Security password reset

Hi yes I’m local to the NAS and I did actually try using an incognito browser window but to no avail, I’ll leave it until tomorrow in hope that it will work next time… cant say I’m filled with much faith though.

Thanks for responding, its appreciated

When I try resetting my password I keep getting Connection Timeout and Bad Gateway error messages. Is this because most users are scrambling to reset their passwords all at the same time because of the security alert?

Quite likely. Please wait a few hours, then try again.

1 Like

Will do, thank you.

1 Like

Good plan. Plex servers are overloaded right now.

I haven’t seen any answer from Plex team regarding using Google account to log in.
IMHO in this case changing password it’s not required because there’s no password set up for Plex (3rd party component is used to authenticate - Google account). There should not be anything in the affected Plex DB.
So please correct me if I’m wrong but in this case everything is ok.

1 Like

Correct.
Neither Federated Authentication, nor 2FA are affected.

2 Likes

if i have (before the breach) the 2fa aut should i change the password? or i can stay safe?

Theoretically, the attacker cannot use your password hash without knowing the salt and your 2FA codes.

However, it is good practise to reset passwords anyway.
Don’t rely on 2FA as the only line of defense.

Im trying to delete my account, but it keeps redirecting me to a reset password page. When I submit the email fromthe pass reset modal, I never receive a link. Not sure how to proceed.

Plex systems are under a heavy load right now.

Wait a few hours for things to stabilize, then try again.

Hi guys

So I reset my password and logged out all devices.

I’ve gone to my QNAP based local server, logged out and logged it back in with the new password, and continue to get
image

Whilst via plex.tv it’s not seeing my server
image

Presumably it’s stuffed up my X-Plex-Token can you please force reset it? per this thread I suspect it might be similar nonsense again > SSL Certificate Errors - #1103 by RH2

Cheers guys

or is it because…
image

That did not go well. Tried to reset password per email. Entered new pw twice and entered old pw and then received error: wrong password. Which one? There are two. Tried verification code. Says wrong verification code. Prompted to scan QR and use verification app on my device. What verification app other than text??? TOTALLY CONFUSED.

Scanning a QR code is only done during 2FA setup.
Don’t set up 2FA unless you are through with the password reset.

1 Like

Ok so I had this issue just now.
running Plex server in docker and accessing from windows.
Reclaiming server worked following these steps from Plex documentation:

Scroll down to Sign In/Claim section

In a nutshell, I had so SSH Tunnel to the server then open the UI to have the CLAIM button showing in Settings.

Good luck!

I’ve reset my password and reclaimed my server. I’m now unable to see my media content from a different computer on the same network when I go to https://app.plex.tv/desktop/#!/. It shows my media server categories but I’m now getting a secure connections issue. No secure connection settings have been changed so I do not understand why I’m getting the error now and yes, I’ve read the secure connections article.

Screen Shot 2022-08-24 at 10.14.29 AM

Hello, I asked for a password reset twice in the last 2 hours and i am not receiving the password reset email. Email trusted, not in spam folders, getting all other emails just fine from plex.

Next steps???

2 Likes

Plex e-mail and other systems are under a heavy load right now.

Alternative:
Go to account settings: https://app.plex.tv/desktop/#!/settings/account
Scroll down to Password and choose Edit.
As long as you know your current password, no e-mail required.

If you receive timeout or other error messages then wait a few hours for the situation to stabilize and try again. The amount of password reset requests is overwhelming many Plex systems, not just e-mail.

Definitely wait to set up 2FA, which, IIRC, depends on receiving an e-mail.

1 Like

I’m joining in this whole mess… as many others here, I did the password reset as instructed and I now can no longer access my Plex server (on a QNAP NAS)!
I followed every step in the “What if Your Plex Account Requires a Password Reset?” page to no avail.
I even tried the third-party “ClaimIt” tool which I only discovered after having run it that further down Plex issues a warning about using that app!? (totally nonsense contradiction!? Should I or shouldn’t I?? You can’t say “Try this” followed by “But you shouldn’t”!?)

Then went on to the last solution on that page which points to this article: " Why am I locked out of Server Settings and how do I get in?".

I can access my NAS PlexData folder from Windows but despite shutting down the server, it still tells me I don’t have permission or access to be able to save the file (after having done the modifications in that article).
I also tried accessing that Preference.xml file directly from the QNAP NAS, to no avail!

Additionally, the Plex.tv server seems to now be running ok so…what’s left to try and solve this idiotic problem??