Remove Password

[HeroLeam 11]

How do I remove a user's password? For example, there is a user with a password, I want to remove that user's password so I don't need a password to access, how do you do that? because I looked in the user settings and I don't find any button to remove, I didn't want to have to create a new user and leave it without a password, the user history would be lost if I do that...

[Happy2Play 9780]

All users have a remove password option unless they are an admin.

[HeroLeam 11]

1 hour ago, Happy2Play said:

All users have a remove password option unless they are an admin.

I am server admin, can't remove users password?

[Happy2Play 9780]

5 hours ago, HeroLeam said:

I am server admin, can't remove users password?

If the user is set to be a admin also technically no.  Is the user set to "Allow this user to manage the server"?

What client are you using?

[ebr 16184]

8 hours ago, HeroLeam said:

I am server admin, can't remove users password?

Hi.  We absolutely do not recommend having users without passwords if there will be any opportunity for external access to your server.

[HeroLeam 11]

3 hours ago, Happy2Play said:

If the user is set to be a admin also technically no.  Is the user set to "Allow this user to manage the server"?

What client are you using?

My account is adm, the other one is not, does the other need to be adm so I can remove it? but not even my admin account I can't remove the password.

server version is 4.6.7.0

[HeroLeam 11]

27 minutes ago, ebr said:

Hi.  We absolutely do not recommend having users without passwords if there will be any opportunity for external access to your server.

It's personal use, so no problem.

[GrimReaper 4740]

3 hours ago, Happy2Play said:

What client are you using?

I see no issues with 4.6.7.0 on local Web app, hosted Web app, Theater Store, Theater Desktop, standard Android app - all have "Remove Password" for non-admin users.

  

[HeroLeam 11]

1 hour ago, GrimReaper said:

I see no issues with 4.6.7.0 on local Web app, hosted Web app, Theater Store, Theater Desktop, standard Android app - all have "Remove Password" for non-admin users.

  

 

It doesn't show up for me

 

[GrimReaper 4740]

3 minutes ago, HeroLeam said:

 

It doesn't show up for me

 

That seems like your own admin account, and likely logged in currently. Check some non-admin account which is not you logged in atm. 

[CBers 7451]

7 minutes ago, HeroLeam said:

It doesn't show up for me

It will only not show up if the user in question has Admin access to the server, as per @Happy2Play comment above.

5 hours ago, Happy2Play said:

If the user is set to be a admin also technically no.  Is the user set to "Allow this user to manage the server"?

 

[HeroLeam 11]

1 minute ago, GrimReaper said:

Isso parece ser sua própria conta de administrador e provavelmente está logado no momento. Verifique alguma conta que não seja de administrador que não esteja logado no atm. 

now i understand, the account needs to be common to be able to remove it, oh so i will remove the adm access, remove the password and put adm again, thanks!

[CBers 7451]

23 minutes ago, HeroLeam said:

now i understand, the account needs to be common to be able to remove it, oh so i will remove the adm access, remove the password and put adm again, thanks!

Leave a password on the account, but use the "Don't require a password on the local network" option.

[FrostByte 5392]

I don't have a password on mine (just the boss and I with no external access), but CBers suggestion is probably the best answer.

[Gryzor 27]

Has the button to remove password been removed? I just added a simple user to test it and I can't find it (using the latest Android beta).

 

I also don't see the "don't require a password on lan" option either?!

Edited December 23, 2024 by Gryzor

[GrimReaper 4740]

Just now, Gryzor said:

Has the button to remove password been removed? I just added a simple user to test it and I can't find it (using the latest Android beta).

Yes, as there can no longer be any passwordless users, you can only change current password. 

[Gryzor 27]

29 minutes ago, GrimReaper said:

Yes, as there can no longer be any passwordless users, you can only change current password. 

I see, thanks. A shame though.

[Luke 42079]

You can have a password less user. Just set it to a blank password.

[GrimReaper 4740]

16 minutes ago, Luke said:

You can have a password less user. Just set it to a blank password.

That really shouldn't be allowed.

[Gilgamesh_48 1240]

21 minutes ago, GrimReaper said:

That really shouldn't be allowed.

Why not? At least on local only servers? I can see needing/wanting a password for remote users or if there are untrustworthy people locally but there NEVER should be any password requirement for strictly local systems. I detest it in Windows, Linux and everywhere else that is not remote. There is no point!!!! If someone breaks into my home and tries to access my computers i have MUCH more serious problems than computer security. In fact I would like it if, should I have a break in, they spent time accessing my computer. It would increase the chances that they would get caught.  

[pwhodges 2012]

2 hours ago, Gilgamesh_48 said:

Why not? At least on local only servers?

Because a recent serious incident showed that there were sometimes ways for an external actor to make their connection seem local; a number of Emby systems with admins not using passwords locally were compromised.  The specific flaw that enabled this to happen has been addressed, of course, but as a worthwhile followup the former laxness of password handling has been greatly tightened up and alternative ways of retaining ease of use have been provided - I change users fairly often, but haven't needed to type a password into Emby for several months in spite of the improved security, and without having any blank passwords.

Paul

Edited December 23, 2024 by pwhodges

[Gilgamesh_48 1240]

23 minutes ago, pwhodges said:

Because a recent serious incident showed that there were sometimes ways for an external actor to make their connection seem local; a number of Emby systems with admins not using passwords locally were compromised.  The specific flaw that enabled this to happen has been addressed, of course, but as a worthwhile followup the former laxness of password handling has been greatly tightened up and alternative ways of retaining ease of use have been provided - I change users fairly often, but haven't needed to type a password into Emby for several months in spite of the improved security, and without having any blank passwords.

Paul

But, if i remember correctly, those were only on systems that allowed remote access or were tied to "Emby connect." I do not use Emby connect and I do not ever have remote access enabled. I would like to have no password at all but I am required to have one. I have everything configured so Emby almost never asks anymore for a password. But i do not see any reason for me to need a password for Emby or any other program I use. 

I do not want to use passwords for any system I use locally and there is no way, unless I do something extremely stupid, I am in absolutely no danger from the internet bad actors except if i click on something and allow them in. My network is locked down pretty tightly and I do not see any danger to me. I do not understand why I am being punished by having to have local passwords when the only person that can access my system and Emby server is me. My dog does not have the mental and physical tools to use my computer and the various insects that sometimes get in are not weighty enough to move the mouse or press keys.

I just use everything locally but i am forced to have a password by Emby and Windows and a few other programs.

I am a bit paranoid but not near paranoid enough to need to protect my systems from myself and my dog by using passwords.

Anything like a password requirement is just excessively anal and not needed by those of us that never allow anybody else to even access my computers. 

But, as I have said before it is Emby's program and just use it so they can be as foolishly anal as they want and i just have to deal with it. If I choose to use Emby I must put up with all the useless protections they, in all their anal fixations, put in place. But i do not have to like it. 

I know i expose myself a bit by using the internet at all but I also protect about that and the Emby password requirement is there no matter if i want it or not.

[/rant] 

But i still love Emby. I just hate being forced to use passwords locally. 
BTW: All my local passwords are set to "a" but I use MUCH stronger passwords for my router and just about any site I use on the internet. 

[Q-Droid 989]

2 hours ago, Gilgamesh_48 said:

But i still love Emby. I just hate being forced to use passwords locally. 
BTW: All my local passwords are set to "a" but I use MUCH stronger passwords for my router and just about any site I use on the internet. 

You're not forced to use passwords locally.

[DylanParham 14]

Coincidentally I was just looking around for info on passwords... is there a way to tell whether or not a user has set a password (or has no password?)

 

Also, fleeting thought, a "force password change on next login" option would be really great for those of us that have unruly friends!

[Q-Droid 989]

6 minutes ago, DylanParham said:

Coincidentally I was just looking around for info on passwords... is there a way to tell whether or not a user has set a password (or has no password?)

Change the Users view to table format and select the columns you want to display.