Passkey Support

[AJV_20 63]

Passkey support will not just make loging in more secure but it will make signing in on TVs a lot easier.

[Luke 42522]

Hi, yes we are working on newer and easier login methods, so stay tuned.

[Cphusion 4]

18 hours ago, Luke said:

Hi, yes we are working on newer and easier login methods, so stay tuned.

Does that include a password reset process for local users on your server, so that those users can reset their own passwords?

Edited May 20, 2024 by Cphusion

[AJV_20 63]

On 5/19/2024 at 3:41 PM, Luke said:

Hi, yes we are working on newer and easier login methods, so stay tuned.

Any updates on this?

[Luke 42522]

On 12/27/2025 at 8:37 PM, AJV_20 said:

Any updates on this?

On passkey specifically, no, but on easier login methods, stay tuned ...

[fricelander 19]

On 5/20/2024 at 2:03 PM, Cphusion said:

Does that include a password reset process for local users on your server, so that those users can reset their own passwords?

another topic has been open for this extremely basic feature since more than 3 years but no one cares apparently 

 

[darkassassin07 687]

5 hours ago, fricelander said:

another topic has been open for this extremely basic feature since more than 3 years but no one cares apparently 

 

I care. But @Lukecan't think of a magic solution that fixes this for everyone without involving any other service (such as email), so he refuses to implement any solution for anyone.

Edited May 13 by darkassassin07

[fricelander 19]

3 minutes ago, darkassassin07 said:

@Lukecan't think of a magic solution that fixes this for everyone without involving any other service (such as email), so he refuses to implement any solution for anyone.

which is crazy because almost every software that has an account system usually offers a reset password via email, I'd say 95%, it's the most basic feature ever...

[visproduction 361]

Frice,

Password reset via email needs an email service running on the server (Microsoft Exchange, Docker Mail server, Mail-in-a-box or others). You may be able pay for a 3rd party subscription solution that offers password reset feature.  Does anyone know what online service offers this?   

Emby runs on each owner's server. It is very rare that anyone with an Emby server would have an email service also running locally.  So, how do you even offer a password reset via email?  You are thinking, perhaps of a service that runs with an online host server, who may have an optional email server to turn on.  If you run a website, maybe your host could offer some server, but that wouldn't automatically update an Emby server, running on your local workstation.  At the most, you might get an email to tell you to go in and update a password on Emby.  That's just an automatic referral.  It's less effort for the user to email directly to you, requesting a password update.

An auto update password email feature is nice, when everything is running on a host sever.  But Emby doesn't work like that.  Why do you think it would work?  An email server on a workstation is a major setup, not just a plugin.  In order for a password reset to work, the email server needs to be running all the time. 

[darkassassin07 687]

YOU DO NOT NEED TO HOST YOUR OWN EMAIL SERVCE.

 

Outlook, Gmail, Proton, Hell [redacted] Icloud all allow you to send email via smtp. I have half a dozen services on my server that all use my gmail account to send email notifications to various users INCLUDING PASSWORD RESET for the ones that can be bothered to implement the [redacted] feature.

 

Emby is also one of the services that's is already setup to send email notifications via my gmail account. But we still can't use it to send password reset emails. Because @Luke refuses to implement it.

Edited May 14 by darkassassin07

[visproduction 361]

DA, 

Good info, thanks.  I didn't know that.  Is there a way to accept emails when the server is not running?  What happens with a password reset, or QR connect request comes in and the Emby server is off, for some reason.  Is there some way to start responding to such emails, when the server is turned back on?  Or does the user just get an unable to connect or bounced email message?

[darkassassin07 687]

3 hours ago, visproduction said:

DA, 

Good info, thanks.  I didn't know that.  Is there a way to accept emails when the server is not running?  What happens with a password reset, or QR connect request comes in and the Emby server is off, for some reason.  Is there some way to start responding to such emails, when the server is turned back on?  Or does the user just get an unable to connect or bounced email message?

?

It's a send only system, there's no need to receive email.

 

Just like every other email based password reset system:

User connects to Emby server at the login page. Clicks 'forgot password', types in their email. If that email is linked to a user on that server, the server sends an email to that address with a temporary time-limited link (something like my.domain/reset/<unique id>), where the user can enter a new password for their account.

This is exactly what Ombi (a self-hosted media request interface) does, and it works great.

If there's any sort of problem along the way, perhaps the email service is misconfigured or unreachable (or the user account is disabled); just present the current 'please contact your server administrator' to the user that's trying to get a reset link.

 

If the server's not running, they can't reach the forgot password page to make the request, but they can't login either with no running server so that's irrelevant...

 

----

As far as QR based connections go (this is an entirely separate topic unrelated to email.): if the server isn't running, users can't connect to it, so they won't have a connected device they're already signed in with to scan that QR... = no further request to login.

[ebr 16430]

5 hours ago, darkassassin07 said:

If that email is linked to a user on that server,

But here's the thing.  There is no requirement for an Emby user to be linked to an email address.  The email link that does exist is for Connect and there is an email password reset for that already.

So, not only would this require a proper authorized email smtp setup, but also another email link to the local Emby user.  This also presents a new attack vector.

[darkassassin07 687]

17 hours ago, darkassassin07 said:

If there's any sort of problem along the way, perhaps the email service is misconfigured or unreachable (or the user account is disabled); just present the current 'please contact your server administrator' to the user that's trying to get a reset link.

Not having an email address assigned to the user would fall under 'any sort of problem'.

Make the current email field optionally link to connect or just be an address to send notifications/reset emails to.

 

Once again 'we can't make it perfect for everyone so we're going to provide no solutions for anyone'

 

 

Can you tell I'm absolutely sick of your bullshit excuses @ebr?

 

Almost every web service on the god damn planet offers email based password reset. Figure it out already.