The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.
“Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution, we are requiring all Plex accounts to have their password reset,” claims Plex’s notice.
The password reset isn’t enforced via automatic sign-outs, so those who don’t log out of their accounts on existing devices may continue using Plex, but encounter media collection access issues.
If you might be using the same credentials on other websites, you should reset your passwords there too.
Remember, encryption doesn’t make passwords uncrackable either at present or in the future, as that depends on the type of algorithm used for securing the stored passwords.
Plex users can add a 2FA step in their login process for additional account security by following the instructions here.
