How do I change my Plex password following hack?
I’ve just received an email from Plex informing me of a possible security breach and the need to reset my password. Do I definitely have to do this? If so, how do I go about it?
QThe breach you refer to was reported by Plex in August (see Issue 640, page 7). It emailed users to say that a third party had accessed emails, usernames and encrypted passwords, but not credit-card
Adetails. Plex advised that users change their passwords as a precaution, so you should do this as soon as possible.
Log into your account settings via your web browser, then click your account avatar at the top right and choose Account Settings. Scroll to the Security section and click Edit, next to Password. Tick ‘Sign out connected devices after password change’ before choosing a new password (see screenshot 1 ). You’ll now be logged out, so log back into your account and return to the same Security section as before to turn on two-factor authentication (2FA) for an additional layer of protection.
Note that choosing ‘Sign out connected devices’ will also unlink your media server from your account, which means you’ll need to ‘reclaim’ it. Assuming you’re on the same network as your Plex server, open a new browser tab and go directly to the server’s local IP address – for example, http://192.168.35.1:32400/ web. Complete the instructions, and you’ll be warned the server is unclaimed and not secure. Click the ‘Claim Server’ button 2 and follow the prompts to relink the server to your main Plex account.
Finally, you’ll need to sign back into all your devices – a pain, but one made easier at least by Plex’s support for signing into TV apps using a four-digit code you can quickly obtain by logging into your Plex account on any web browser.