Let's say Plex sets up HTTPS for and we load instead. The clients connect to to discover the servers linked to your account, and then connect directly to the server.įor example, if you use the web app, you load, the app asks the list of your servers and then connect to each of them with a XHR like.

The server is a piece of software that runs on your own machine, where you have all your movies and TV series. BackgroundĪ quick overview of the Plex architecture to understand why this is different from the average HTTPS deployment. This week Plex, a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user's servers. Some Android Police readers who have tried to reset their password are reporting the website is struggling, with some taking over 10 minutes to access the reset tool.How Plex is doing HTTPS for all its users You can reset your Plex password here or through the Android app. You can do that as part of resetting your password, and as ever, the app recommends that you turn on two-factor authentication if you don’t already have it running.

The breach doesn’t impact payment data as it is stored on different servers.Īlongside a password change, Plex advises using its tool to sign you out of existing devices. Not everyone is impacted by this data breach, but Plex wants all users to reset to ensure safety. Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex accounts to have their password reset.”

The email continues, “We immediately began an investigation and it does appear that a third-party was able to access a limited subset of data that includes emails, usernames, and encrypted passwords.

Plex link account