I’ve attempted to send the password reset email a half dozen times; it is never received on my end. I thought perhaps it’s because my email address contains a + so I’ve attempted to change that as well, but the password verify email is never delivered, either.
My domain is my own private M365 tenant and I’ve confirmed the email addresses are reachable via multiple other external email systems. There is also nothing from Plex caught in EXO quarantine.
I’m a little stuck here – what do I do?
Do you actually need to reset the password, i.e. did you forget your password?
If you still have your password and can successfully login to your plex.tv account, then you only need to change the password here: https://app.plex.tv/desktop/#!/settings/account
Don’t forget to tick “Sign out connected devices after password change” while doing so.
Afterwards, you need to re-claim your server, in order to regain access to it.
Thanks for that — that solves the first problem, needing to change my password following your breach.
However, it doesn’t address my second problem: I wish to also change my email address, but never receive the verification email for that, either.
There is clearly an issue with Plex (and apparently only Plex) sending emails to my M365 domain … I’ll deal with it later. I’ve successfully changed my email address to my outlook.com address and everything works as expected.
Thank you for your time and attempt to assist!
@OttoKerner What is the right thing to enter on that Change Password form in the “Verification Code” field?
I’ve tried my 2FA code, but that doesn’t work.
I have the same issue - never receive the instructions email. I’m using M365 too.
That is exactly what goes in there. The 2FA code usually comes from your 2FA authenticator app. If you however use one of the 10 backup codes that were created when you activated 2FA, keep in mind that each of these can only be used once. You must strike out those which you have already used.
Be careful that you use the right 2FA code though: it is easy to get confused if you not only have 2FA enabled within Plex, but also within e.g. your Google account. (If you have connected your Google account to your Plex account, so you can use either to login to Plex.)
The security incident does only affect pure plex.tv accounts. So in order to change the password of this, you need to use the 2FA code of your Plex account, and not those of potentially connected other authentication providers.
The only thing that comes to mind would be to avoid special characters at the very beginning and the very end of the password.
As well as not to use white space characters, or emoji in general.
I did have special characters on the end of the new pwd, so I moved those into the middle, and shortened it by a few characters. Still didn’t work.
I’ve tried the ‘forgot pwd’ process after logging out on one of my browsers, and that email has never arrived either. Now I can’t log in.
Is there someone at Plex help that I can talk to to get the pwd reset to a known-good setting?
Only here: https://www.plex.tv/contact/?option=plex-pass-billing
But they are pretty busy at the moment, so an answer may take some time.
Just a heads up. If your clock is one second off, this can also invalidate the 2FA code. Has happened to me multiple times before.
Got confirmation: M365 (Exchange Online) has been throttling inbound emails from Plex. I’m guessing a lot of us are using EXO mailboxes and given that the entire world is likely requesting resets right now, it triggered automatic protections.
Just ignore the email – you don’t need it – and reset your password directly within app settings.
But be warned if you’re also trying to change your email address: if your new address is EXO-hosted, you may not receive the verification email until this all calms down.
So will these emails eventually turn up because they’re in some throttled queue?
Depends. If the barrage of traffic dies down enough for the throttling on the M365 side to stop before Plex’s SMTP servers’ retry windows expire … then yes. Typically SMTP retry windows are 48 hours or less, though. Of the maybe half dozen attempts I made to both reset my password and change my email address, I think I only received 2 or 3 emails after a day or two.
Yip, I received 2 emails from 2 days ago this evening.
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
