PIN Security

PIN security is weak and should only be changed via email.
Anyone can change the password and have access to the main user, this should not happen, as my son can have access to the things I have blocked.

If your son manages to access blocked stuff he simply deserves it lol

Dude, it’s not funny, in desktop mode, there is a recover password button when I access the link it takes me to reset password without sending it to email, so any user can reset the password to have access to the main user

That’s simply not true. In order for the password reset to actually get executed, you need access to the link which is being sent to the email address.
You can smash that button as often as you want, it won’t change your password if you don’t click the link in the email.

But that has nothing to do with your account’s PIN.

Here I show what I’m talking about in more detail, my son accesses my Plex account to watch, I made a profile for him to access on his computer and on his cell phone, but I noticed that on the computer it says reset PIN for the main profile, so anyone can change it the PIN and have access to the main profile only with the password, I should send a PIN reset by email because only I have access to my email, on the cell phone everything is ok, it doesn’t appear but on the computer this PIN reset appears. PIN should be by email, I would really appreciate it if you change that
000

You must not give out your user name and password in the first place!
If one has these two things, you can already do some major things to your server and account. Notwithstanding any PIN.

The idea behind managed accounts is that the server owner is logging in,
then activates “automated logon” in the settings of the Plex client,
then performs “Switch User” to the child’s account,
then hands over the device to the child.

Set the web browser so that it doesn’t delete cookies from plex.tv when it’s closed.
Or install the Plex desktop app and let him use that.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.