Hello everyone, today I noticed that users of my Plex account can modify my pin code and have access to administrator accounts.
Unless it is an error on my part I would like to know if it is possible in the case of a forgotten pin code, a modification only by email or for access only to the administrator profile add the two-step verification ( not when connecting to general accounts but only for the administrator profile).
The PIN is only designed as a small obstacle to prevent users in your Plex Home to switch to your user profile.
As soon as you give out your email address and the password, your account is not safe.
So don’t do that.
If you create managed users in your Plex Home, sign in the devices of these users yourself.
Then “Switch User” to their managed profile.
Then hand over the device.
Don’t add users to your Plex Home who are not members of your immediate family and are not living under the same roof as you.
These users should be rather added as “Plex friends” with their own user accounts.
As an additional security measure, activate 2FA on your account. https://support.plex.tv/articles/two-factor-authentication/
They don’t have access to my email address, nor the password for the email address.
The double authentication measure is for the account itself and not for the administrator profile.
My family has their own computers and I want them to be able to use their profiles and that the forgotten pin code can be modified by email and not by password, this is perfect to avoid modification problems.
What if they create a plex account and I share the library, is it limited to the number of users?
I thought I saw that by sharing as a Friend they can give access to my library to the users they create and I don’t want that.
No, this is explicitly not possible. (Though many users wish it was.)
Currently, you can share your media with a total number of 99 users (inluding those in your Plex Home).
Thank you for your reply .
How can I prevent my family from changing the pin code by password?
That they can enjoy my videos on their PCs without having the possibility of modifying my pin code directly?
.The fact of offering the forgotten pin code only by password and not via the email address (to which i receive an email which allows it to be modified) is problematic…
And indeed adding an option so that the profiles that friends have created cannot access my library would be perfect.
Too many options not added in plex pass which means that the paid offer is not worth it for the moment.
Can you please answer all questions ?
Whose PIN code?
They cannot change your PIN code. They may be able to change their own PINs, but you as the Plex Home admin can always overwrite that.
Honestly, I don’t know of what you are talking about.
Other users cannot change your PIN.
If it was possible by Email, then they would have to be able to intercept emails which are adressed to you. If they can do that, changing your Plex PIN is the smallest of your problems.
My family is connected to my Plex account on their individual PC, they have their profiles present on my Plex account.
If he clicks on my administrator profile there is the pin code, and it says “forgotten” above, so from there he clicks on it, and just has to put the new pin and add the password and these modified.
So it is on this subject that it is problematic.
They did not create an individual Plex account, they have access to their profile on my account.
Other users should not have your password. I explained that already in my first response.
If they don’t have your password, they cannot change your PIN.
If you cannot trust the users in your Plex Home, you should remove them from your Plex Home. Then they won’t see the user selection screen at all.
So they have to create an individual plex account and in the manage i go on “Accounts with access to a library” and “grant access to the library” so that they can read my files securely without me having risk problem for the security of my account?
I can share with my friends my files with 99 it’s exactly ?
If I put the same restrictions as I put for “user profiles” will it be the same or will they have access to more things (because it’s shared access between friends, even if it’s family)?
Thanks for your patience
That is correct.
Find out what email address they want to use for their Plex account, and use the tool in Plex to send them an invitation. During that process you can choose what libraries they may see.
It’s perfect answer , thank you for your helping .
You can close the thread =)
