Thoughts on the forced Username implementation

Basically that. An alias to add or replace the current username with only on your end, only for the users on your server.

I have nothing against it but I can’t make promises

To be clear though users are not server based. All users, including managed accounts, are stored at plex.tv

1 Like

But the users are also stored locally in our database (table accounts), so no reason there couldn’t be a new field added to that table called friendlyName or something. It would be very similar to what Tautulli does where you can ā€œrenameā€ a user to a friendly name.

And I just confirmed that table is updated as I have at least 3 entries in my database for that table that were updated with today’s date.

Edit: Want to add that I have no issues with the forced username as I’ve always cringed a little seeing someone post and having their email address shown. I also agree though that it would be nice to be able to have a friendly name on our server for the accounts we share with. Like I said, Tautulli gave they option and it’s nice being able to put a user’s actual name instead of the email address or username just so it’s cleaner.

-Shark2k

Nothing against having a username but the implementation here has been messy and confusing. Why not force someone to choose their own username the next time they log in where their email might be exposed? Why did my auto-username end in 69? Why couldn’t I use/claim this forum username of mine in my PMS? Why do I need to see my username under my friendly name in the user switcher?

2 Likes

What confuses me is that I’ve had a username for 4 years, so how in the hell did I get an email in the first place saying I did t have one?

1 Like

Do you have more than one account? look a the ā€œtoā€ address in the email. The account you are on this forum with did not get changed as far as I can tell.

Most folks never log out of the player apps.

It was random with I think a max of three digits depending on the length of email and sometimes silly associations like that happen. All it was I believe was cut the email in half and add a number. The numbers might have gone sequential, meaning the next account that was processed probably ended in 70

The forum software account is separate from your Plex account. It is updated here when you log into forum from your Plex account via SSO. It is separate because of old forum software we had years ago got hacked (2015) and we don’t keep sign in info on forum itself anymore.

We do let folks manually change it here if they want their forum name to be different but the SSO does not work in reverse in that it cannot change the plex account.

We didn’t think that would be a big deal because the user switcher should only be used in the Plex Home by people you live with. But I will pass that feedback along

1 Like

Thanks for the reply. Re. the last one - it’s not personally a huge deal for me, but fluffykittenpwner6969 might have a different view. Family members don’t always make their Internet usernames common knowledge.

and herein lies the crux of the issue…

Why on earth are our emails (and usernames for that matter) publicly accessible in the first place?!

You are providing a media platform, not a social network, right?

@BigWheel This is the major concern that I have with this implementation. Have our accounts on plex.tv (for your data mining activities), but why do they need to be public?

2 Likes

I dont get it. Why should we use/have username as login if we can use email (also there is option to not use username for login that makes that username thing even more absurd). Why do we have to have usernames at all if we have emails? Lots of online services use emails as username so why plex cant?
Maybe you can just let us alone and dont bother us with useless usernames and make it maybe optional if someone want to login with username instead of email for some reason.

2 Likes

Repeating that usernames are publicly visible to all users doesn’t make it any more true.

You might want to read up on Plex privacy policy and preferences… nobody’s storing what you watch or what media you have in your library.

Don’t get me wrong… this thread starts feeling more like what you expect in a conspiracy theory forum:

  1. one user posts an interpretation
  2. the interpretation gets corrected
  3. more users chime in on the wrong interpretation (#1)
  4. those messages get corrected too
  5. more users pick up the previous claims/interpretations (#1, #3) and add their own theories/interpretations
  6. we’re discussing stuff that’s no longer related to #1 but it’s really, really bad and the world is sure to end if nobody stops everybody else

This way we keep producing more rumors, half-truths and worth things.

Not trying to turn a blind eye on serious concerns (which I think have been addressed multiple times in this thread)… just wondering if those replies have even been considered or if we’re moving towards general outrage (in which case I’ll put all pitchforks and torches away and bring fish).

Edit: Disclaimer – keep in mind → ninja = regular user with forum mod role… so my slightly frustrated post is no position of Plex telling everybody to shut up or discrediting anybody’s concerns :wink:

3 Likes

@tom80H Not sure I am seeing outrage (yet) and @BigWheel already stated that the usernames are in fact public-facing and publicly discoverable, albeit via a tedious method (nothing that cannot be programmatically automated to produce a list of usernames).

What has not been addressed thus far, is why? Why is there a need to have everyone’s usernames publicly discoverable by anyone with a Plex.tv account, when all Plex servers are running on an internal network?

Regarding the data mining (which is mentioned in the terms/privacy policy), as I said before, I don’t have an issue with anonymised data collection, which is what I agreed to when creating a Plex.tv account and paying for the subscription.

Username for Plex accounts have always been visible on the account switcher screen. After we introduced the full name field, we added that new field to this screen as well.

Like many internet services, Plex accounts have usernames that are unique across all users. That username is visible to any friends you have on Plex and visible to the other managed accounts in your Plex home.

For the last few years, anyone who signed up for a new Plex account had their username set to their email address. Most users never changed it. This meant their email address was visible to all of their friends on Plex.

This does NOT mean that email addresses and usernames are visible to the general public. It’s visible specifically to the people you’ve accepted as friends.

As @BigWheel pointed out, the current ā€˜Add Friend’ screens allow you to type in a username and email address and will confirm when it exactly matches a Plex username. Other than showing the avatar and confirming that account exists so you can send a friend request, it does not reveal any other information about that user. In order to facilitate the concept of Plex friends at all, we need to be able to allow people to find others.

The recent work to set a username for these accounts without one was done for two reasons:

  1. We felt that it was better to not have a person’s email address as a username that’s visible to other users. Most services that allow users to log in with an email address today don’t show it to others.
  2. Long term we’d like to make the process of friending other Plex users easier. Rather than requiring you to know the exact username of another person, we’d like to offer the ability to search for another user and get a list of possible matches. We can’t do that if those search results contain email addresses.

Considering some of the feedback on this thread, it sounds like we should consider an account level setting that prevents you from ever being listed in that future account search feature before it ships. That way you can control whether or not your account is discoverable by others.

8 Likes

I think that would be great.

1 Like

Why are so many people numb to this idea? We don’t want e-mail addresses as usernames flooding the forums which ARE publicly avail for data mining bots and other such nefarious activities. It really is a security and privacy concern for people that don’t know any better.

If you don’t like your username you may change it and if one you like is not avail then you can set your ā€œFull Nameā€ and it will use that locally on the Plex user switcher instead.

You can also change your username to something different on the forums manually that doesn’t match your Plex account after the fact.

IF any other topic is of concern such as searching for known accounts via ā€œGrant Library Accessā€ or user signup then I urge you to set up 2FA authentication and own a strong password managed by a password manager such as Bitwarden to stay secure.

I do believe there should be a search opt-out feature for the ā€œGrant Library Accessā€ if one wishes to. Kind of like Facebook has a user search opt out feature but this will require additional implementation and a legal privacy policy update.

I would really support the idea of an account or server level that prevents being listed

1 Like

I suggest that not having username could prevent you from being listed or find by others. Also PLEX is not social network so searching for friends makes no sense. I wonder what is the point of having username for searching online?

4 Likes

So who can I contact regarding issues with the newly assigned username for my account? I could have sworn I had a username already selected that matches my Forum name. However, I received the notice today that I was assigned a new username, which is randomized based on my email address. So now I have an email address for a login, a separate username also for login, and a different Forum username…all for Plex, none of it matching. I tried changing my username to match my Forum login today, but it said it was already taken. While not impossible…I still find that unlikely.

Sounds like you might have created a separate user account at some point? Does the e-mail address linked to your regular account match that the e-mail was sent to?