# Cannot reliably remove authorized devices **URL:** \ **Category:** Plex Media Server\ **Tags:** server-linux\ **Created:** [December 29, 2023, 6:00am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376 "2023-12-29T06:00:32Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![tlkuvic](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@tlkuvic](https://forums.plex.tv/u/tlkuvic)\ **Post date:** [December 29, 2023, 6:00am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/1 "2023-12-29T06:00:32Z")
Server Version#: 1.32.8.7639 I have a managed user for whom I want to revoke access to my server. I have removed their devices under Authorized Devices and changed my Plex account password. Despite this, their account will still show up streaming media to a device that I specifically removed from Authorized Devices. It’s as though their access token is still being treated as valid by Plex. I’ve tested this with some of my own players, too. I removed my iPhone which caused the app to prompt me to log in next time I opened it. I removed my mac, but can still stream from the mac app without having to log in again. My mac does not appear under Authorized Devices, yet it can still stream. This seems like a pretty massive security problem as access revocation doesn’t really seem to work with any reliability. Am I missing something? ---
**Author:** ![JaysPlex](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/jaysplex/32/281767_2.png) [@JaysPlex](https://forums.plex.tv/u/JaysPlex)\ **Post date:** [December 29, 2023, 6:20am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/2 "2023-12-29T06:20:04Z")
Settings → Manage Library Access Hover over their ID and click the X on the right. That’s how you un-share your server Changing your password doesn’t change theirs I assume you did not give them full access to your server by giving them your admin account details ---
**Author:** ![tlkuvic](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@tlkuvic](https://forums.plex.tv/u/tlkuvic)\ **Post date:** [December 29, 2023, 6:33am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/3 "2023-12-29T06:33:36Z")
This is an old managed non-admin account from when they were in the same house. I’ve moved users who no longer live with me to their own Plex accounts and shared library access with them, but this one user refuses to logout on their PS5, so I have to force their hand. ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [December 29, 2023, 8:48am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/4 "2023-12-29T08:48:43Z")
> [@tlkuvic](#): > > library access with them, but this one user refuses Then delete the whole managed user. ---
**Author:** ![tlkuvic](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@tlkuvic](https://forums.plex.tv/u/tlkuvic)\ **Post date:** [December 29, 2023, 3:55pm UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/5 "2023-12-29T15:55:01Z")
I don’t see how that would help at all. They could just select another managed user when launching the app. ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [December 29, 2023, 3:58pm UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/6 "2023-12-29T15:58:36Z")
> [@tlkuvic](#): > > They could just select another managed user when launching the app. Then add a PIN to each of those users. > [@tlkuvic](#): > > I have removed their devices under Authorized Devices and changed my Plex account password. Despite this, their account will still show up streaming media to a device that I specifically removed from Authorized Devices. I Does this device happen to be a Roku? ---
**Author:** ![tlkuvic](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@tlkuvic](https://forums.plex.tv/u/tlkuvic)\ **Post date:** [January 15, 2024, 6:34am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/7 "2024-01-15T06:34:34Z")
> [@OttoKerner](#): > > Does this device happen to be a Roku? It’s a PS5. I could add a PIN to each user, sure, but it adds an annoying inconvenience. It also still doesn’t address the fact that there is no reliable way to deauthorize a session, which seems like a MASSIVE security issue. ---
**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\ **Post date:** [April 14, 2024, 6:35am UTC](https://forums.plex.tv/t/cannot-reliably-remove-authorized-devices/864376/8 "2024-04-14T06:35:07Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.