# Multiple Plex accounts compromised... password unencrypted?
**URL:** https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700
**Category:** General Discussions
**Tags:** account
**Created:** [January 18, 2021, 9:09am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700 "2021-01-18T09:09:29Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@MagicMikeMoody](https://forums.plex.tv/u/MagicMikeMoody)
#### Post date: [January 18, 2021, 9:09am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/1 "2021-01-18T09:09:29Z")
Recently I did a Google search for my username/email and learned that there are tons of plex accounts including my own that have been compromised and are available in plain text on the internet in a pastebin. How could this happen? Is Plex storing our info unencrypted or what?? I can provide a link to it, but only securely because not everyone needs to know everyone’s stuff obviously. This is bullcrap as far as I’m concerned. Plex has been around too long to be storing stuff in plain freaking text.
---
### Author:  [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [January 18, 2021, 9:12am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/2 "2021-01-18T09:12:26Z")
See [Getting spam emails to my plex email address](https://forums.plex.tv/t/getting-spam-emails-to-my-plex-email-address/315008/4)
TL;DR: old news, lessons learned
---
### Author:  [@MagicMikeMoody](https://forums.plex.tv/u/MagicMikeMoody)
#### Post date: [January 18, 2021, 9:13am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/3 "2021-01-18T09:13:55Z")
This pastelink is from December 18, 2019 though? Also I was literally never notified of it.
---
### Author:  [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [January 18, 2021, 10:42am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/4 "2021-01-18T10:42:59Z")
The breach happened in 2015. Is your Plex account that old?
---
### Author:  [@MagicMikeMoody](https://forums.plex.tv/u/MagicMikeMoody)
#### Post date: [January 18, 2021, 6:44pm UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/5 "2021-01-18T18:44:09Z")
No my account is not that old. It’s a different breach then obviously.
---
### Author:  [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [January 19, 2021, 10:26am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/6 "2021-01-19T10:26:11Z")
Could you send me the address of that pastebin per PM, please?
---
### Author:  [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [January 20, 2021, 10:59am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/7 "2021-01-20T10:59:47Z")
Thank you, I will forward this to the right people for investigation.
---
### Author:  [@OttoKerner](https://forums.plex.tv/u/OttoKerner)
#### Post date: [January 20, 2021, 11:18am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/8 "2021-01-20T11:18:14Z")
I recommend everyone who is re-using passwords and/or user names on several online services to check if their credentials have been leaked elsewhere.
The same applies to users who are using easy-to-guess passwords.
It is a known method for crackers to look for leaked credentials from any site and try them on other services – including variants of the user names and passwords.
[haveibeenpwned.com](http://haveibeenpwned.com)
The best way to avoid getting pwned is to use unique, strong passwords on _every_ site.
Use of 2FA [https://support.plex.tv/articles/two-factor-authentication/](https://support.plex.tv/articles/two-factor-authentication/)
and secure password managers is highly encouraged.
I recommend everyone to give this a read: [https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/](https://www.troyhunt.com/the-773-million-record-collection-1-data-reach/)
---
### Author:  [@system](https://forums.plex.tv/u/system)
#### Post date: [April 20, 2021, 11:18am UTC](https://forums.plex.tv/t/multiple-plex-accounts-compromised-password-unencrypted/679700/9 "2021-04-20T11:18:22Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.