I just saw a Plex account I don’t recognize show up under https://app.plex.tv/desktop#!/settings/users (in both My Home and Friends). It was simply an email address, EDIT: redacted. When I deleted it, it deauthorized me and I had to log into my Plex server again.
I’ve never seen this email address (it’s not mine) and definitely didn’t invite this user. As far as I’m aware, nobody I’ve granted access to has permission to invite others either.
Should I be concerned? Is anyone else seeing an unauthorized user in their Plex server?
Server Version#: 1.13.5.5291 (Ubuntu 18.04, official Docker image)
Please review the emails from plex you received.
Among them, there might be an invitation to join the Plex Home of a user you are sharing servers with.
When you saw this email address, you were perhaps actually looking at the user selector of your friend’s Plex Home.
You should never join someone else’s Home, if you have a plex server of your own.
Ask your Plex-friend H****** about this email. Whether it is a legitimate member of his Plex Home or not.
Looks like that was the problem - my friend H****** invited me to their Plex Home instead of simply sharing their library as a friend. Thanks for looking into the problem for me.
I guess my issue’s resolved now - once I rejoined my server, I couldn’t see my friend in my user switcher anymore, but I can still access their media as intended.
If there are any product designers at Plex reading this: When I joined my friend’s Plex Home a few months ago, I was expecting an invitation from them, but I didn’t understand that there was a difference between joining a Plex Home and being invited to share someone’s library remotely. This distinction (along with its associated security issues) could be made clearer.
