> I don't really understand the freak outs here.
Because most people reuse the same email address and password, and are potentially way more exposed than you are.
Because most people reuse the same email address and password, and are potentially way more exposed than you are.
In 2022, your data isn't safe. It's widely known your data isn't safe. You need to take steps to make it matter less when its mishandled.
Don't get me wrong, the Plex infra team should feel bad about themselves, but if this breach in anyway compromises anything else in your life other than your media center -- and if your hashed password gets cracked -- then that's on you in my opinion.
Temporary email services don't seem helpful either if you need to go through password reset processes or receive emails after the address has been removed.
Do people just use use custom domains with catch all addresses? Is this really the best way?
I used to use a catchall with my domain, but now I use our masked email feature. You need a 1Password account, and for fastmail to be your host.
https://1password.com/fastmail/
Depending on your settings, you can use your own domain (which is portable, but less anonymous) or you can generate *@fastmail.com addresses.
- open Settings - tap your username/name at the top of Settings - tap iCloud - tap Hide My Email - you can look for any emails or matches you want
Now, should I have been smarter and used a burner email address and username unique to Plex? Definitely. But I signed up with them like 10 years ago.