Is that still the same (underlying) question as back in April?
A port forward allows you (and others) to access a service running on a specific machine in your home network. It does not provide outside access to the entire network or the entire server… just that one service running on the defined internal port (32400: Plex).
Within Plex, the user gets to see what they’re authorized to see:
- if a user has no Plex account, they’ll fail to login into Plex
- if a user has a Plex account but you haven’t shared anything with them… they’ll see an empty Plex Web at best (but none of your content)
Things usually only get tricky if you messed things up elsewhere and e.g. publicly posted your Plex Token (maybe for the use by another app)
