# Require authentication on direct ip access (disable anonymous access)

**URL:** <https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061>\
**Category:** General Discussions\
**Created:** [June 26, 2017, 4:44pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061 "2017-06-26T16:44:36Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jonchiu](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@jonchiu](https://forums.plex.tv/u/jonchiu)\
**Post date:** [June 26, 2017, 4:44pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/1 "2017-06-26T16:44:36Z")

</div>

I can still access anonymously though my WAN IP:

Remote access is enabled, I have port forwarding set up…

I’ve tried entering my local netmask 192.168.42.0/24 in " List of networks that are allowed without auth" and have also left it blank, but to no avail.

I have Plex Home enabled with users configured. Using any app or logging in via [plex.tv/web](http://plex.tv/web) requires pin authentication. However, I’d like to lockdown down access if directly accessing via my WAN IP. I’d like to require authentication.

I’m tech savvy, so I’m capable of setting up some reverse proxy and using basic auth or something more complicated. I’d prefer to disable anonymous access completely and require auth only though [plex.tv](http://plex.tv) if it’s as simple as setting config somewhere.

---

<div class="post-metadata">

**Author:** ![kegobeer-plex](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/kegobeer-plex/32/17444_2.png) [@kegobeer-plex](https://forums.plex.tv/u/kegobeer-plex)\
**Post date:** [June 26, 2017, 4:46pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/2 "2017-06-26T16:46:42Z")

</div>

What are you running Plex Server on?

---

<div class="post-metadata">

**Author:** ![hthighway](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/hthighway/32/82003_2.png) [@hthighway](https://forums.plex.tv/u/hthighway)\
**Post date:** [June 26, 2017, 4:55pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/3 "2017-06-26T16:55:03Z")

</div>

Enabling `Plex Home` should make it so you can not access PMS from any device or browser without authentication. See: [https://support.plex.tv/hc/en-us/articles/203948786](https://support.plex.tv/hc/en-us/articles/203948786)

So if you have not changed any of the settings relating to authentication after enabling `Plex Home` I would suggest you look at your preferences.xml file and see if `disableRemoteSecurity` is set to `1`. If so remove that entry. REF: [https://support.plex.tv/hc/en-us/articles/201105343-Advanced-Hidden-Server-Settings](https://support.plex.tv/hc/en-us/articles/201105343-Advanced-Hidden-Server-Settings)

---

<div class="post-metadata">

**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\
**Post date:** [June 26, 2017, 5:16pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/4 "2017-06-26T17:16:53Z")

</div>

Here is a longer thread which has some background information:

> **[Facebook hidden group (plex nation) posting IP Addresses of people affected by...](https://forums.plex.tv/discussion/comment/1458550/#Comment_1458550)**
>
> @dasaint said: I just wanted to let you know there is a group on FB that is taking advantage of an old setting that got carried over to the newer version allowing remote access for outside unauthenticated users… Decided this was ok to do as its the...

---

<div class="post-metadata">

**Author:** ![jonchiu](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@jonchiu](https://forums.plex.tv/u/jonchiu)\
**Post date:** [June 26, 2017, 6:39pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/5 "2017-06-26T18:39:26Z")

</div>

Thanks all. I am running Plex in a BSD Jail… this likely is the old `disableRemoteSecurity` setting that was carried over from an old version… before I enable remote access. I’ll take a look and report back!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [January 7, 2020, 11:27pm UTC](https://forums.plex.tv/t/require-authentication-on-direct-ip-access-disable-anonymous-access/197061/6 "2020-01-07T23:27:19Z")

</div>


