# Has Plex been hacked again? (oct 2017)    -- Authentication Server errors.

**URL:** <https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244>\
**Category:** General Discussions\
**Created:** [October 22, 2017, 9:33pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244 "2017-10-22T21:33:09Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![7ABt6kB](https://avatars.discourse-cdn.com/v4/letter/7/46a35a/32.png) [@7ABt6kB](https://forums.plex.tv/u/7ABt6kB)\
**Post date:** [October 22, 2017, 9:33pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/1 "2017-10-22T21:33:09Z")

</div>

Has Plex been hacked again? I can’t login to my own server or view account settings on [plex.tv](http://plex.tv).

Its stuck in an endless loop of  
Sign in  
Thanks! You have successfully signed in. - You will be redirected automatically.  
“Invalid Credentials - Your credentials have expired. Please sign in again.”  
Sign in again.  
We were unable to complete this request. - You will be redirected automatically.

On mac/win/ios/lan/mobile nothing works. Existing media is playable.

This was posted in the PMP sub forum but no one has responded.

---

<div class="post-metadata">

**Author:** ![7ABt6kB](https://avatars.discourse-cdn.com/v4/letter/7/46a35a/32.png) [@7ABt6kB](https://forums.plex.tv/u/7ABt6kB)\
**Post date:** [October 22, 2017, 9:38pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/2 "2017-10-22T21:38:40Z")

</div>

> **[Login code expires almost instantly](https://forums.plex.tv/discussion/292798/login-code-expires-almost-instantly)**
>
> The xbox one app (on an Xbox One S) gives me about 5 seconds to put in a code. Even when I appear to do it in time, it still expires on the xbox one. This sounds exactly like...

  

> **[No sign-in after version 1.9.4.4325-1bf240a65 of Plex onto WD My Passport...](https://forums.plex.tv/discussion/292782/no-sign-in-after-version-1-9-4-4325-1bf240a65-of-plex-onto-wd-my-passport-wireless-pro)**
>
> Newer version of Plex downloaded to WD My Passport Wireless Pro two days ago (10/20/2017). I select “Configure” from the My Passport Wireless Pro web interface from the “Media” tab. It sends me to a sign on Plex website in a new window. I type in my...

  

> **[endless loop of "Invalid Credentials"](https://forums.plex.tv/discussion/292096/endless-loop-of-invalid-credentials)**
>
> I am stuck with an endless loop of “Invalid Credentials” when trying to start the Media Player on the Win7 box that is running my PMS. The PMP on another Win7 box does not have this problem. I can go to my library if I ignore the warning but when I...

---

<div class="post-metadata">

**Author:** ![matt\_birtwhistle.net](https://avatars.discourse-cdn.com/v4/letter/m/df705f/32.png) [@matt\_birtwhistle.net](https://forums.plex.tv/u/matt_birtwhistle.net)\
**Post date:** [October 22, 2017, 9:52pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/3 "2017-10-22T21:52:20Z")

</div>

I’m having the same / similar problem - endless login loop, even after “you have successfully signed in”

---

<div class="post-metadata">

**Author:** ![tlennon88](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tlennon88](https://forums.plex.tv/u/tlennon88)\
**Post date:** [October 22, 2017, 9:57pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/4 "2017-10-22T21:57:06Z")

</div>

Same here!

---

<div class="post-metadata">

**Author:** ![Bartlomiej\_Baraniec](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bartlomiej_baraniec/32/14531_2.png) [@Bartlomiej\_Baraniec](https://forums.plex.tv/u/Bartlomiej_Baraniec)\
**Post date:** [October 22, 2017, 10:04pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/5 "2017-10-22T22:04:58Z")

</div>

And I was thinking something wrong with my xbox one app.

---

<div class="post-metadata">

**Author:** ![kenster1](https://avatars.discourse-cdn.com/v4/letter/k/b4bc9f/32.png) [@kenster1](https://forums.plex.tv/u/kenster1)\
**Post date:** [October 22, 2017, 10:05pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/6 "2017-10-22T22:05:17Z")

</div>

Same here. i keep getting booted to A new type of server login page . I cant get to my settings page. I get this…  
continue with Google  
continue with Facebook  
continue with email  
Hope hackers aren’t steeling our user/passwords.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 22, 2017, 10:11pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/7 "2017-10-22T22:11:45Z")

</div>

Operations is working on it.  
One of the servers keeps falling out of the cluster and disturbing everything.  
I’ll report back when fixed.  
Sorry for the inconvenience.

---

<div class="post-metadata">

**Author:** ![The\_Muffin\_Man\_67](https://avatars.discourse-cdn.com/v4/letter/t/6bbea6/32.png) [@The\_Muffin\_Man\_67](https://forums.plex.tv/u/The_Muffin_Man_67)\
**Post date:** [October 22, 2017, 10:43pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/8 "2017-10-22T22:43:50Z")

</div>

Same problem

---

<div class="post-metadata">

**Author:** ![Xcast](https://avatars.discourse-cdn.com/v4/letter/x/ccd318/32.png) [@Xcast](https://forums.plex.tv/u/Xcast)\
**Post date:** [October 22, 2017, 10:44pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/9 "2017-10-22T22:44:43Z")

</div>

> @ChuckPA said:  
> Operations is working on it.  
> One of the servers keeps falling out of the cluster and disturbing everything.  
> I’ll report back when fixed.  
> Sorry for the inconvenience.

Glad to know it’s not malicious.

Can we have local logins as an option, so that I can access my local server the next time you can’t keep your server upright? I live in rural New Mexico and our Internet dies whenever it rains hard. The prospect of being unable to stream locally stored content because it rains is not exactly uplifting.

I understand the need for remote authentication for secure remote access and for PM Servers stored on a VPS, but when everything is kept local it makes little sense.

---

<div class="post-metadata">

**Author:** ![Velakan2](https://avatars.discourse-cdn.com/v4/letter/v/b9bd4f/32.png) [@Velakan2](https://forums.plex.tv/u/Velakan2)\
**Post date:** [October 22, 2017, 10:46pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/10 "2017-10-22T22:46:23Z")

</div>

> @ChuckPA said:  
> Operations is working on it.  
> One of the servers keeps falling out of the cluster and disturbing everything.  
> I’ll report back when fixed.  
> Sorry for the inconvenience.

This is absolutely unjust to not let people log in to their own servers… forcing people to use plex.tv just to login and use plex is crap! Roll back the changes.

---

<div class="post-metadata">

**Author:** ![Bartlomiej\_Baraniec](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bartlomiej_baraniec/32/14531_2.png) [@Bartlomiej\_Baraniec](https://forums.plex.tv/u/Bartlomiej_Baraniec)\
**Post date:** [October 22, 2017, 10:50pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/11 "2017-10-22T22:50:10Z")

</div>

> @Velakan2 said:  
> This is absolutely unjust to not let people log in to their own servers… forcing people to use plex.tv just to login and use plex is crap! Roll back the changes.

Oh my days, please don’t start another of those topics. Plex can run without internet, with few limitations. There are hundreds topics about that. ■■■■ gets broken from time to time. How often do you find yourself without internet? Few hours/year?

---

<div class="post-metadata">

**Author:** ![gadgetusaf](https://avatars.discourse-cdn.com/v4/letter/g/f08c70/32.png) [@gadgetusaf](https://forums.plex.tv/u/gadgetusaf)\
**Post date:** [October 22, 2017, 10:51pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/12 "2017-10-22T22:51:46Z")

</div>

Ok, Glad I am not going crazy

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 22, 2017, 10:52pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/13 "2017-10-22T22:52:56Z")

</div>

Your personal mental health is not the subject of this thread, sorry 😃

---

<div class="post-metadata">

**Author:** ![4K\_Fanatic](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/4k_fanatic/32/24730_2.png) [@4K\_Fanatic](https://forums.plex.tv/u/4K_Fanatic)\
**Post date:** [October 22, 2017, 10:57pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/14 "2017-10-22T22:57:31Z")

</div>

> @ChuckPA said:  
> Operations is working on it.  
> One of the servers keeps falling out of the cluster and disturbing everything.  
> I’ll report back when fixed.  
> Sorry for the inconvenience.

I know y’all are busy trying to get the server back up. For future failures, would it be possible to look at implementing a red banner or something at the top of Plex pages to let people know there is an ongoing issue that is being resolved?

---

<div class="post-metadata">

**Author:** ![Bartlomiej\_Baraniec](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/bartlomiej_baraniec/32/14531_2.png) [@Bartlomiej\_Baraniec](https://forums.plex.tv/u/Bartlomiej_Baraniec)\
**Post date:** [October 22, 2017, 11:02pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/15 "2017-10-22T23:02:13Z")

</div>

Usually they get something like this on top of forum but still 90% won’t read it and start new topic anyway.  
Personally I use feed2mail and [http://status.plex.tv/](http://status.plex.tv/)

---

<div class="post-metadata">

**Author:** ![gigebox](https://avatars.discourse-cdn.com/v4/letter/g/7ab992/32.png) [@gigebox](https://forums.plex.tv/u/gigebox)\
**Post date:** [October 22, 2017, 11:03pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/16 "2017-10-22T23:03:10Z")

</div>

is the server issue also causing plex to flood my email associated telling me my account is not authenticated ?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 22, 2017, 11:03pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/17 "2017-10-22T23:03:59Z")

</div>

If I had access to the forum, I would

I’ll reach out to the forum admin and see if he can set one up really quickly.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 22, 2017, 11:08pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/18 "2017-10-22T23:08:02Z")

</div>

> @gigebox said:  
> is the server issue also causing plex to flood my email associated telling me my account is not authenticated ?

Yes, It spewed garbage to all the servers. Sorry about that too. They’re recovering (pushing new servers as primary) and then will perform post-mortem after normal ops restored.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 22, 2017, 11:12pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/19 "2017-10-22T23:12:03Z")

</div>

Update from OPs. This is the incident on the status page.

[https://status.plex.tv/incidents/vt2zblxtbpfs](https://status.plex.tv/incidents/vt2zblxtbpfs)

---

<div class="post-metadata">

**Author:** ![7ABt6kB](https://avatars.discourse-cdn.com/v4/letter/7/46a35a/32.png) [@7ABt6kB](https://forums.plex.tv/u/7ABt6kB)\
**Post date:** [October 22, 2017, 11:12pm UTC](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244/20 "2017-10-22T23:12:17Z")

</div>

> @“Bartlomiej Baraniec” said:
> 
> > @Velakan2 said:  
> > This is absolutely unjust to not let people log in to their own servers… forcing people to use plex.tv just to login and use plex is crap! Roll back the changes.
> 
> Oh my days, please don’t start another of those topics. Plex can run without internet, with few limitations. There are hundreds topics about that. \*\*\*\* gets broken from time to time. How often do you find yourself without internet? Few hours/year?

Not the point, its bad design.

[Next page](https://forums.plex.tv/t/has-plex-been-hacked-again-oct-2017-authentication-server-errors/211244.md?page=2)
