# Changing Password

**URL:** <https://forums.plex.tv/t/changing-password/141655>\
**Category:** General Discussions\
**Created:** [April 9, 2016, 1:12am UTC](https://forums.plex.tv/t/changing-password/141655 "2016-04-09T01:12:27Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [April 9, 2016, 1:12am UTC](https://forums.plex.tv/t/changing-password/141655/1 "2016-04-09T01:12:27Z")

</div>

Hello all,

Was just wondering if someone could point me in the right direction with a few moments of their time.

My Plex account details were compromised (password changed etc already) recently. Now even after changing the password, it appears that iOS/Android devices are still able to access my content and stream.

I’ve used the “sign all devices out” function when changing my password a few times with no avail. The web portal can no longer be accessed, but non computer devices are able to continue connecting regardless of changing of email username/password.

I’ve also deleted all the devices/users from my [Plex.tv](http://Plex.tv) settings and invalidated the sessions.

Any help would be much appreciated. Perhaps I’m missing something?

Sincerely,

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 9, 2016, 1:39am UTC](https://forums.plex.tv/t/changing-password/141655/2 "2016-04-09T01:39:46Z")

</div>

Go to: [https://plex.tv/users/password/new](https://plex.tv/users/password/new) to begin recovery of your account and set a new password

Go to: [https://plex.tv/users/edit](https://plex.tv/users/edit) to edit your account after you’ve regained control through your email address on file.

There you will see your account and you can recover from there.

In the future, you may wish to require your email address and not your account name as there is a security issue going on around you.

---

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [April 9, 2016, 6:15am UTC](https://forums.plex.tv/t/changing-password/141655/3 "2016-04-09T06:15:27Z")

</div>

Hi ChuckPa,

Thanks for the response - I’ve actually already got control of my Plex account back and changed the email/password etc… Unfortunately all the iOS/Android devices are still connected and can stream content!

I’ve invalided all sessions and devices but they can still connect (including my own iPhone and iPad) - which was never prompted for a new password.

Sincerely,

---

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [April 11, 2016, 12:15am UTC](https://forums.plex.tv/t/changing-password/141655/4 "2016-04-11T00:15:48Z")

</div>

Anyone have any ideas?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 11, 2016, 12:18am UTC](https://forums.plex.tv/t/changing-password/141655/5 "2016-04-11T00:18:08Z")

</div>

do you mind disabling remote access for a short period?

I will forward this to a Plex Employee to help with.

Also, did you go into ‘shares’ for your library and disable the users listed?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 11, 2016, 12:25am UTC](https://forums.plex.tv/t/changing-password/141655/6 "2016-04-11T00:25:58Z")

</div>

Working with an employee,

ALL your account tokens have been reset.

All devices must log in with the updated password, INCLUDING the server,.

This means your server must log out and log back in to your account (using EMAIL address) with the new password you just assigned.

All devices must use the new password you assigned as well.

---

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [April 13, 2016, 12:15am UTC](https://forums.plex.tv/t/changing-password/141655/7 "2016-04-13T00:15:44Z")

</div>

That seems to have done it - thank you.  
I’m guessing there’s no way for a user to invalidate tokens?

Sincerely,

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [April 13, 2016, 1:18am UTC](https://forums.plex.tv/t/changing-password/141655/8 "2016-04-13T01:18:08Z")

</div>

Yes, you may invalidate all the tokens when you change the password.

It’s the little check box under the new password

**SIGN OUT CONNECTED DEVICES WHEN SETTING YOUR NEW PASSWORD**.

---

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [April 13, 2016, 4:54am UTC](https://forums.plex.tv/t/changing-password/141655/9 "2016-04-13T04:54:30Z")

</div>

Hi ChuckPa,

I did that earlier a few times but it didn’t work.  
Maybe it’s a bug or error on my end.

Seems to have handled it now so we can close this request.  
Much appreciated.

Sincerely,

---

<div class="post-metadata">

**Author:** ![marcklam](https://avatars.discourse-cdn.com/v4/letter/m/db5fbb/32.png) [@marcklam](https://forums.plex.tv/u/marcklam)\
**Post date:** [September 30, 2016, 2:17pm UTC](https://forums.plex.tv/t/changing-password/141655/10 "2016-09-30T14:17:13Z")

</div>

Hi Team,

Sorry to rez a somewhat old thread, but this issue has replicated itself once again.  
A number of iOS devices which were at one point logged in are still able to access my server (similar issue to above).

This remains the case after a full password reset, kicked all devices off and deleted all devices from users.  
Any ideas?

Sincerely,

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [January 7, 2020, 9:17pm UTC](https://forums.plex.tv/t/changing-password/141655/11 "2020-01-07T21:17:46Z")

</div>


