[implemented] Two Factor Authenticator for Plex account

[Lanznaster]

+1 also

[julianbaker]

Yeah +1. The is desperately needed

[peatrick]

+1 +1 +1 (if) you can also implement the ability to use hardware keys, namely Yubico would be fantastic, but even an app would suffice: https://www.yubico.com/products/yubikey-hardware/

[mo_ye]

Count me in in this!!!

[Rivers]

I wonder if this feature is already in progress

[Ryonez]

Would defiantly use this.

[pmraiders]

Just a suggestion, Yubikey authentication is a free service you can implement as an option and is a physical 2 factor.

[Hedders]

+1. This really should be standard in 2019, especially for a system that - by design - punches holes into home networks from outside.

We understand that Plex, Inc. isn’t Google and has to prioritise resources, but this is a feature that would be greatly appreciated by all, I’m sure.

[ramirez11_gmail.com]

Yes please

[rusti_gotrage]

Hell to the YES!!
Why is this not already a thing?
And agree - it should be just on adding new devices so as not to compromise ease of use, and for entering account editing…

[mkmorris]

TOTP first, or rudimentary auth by email (or maybe even SMS) as a far second. Anything is better than nothing though.

[LadySmith]

+1. 2FA pretty much saved me in the past. The admin account needs 2FA.

[nemchik]

+1 for Authy, or totp/Google authenticator support.

[skavoovie]

TOTP codes and FIDO U2F. nothing that locks you into some specific client like authy garbage, and not SMS codes either.

[Rivers]

I don’t think the Plex team would ever go the Authy route, it’s too restrictive, twitch did a similar thing with their 2fa and it’s asinine

[JC_Plex]

Has a Plex staff member ever made a statement about their security posture or taking this request that is coming up to 5 years old seriously?

[oliverlockett_outlook_com]

Bump. The fact that this is not a feature for all users is bad - that it isn’t a feature for premium users is awful. Running server on a vpn until 2 factor auth is resolved

[certuna]

Not very keen on giving my phone number to Plex so I’m not too supportive of 2FA by text messaging, to be honest.

[Rivers]

SMS Authentication is weak and easy to circumvent by sim jacking, I don’t think they would even bother.
1Password or Authy app is all that’s needed

[certuna]

Trusting another 3rd party cloud service is also a big leap of faith, to be honest. But if enough people want it, why not.