Action required: Important notice of a potential data breach

That doesn’t work, at least not as far as I can tell. It’s on Synology and I’m going to <synology_hostname>:32400 and while I can sign into my account using “Plex Web” I’m not getting any option to claim the server.

1 Like

This is exactly the question I logged in to ask. I don’t have another password associated with my Plex account, so the reset loop can’t be completed “enter existing password”. Any advice from someone in the know would be fantastic. Cheers.

@EspenB89 theoretically you’d have unique passwords for everywhere.

When I reset my password. I couldn’t access my PMS (it just returned 404 - not found when browsing the ip/port). I stopped and re-started the PMS service. Then i was able to do it.

Same (mm98).

Also, if you reset your password by signing into your Plex account at the plex website, be sure you notice that it wants the new password and confirmation BEFORE the current password. Completely the opposite of every other site in existence when it comes to resetting a password.

1 Like

I do, but since I dont log into Plex with its own account but through google is then my google account the one they got access to?

1 Like

I use google authentication, do I need to change my google password?

The security breach is painful but then you discover you cannot change your password.
What is going on?

1 Like

its legit I did it, I also signed out of all machines , I had to reclaim the server like when you do to get access to the files on the NAS a little pain but heck we all use plex and we know it always needs TLC

Logging into Plex through your Google account violates the principle of one login per site. If anybody gets your Google credentials they have keys to many other kingdoms. In my scenario, you can get my Plex creds but that only works at Plex.

No, your Google account is separate.

2 Likes

I’m using Plex on Synology too.
Try to Uninstall PMS with Sign out and unclaimed this server option.
After uninstall, re-install PMS with claim with server option.

After that it should work fine!

With stupid error messages like “Something went wrong” one cannot tell right. That’s because that’s a stupid and uninformative message. And the programmer was the best person in the world to know what was going on at that time.

Us mortals need to guess. And my guess is the server is overloaded due to the demand that this kicked up.

1 Like

Oh yeah! We have to reset our password, but it’s impossible!

What are “Sso key’s”? Question doesn’t make sense.

I assume… “Single Sign-On”?

Taking a sledge hammer approach at a nail sized problem…

Yeah but SSO’s don’t have keys.

Heh, the question is now gone, so… shrug :laughing:

I fell for this and locked myself out of my account because I’d generated a new password in my password manager already!

I did reset password, and even though I had the token error, about 10 minutes later I got confirmation password had updated which isn’t very reassuring.