In the past 24 hours I’ve had two authorized devices that I don’t recognize and removed them. I have a very small number of users (5) and none of them logged in or got a new device. On the dashboard, no content was played by either device. So, I’m wondering how they made it into my authorized devices? It seems to me that to wind up there one would need a successful login. Both devices show last logged-in within just the past 24 hours and I’ve been the only one using Plex.
Authorized devices are devices where you logged in
I STRONGLY suggest you enable 2FA