This discussion was created from comments split from: NEW: Sign into Plex with your Google or Facebook account! (optional).
Plex staff post new identity-retrieving feature
Plex customer raises concern over current privacy policies
Plex staff delete the customer’s comment
Really feel like Plex values their customers opinions
@sapphirehollow
We hear you. The only identifying info from Google or Facebook stored by Plex is the user’s email address. We request nothing else and anything extra that we receive is discarded. G/FB login is just an opt-in convenience feature (which happens to offer some account security benefits, too).
We’re all paying close attention to the concerns about the privacy policy & metrics opt-out and trying to do the right thing there. This login feature is a pretty different thing, though. We’ve all seen some app burn their users by abusing Facebook permission, so we know their are lingering trust issues with Google/Facebook login. So we’re trying to do federated authentication the responsible way – never require it, request no permissions, only accept minimal profile info, and store even less of it.
I just think Plex should maybe follow up on previous promises and address current concerns with user data before advertising something like this. As I’m sure you’re aware the CEO made various commitments that don’t seem to have been followed up on, and when the Plex community has tried to get explanations there has been no response
How do you turn it off and only show the old login?
I’m locked out at the moment. Can’t log in on any of my devices and can’t log into account settings. For some brilliant reason, you’re telling me password doesn’t meet minimum length or other criteria upon login. That’s the kind of check you do when someone is creating or changing a password, not trying to just log in…
Fix this ASAP!
I am with CyganyZedd, was locked out, my usual sign in was a username, (not email) and a 6 character password which I have used since originally signing up. I don’t use Facebook, hadn’t linked Google account, and the only other sign in option was my email address which I never used. While I could input that, it kept insisting on an 8 character password and of course rejecting my current password as too short.
I finally got in and changed my password and my sign in procedure but it was a problem for a while. No warning, no email explaining the upcoming change? I have come to expect excellence from Plex I suppose, this is a rare step backwards. Somebody didn’t think this through.
4Foot
I am absolutely incensed right now, for two reasons.
One, that I have to get technical support through a discussion forum. I won’t get into how much I hate that, other than the fact that it’s deeply unprofessional and really, really lazy.
The second reason for my anger is that thanks to this new login method, the password requirements were changed, and yet I didn’t get notified whatsoever of this. Ordinarily, this wouldn’t be such a big deal, but my original password was suddenly rendered null and void thanks to this. I had to reset my password to log in. Now, most people would be all, “oh, that’s no big deal. Not like it takes a whole lot to reset a password.” Well, no, it doesn’t, but I shouldn’t have to. I hadn’t forgotten my password. Plex basically destroyed it, making it impossible for me to log in without resetting it.
In the future, if the password requirements are going to be changed, and more importantly, if all existing passwords that do not meet those requirements are suddenly rendered useless, please send a reset password link or some kind of message to your existing users.
@CyganyZedd @4Foot @ema1982
We just removed the password length requirement for login. The change should be effective within 10 minutes. Sorry about that bug.
(But we’d also encourage you to change your password to something more secure!
)
I’ma bit confuse. How do I invite a user to my Plex if they are a new user and signed in with google/facebook?
Yeah, I have to chime in and say despite me wanting to pass judgment on what’s to come with PLEX 2.0 or news of stuff in general, I’m beginning to get more irritated by the lack of consistency over how you guys trickle out new features but fail to address old issues. It gets harder and harder in defending you guys for the choices you make when clearly you fail to LISTEN to users requests. I just can’t recommend PLEX to any family or friends until all this marketing gimmicks come to a halt and PLEX starts cleaning house from top to bottom. Many of us subscribe to email updates, but here you guys go only to pass “news” on into the forums. None of this is consistent.
How do I invite a user to my Plex if they are a new user and signed in with google/facebook?
Great question. For Google and Facebook users, we use the primary email address from the Google or Facebook account. When you share with that email address, the user will receive the invitation.
@ir1950
Many of us subscribe to email updates, but here you guys go only to pass “news” on into the forums. None of this is consistent.
We include a summary of changes like this in the email newsletter. We try not to spam users by sending too many email updates, so we sometimes wait a week or two so that we can include 3-4 updates in a single email newsletter. In the meantime, the forums can be helpful for us to hear quick feedback (like the issue above with password length requirements).
@Gregflix said:
@CyganyZedd @4Foot @ema1982(But we’d also encourage you to change your password to something more secure!
)
Erm, does this suggest that you can see our passwords??
@sapphirehollow No. They reported a bug with the login form that rejected passwords shorter than 8 characters.
How about implementing 2-step verification for Plex account to make it more secure? I would never use my Google account to sign in anything other than Google service.
@wildkeny said:
How about implementing 2-step verification for Plex account to make it more secure? I would never use my Google account to sign in anything other than Google service.
True that!
With the new sign in I can no longer use the KeeFox password manager to automatically fill in email and password. A clear step back in convenience for me. Any way to make the new sign in work with KeeFox?
This login method is suck. I want old
I would recommend that people not start signing in using their Google or Facebook account. Both Google and Facebook are moving away from cookie-based user tracking to profile-based tracking, because it is impossible to use ad blockers to block profile-based tracking. They are both actively pushing their SSO feature in order to learn who you are and track who you are and what you’re doing for advertising purposes.
If you combine this with changes to Plex’s privacy policy, it’s clear that Plex plans to share your data with Google and Facebook so they can use that data to show ads to you. They might claim this is not “selling” your data, but I’m sure they are getting compensated for it in some way. This is yet another reason to distrust Plex. These two changes (privacy policy and Google/Facebook SSO) aren’t happening at the same time for no reason.
@shelbystripes said:
I would recommend that people not start signing in using their Google or Facebook account. Both Google and Facebook are moving away from cookie-based user tracking to profile-based tracking, because it is impossible to use ad blockers to block profile-based tracking. They are both actively pushing their SSO feature in order to learn who you are and track who you are and what you’re doing for advertising purposes.If you combine this with changes to Plex’s privacy policy, it’s clear that Plex plans to share your data with Google and Facebook so they can use that data to show ads to you. They might claim this is not “selling” your data, but I’m sure they are getting compensated for it in some way. This is yet another reason to distrust Plex. These two changes (privacy policy and Google/Facebook SSO) aren’t happening at the same time for no reason.
I’m sure you’re using Mail.ru as an alternative ![]()
Privacy policy apart, this is an optional (convenient) feature. You don’t like it? Don’t use it. Simple.
And if they have told us that it’s only for cross-authorization purpose, I honestly believe. It’s freaking OAuth 2.
Take a deep breath, relax and enjoy life.
@PlexDevelopers! Now that you have finished this extra curriculum project, go and finish Plex Cloud with proper subtitle agent support and PMS HW to the public branch!!! AHAHAH ![]()