You set up Plex, opened a port on your router, shared it with friends and family, and moved on. Sound familiar? Most Plex servers are running with default security settings that expose more than they need to. Let’s fix that.

This isn’t a paranoia guide. It’s practical steps that protect your server, your network, and your data without making Plex harder to use.

The Biggest Risk: Your Open Port

When you enable remote access, port 32400 on your router is open to the entire internet. Anyone who finds it can reach your Plex server. Plex’s authentication handles the “who can log in” part, but the port itself is discoverable by port scanners in minutes.

What to Do

Authentication: Beyond the Basics

Plex accounts are your first line of defense. Here’s what most people miss:

Enable Two-Factor Authentication (2FA)

Go to plex.tv/users/edit and enable 2FA on your admin account. If someone gets your Plex password (phishing, data breach, password reuse), 2FA stops them from accessing your server.

Use Managed Users for Sharing

When you share your server with friends and family, use “managed users” (Home → Manage Users) rather than sharing via their full Plex accounts. Managed users:

Network Segmentation

Your Plex server has access to your entire home network by default. If it’s compromised, an attacker can reach every device on your LAN.

The Fix: VLAN or Separate Subnet

If your router supports VLANs (most prosumer routers and all enterprise gear), put your Plex server on its own VLAN. It only needs:

Block everything else. If someone exploits a vulnerability in Plex, they’re stuck on an isolated network segment.

Keep Plex Updated

This sounds obvious but we see servers running versions from 2024 regularly. Plex has had real security vulnerabilities — including one in 2022 that allowed unauthenticated access to server data. Updates fix these.

HTTPS and Encryption

Plex supports encrypted connections but the default behavior is “preferred” not “required.” This means connections can fall back to unencrypted HTTP.

The Fix

In Plex Settings → Network, set “Secure connections” to Required. This forces all connections to use HTTPS. Note: this may cause issues with very old clients that don’t support TLS. If a specific device stops connecting, you can add it to the “List of IP addresses and networks that are allowed without auth” for local-only access.

Disable DLNA and GDM If Not Needed

Plex has two discovery protocols enabled by default:

Disable both in Settings → DLNA and Settings → Network → “Enable local network discovery (GDM).”

Monitor Access Logs

Plex doesn’t have great built-in logging, but Tautulli (free, open-source) gives you detailed logs of who connected, from where, and what they watched. Set up notifications for logins from unfamiliar IPs.

Quick Security Checklist

Want a Security Audit?

Not sure what’s exposed? Our remote sessions include a full review of your Plex server’s security settings, network exposure, and access controls. We lock it down and walk you through what we changed.