #6

Earlier quoted context omitted.

Is Emby somehow related to Plex? I use Emby, only because a few friends did and recommended it. I'd probably switch ti something more secure and/or open source given the right push.

Emby and Plex are separate projects. Jellyfin is a hard fork of Emby.

Thanks :-)