- cross-posted to:
- technology@lemmy.world
- cross-posted to:
- technology@lemmy.world
Plex has announced a massive price increase on the service’s Lifetime Plex Pass. On July 1, the lifetime subscription option will go from $249.99 to $749.99, an increase of 200%. The price hike will only apply to new subscribers, with no changes to monthly or annual subscription pricing.
A gentle reminder that Jellyfin exists to those thinking of alternatives.
For free (FOSS), and is way better than Plex
If you use it weekly it shouldn’t be free to you, certainly if you use it more frequently than that. Give money to the projects you depend on or they will disappear.
If you ignore the mostly horrendous UI, the security problems, the worse transcoding performance, the harder setup, the difficulty to access it remotely in a safe way,… Yeah sure, way better
The ui can be improved with community addons like moonfin but i agree it would be nice if they improved these out of the box
I couldn’t care less about the client design, since you have free choice there. If only the devs could be arsed to fix the issues that prevent me from just putting it behind a reverse proxy. If I could let people use it without exposing what is essentially an open door or forcing them to install a vpn, I would probably do that and slowly ween off Plex
deleted by creator
How are other projects going to handle using the Jellyfin app to log into Jellyfin? I don’t understand this. I see sentiments like this pretending Jellyfin is perfect like they don’t understand why people use Plex. I want to give my mom a URL that she can login to (or even better she gives me a code) after she downloads an app. What is the point of Jellyfin itself not handling this? It’s pointless. If I’m going to have a half baked server app, I might as well just use Kodi. They can be as stubborn as they want with this but people need these very basic things. I’d actually donate money to the project if they didn’t stubbornly REFUSE to do the main thing every Plex user wants. Other projects don’t need to do this. The Jellyfin developers need to. I first tried Jellyfin 6 years ago and this is STILL an issue and so I just stay on Plex because I’ve already got lifetime. I WANT to move to Jellyfin but I need to give normies access to my stuff and apparently that’s a wontfix for them?? I can host all this shit myself. I just need it all built in and for the apps to support it. I don’t think anyone is crazy to want this right?
You just give those people the name of the app your recommend (Jellyfin, Moonfin etc) and give them the URL and their username, then they create a password.
It’s not that difficult for most and if it is you help them once with it.
Lol, what an insane take. EVERY project that exposes an API is responsible for securing that. Its not rocket science, its server software 101.
Being free is not an excuse, especially when there are perfectly valid migration strategies, that don’t force them to abandon legacy clients.
Fans like you are the reason they get away with disregarding their basic responsibility
deleted by creator
Plex doesn't have hardware transcoding unless you pay almost 800 euro
I, and I assume everyone on this forum who has one, paid around 50-100€ for their lifetime pass. My hardware encoding works great and doesn’t need me to tell it about each and ever codec in existence and how to handle each one.
The new price is insane, but that was not the topic of this thread.
You are right,. that is fair. You can also pay 230 euro currently for it.
Isn’t plex’s price hike the main topic of this post?
Thats why I said thread and not post. This thread was comparing the two
As someone who picked up lifetime for like $45 or whatever it was (I think a 50% off sale?) what must have been 15 years ago…
I run jellyfin. Its just a better experience IMO.
I’m sorry but you can hate Plex and prefer jellyfin all you want, but you don’t have to lie. Nothing about jellyfin is a “better experience” than Plex.
What are some examples?
Don’t have to make an account, for starters. Gives you more detailed control of transcoding options, audio playback and whatnot.
The UI looks much worse, that much is true, but that’s not the end all be all of user experience.
Making an account is what allows the easy library sharing and remote streaming, something that Plex is significantly better than JellyFin at.
What transcoding options does it have that Plex doesn’t?
How is Plex significantly better than Jellyfin at those things? I can just create a user in 2 seconds on the admin dashboard for Jellyfin, set a temporary password and my friend can log in and change it to whatever they want.
I can even limit the streaming bitrate to the account if I need to avoid bandwidth issues.
Unless your user comes and logs in on your network, and only streams when they’re at your house, then you’ve just opened your server to the world.
Plex has bandwidth controls.
Tailscale and IP whitelisting are both viable options
They mentioned remote streaming which jellyfin doesn’t have a secure way to do by itself
No, but that’s easy to setup with Tailscale or a myriad of other solutions for free.
Does Plex? Have they ever been security audited or are we just taking the word of closed source software because they make it easier? Like Microsoft who just got caught adding backdoors into billions of computers and (pick one) closed source software company who has had major security breaches in the last decade.
It doesn’t cost $750.
Neither does Plex.
No you are right, it is 800 euro.
No, plex has many price points, including a free one.
…to stream your own media, hosted on your own server 😅
Jellyfin is easy to prove you are the owner off. While Plex has issues with that on systems like TrueNas when you don’t have full access to the server
Why are you having to prove you’re the owner of it exactly? What you’re describing is “user error”.
The whole claim token thing and no it was a know issue
Was? So it’s not now?
Again, if you installed Plex in a setup that it is known to have issues with, that’s a user error.
No lol, that’s just a pourly designed system.
Also Plex worked with IX systems to get Plex on Truenas
A gentle reminder that Jellyin more or less requires you to set up a reverse proxy and a secure VPN to use it outside of your home.
Why would you not do that anyway?
Because if I’m watching locally I dont need them, and if I’m watching remotely Plex already offers secure remote viewing 'out of the box`. They give every user an SSL certificate and a public accessible URL at app.plex.tv. They also handle secure user authentication. The new price is stupid, but Jellyfin is not a 1:1 replacement.
I think it’s important to recognize what Plex is saying with this announcement: their current business model isn’t sustainable. That means those who already have lifetime passes are vulnerable to Plex going away. If/when that happens, what will those users do then? That’s the conversation worth having now.
Jellyfin
there are a lot of us still on Plex that hadn’t reached the threshold of issues vs effort that would motivate us to migrate to something like jellyfin.
looks like we’ve arrived.
Why not run both? That’s what I do, then if Plex is an issue for someone I can make them a Jellyfin account
I have the lifetime pass, bought it for like $80 many moons ago.
looks like we’ve arrived.
Agreed, this is the tipping point. This is where we will see Plex start to abandon the lifetime pass in favor of “imaginary money line go up forever” subscriptions.
The Jellyfin vs Plex thing always struck me as odd. As in - why are we holding JF to a different standard to (say) Immich, Syncthing, Pi-hole or any one of a thousand different programs people self host?
Yes, JF ships multi-user accounts and client apps etc. I get it, “multi-use” is implied, so the comparison isn’t totally unfair. But there’s a difference between ‘this feature exists’ and ‘this is the primary purpose of the tool’.
The fact that you CAN share it externally doesn’t mean everyone running JF is doing that, or that it should be the benchmark the whole project is judged by.
To me, self host means “I host it, myself” not “I host it and then pretend to be Netflix for family and friends”. If that’s the use case, then of course, Plex away.
It’s cool that you CAN share JF externally, and it’s cool that Plex does that differently / better. We shouldn’t hold one to the standards of the other.
Just to say: MythTv is still a thing…
Ahh, memories. The start of my Linux journey nearly 20 years ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters CGNAT Carrier-Grade NAT HTTP Hypertext Transfer Protocol, the Web IP Internet Protocol NAT Network Address Translation Plex Brand of media server package SSL Secure Sockets Layer, for transparent encryption VPN Virtual Private Network VPS Virtual Private Server (opposed to shared hosting) nginx Popular HTTP server
7 acronyms in this thread; the most compressed thread commented on today has 15 acronyms.
[Thread #302 for this comm, first seen 20th May 2026, 01:50] [FAQ] [Full list] [Contact] [Source code]
Enshittification in action.
enshitification isnt price hike all their “fonctionality” nobody were asking for are
Jellyfin has lots and lots of tutorials, fyi. it’s not as intimidating as it seems once you get going with it.
And Plex doesn’t require any. It’s okay to accept that one product can be more polished than the other, and Plex has a lot of stuff that “just works”
Jellyfin also „just works“. Getting it going is just as simple as plex.
Have you tried Jellyfin?
This is the most hilarious lie I think I’ve seen in a while from open source on here. To be clear I use it as my daily driver, I switched off Plex a long time ago when I saw the writing on the wall.
But I still have issues with media matching to this day, issues where subtitles on certain devices just refuse to display no matter what you do. And the server still loves to randomly take up absolutely massive amounts of memory for seemingly no reason whatsoever I ended up making a strip to just forcibly kill it and restart it every 12 hours to prevent it from eating the entire system’s memory.
And no my file naming is not the media issue everything I do is properly named exactly as jelly fin documentation says it wants by sonarr. Not to mention you are expected to maintain a VPN system just for accessing your media away from home as the web interface is so hilariously unsecured as to be a constant source of major system vulnerability.
It’s usable, but it’s not as just works as Plex I have thousands of TV shows, anime, and movies as in thousands of each of those categories and Plex never once failed to match to the correct media, never had a problem just playing subtitles on any client, and I think only ever had one major issue with the web interface in terms of security? There’s been lots of minor ones that would give people essentially just access to Plex but not the underlying system
Plex doesn’t “just work” I have lost access to my install more time than I can coun’t due to their weird prove you are the owner system.
And Plex doesn’t require any. It’s okay to accept that one product can be more polished than the other, and Plex has a lot of stuff that “just works”
And it is ok to accept that Plex is getting worse and worse. Only reason why ppl use it these days is because they still have an old lifetime pass. As soon as they take it away or introduce a new tier of features or even removing features of it, they will swarming away from Plex.
And they will!
OC never said anything to do with your comment, you seem to be really offended by recommending an alternative to a tool that you use.
I never thought those leopards would eat MY face.
I wish jellyfin and the apps could ship with something like wireguard setup by default so people that use the jellyfin apps could instantly watch media outside their house without learning what wireguard/tailscale is
The fact that’s needed at all is the problem. Developers need to stop making monolithic structures that have access to everything ever and putting it on the user to maintain to maintain a VPN network for security.
There’s no reason I should not be able to just use an nginx reverse proxy for remote access to my jellyfin and have that be safe. It should at worst give people a copy of my media if there’s a security issue.
Personally I went out of my way to make this be the case, i have my instance locked into an unprivileged lxc whitelist only on syscalls which took a while to figure out the minimum needed for function but I got there. The host System is using the hardened kernel from Upstream and a series of sysctl lockdowns for example P Trace is not allowed even if you are the root user.
So I do indeed just nginx reverse proxy my instant because the worst case scenario even if they got complete shell access to the system they would be locked into an unprivileged container that had no access to any files other than my media files but the fact that I have to go to this level is already ridiculous
It should at worst give people a copy of my media if there’s a security issue.
that’s not the worst possibility. the worst possibility is an RCE into your server.
Personally I went out of my way to make this be the case, i have my instance locked into an unprivileged lxc whitelist only on syscalls which took a while to figure out the minimum needed for function but
that’s a pretty exotic setup. Exciting, but for most people learning to manage a VPN is easier
I am aware that an rce is the worst possibility I’m saying it shouldn’t be. The web portion is already its own isolated binary that you have to install but it’s designed with seemingly very little attention to security.
To the point that jellyfin has already had several major RCE and despite having full support for running over the web with http developers are basically just like you should not be using this without a VPN which is overall a pretty pathetic stance for a media server
it is pathetic indeed, but I think much fewer projects admit it than how many should
Recently nginx had an RCE, so if your web server interface has an RCE, it doesn’t matter if jellyfin code is top-notch, if you happen to use a proxy with RCE in front of it. Wireguard has never had an RCE and I’m relatively certain it never will, because I believe you must be in possession of some keys to go very deep in the wireguard code, which in itself is not very large piece of code.
But yes, in principle I agree that we should code securely instead of depending on VPN to solve it for us, unfortunately it’s not the reality today. Memory safe programming languages help, but don’t completely protect against logic errors. VPN is general is pretty good for defence-in-depth.
The nginx rce relied an a series of requirements that affect almost nobody. You had to be using a very specific module and processing a specific type of data reverse proxy was not affected.
But regardless I get your point that anything can have an RCE. However as you say at the end in principle that does not mean you should just give up and expect external projects to handle your security. VPN is a great way to access your services and it is good defense and depth, but for the sake of being a successful project to the masses? It’s basically a dead end Road
but for the sake of being a successful project to the masses? It’s basically a dead end Road
I think that’s why we should still have requirements against software we run (although as some funnily say, we are free to get a refund), but not pretend that the software is more secure than it is known to be. sad that we need a VPN for security, but it is what it is.
I don’t know how could we get our devs to be more attentive to security.
It should at worst give people a copy of my media if there’s a security issue.
that’s not the worst possibility. the worst possibility is an RCE into your server.
Personally I went out of my way to make this be the case, i have my instance locked into an unprivileged lxc whitelist only on syscalls which took a while to figure out the minimum needed for function but
that’s a pretty exotic setup. Exciting, but for most people learning to manage a VPN is easier
Never used Plex. Jellyfin has always met my needs, so I never bothered to try it.
Plex has been around quite a while longer than JF. Before JF, the only way to really have a “self-hosted Netflix” was with Plex, so there are a lot of us who built our long-standing media setups around that.
That said, I have a JF instance running and matched almost 1:1 with Plex specifically for this situation, so I’m going to start pivoting everyone to that as I wind Plex down.
Meh, I’ve used dlna with PS2 over 20 years ago. Not exactly the same, but for my needs essentially the same.
That’s an interesting method. I actually have a PS2 myself, running PSBBN. Maybe I’ll try that out.
I’ve gotten my money’s worth out of the $74.99 I paid for Plex Pass Lifetime several years ago. If they ever get rid of my Plex Pass and try to say “Lifetime didn’t actually mean Lifetime”, I’ll be gone.
We’ve seen other companies pull this move by saying “lifetime” only applies to X version.
Sure, but that doesn’t mean Plex will do it.
While that’s true, it is in the standard VC playbook to make that move. Since they seem to be using that playbook, there will come a point in the monetization program where the lifetime membership becomes a blocker, which is overcome by diluting the lifetime account to increase the appeal of the subscription by comparison.
So, while nobody in here is named Nostradamus, it does not take a clairvoyance to see the future in this case. Countless other companies have followed this same program, with only minor variation, to extract revenue from the product like a strip mine. If I see 100 companies perform a 15-or-so step monetization spiral, it is not a leap of logic to think Plex is going to do steps 9-15 since we’ve just seen them do steps 1-8.
The lifetime membership will never be a blocked thanks to this price update.
I’ve never had a lifetime license be taken away other than the company going out of business.
No, they can’t just breach the contract you have with them, of course, but the VC playbook has a play for that.
What they will do is create a different service tier that does not include the same features as the standard or lifetime plans have. That tier will initially have some “value adds” that are of little interest to most users. Then, slowly, features will disappear from the other tiers, and a greater percentage of users will be drawn to that one because the “standard” one is increasingly lacking.
Eventually, Plex Standard will be quite anemic, with at least a couple must-have features available to only GigaPlex members. Because you’re a “valued lifetime customer”, you’ll get the option to convert your lifetime membership into 90-365 days of free GigaPlex.
So, Plex wins their game. The lifetime members practically all either switch to monthly premium service or leave, both of which are outcomes that are to their benefit. Nobody took away your lifetime membership, they just transformed it to garbage.
Its not every company, but it is every company owned by venture capital.
You can live in fear of your made up scenarios like this, but I’m just going to continue using Plex with my lifetime license.
I’m not afraid of the inevitable, man. We are having a conversation and I’m sharing my thoughts.
Just out of interest as someone who has recently set up a Jellyfin server - what’s the main “value add” of using Plex compared to Jellyfin?
It seems to do everything I want, so I’m not sure why people would pay for Plex over the FOSS version.
Are you accessing your media from outside of your network?
I have heard that you need to set up a VPN for Jellyfin to securely use your media library remotely. Plex handles all of that for me so that I don’t need to deal with it.
I have a jellyfin server set up that you access like this:
https://my.servername/jellyfin
Username and password is all you need aside from that. Apps for most platforms or access in a web browser.
You should not expose a Jellyfin server to the open internet.
You should not expose a Jellyfin server to the open internet.You should not expose a Jellyfin server to the open internet if you don’t know what you’re doing.
FTFY
Please tell me, oh wise one, how do you fix the glaring security issues that are the reason even Jellyfin Stans admit that you should use a VPN?
Port forward, filter ips, take reasonable precautions on the trust of networks.
It’s not rocket science, as you mentioned in your other vitriol.
I think you don’t understand the nature of the exploit.
Anybody who can see the Jellyfin login page can use the Jellyfin server’s permissions to play media directly from your media library.
Port forwarding doesn’t matter. Jellyfin hosts on port 80/443 which you have to allow for the service to function. Most clients are on dynamic IPs or CGNATs so unless you’re going to manually change the IP filter for every single user every few days, IP filters are not a reasonable solution.
‘Take reasonable precautions on the trust of networks’ doesn’t even make sense. Your Jellyfin server is either available to the Internet or not available to the Internet. If you choose not to trust the Internet (the actual mitigation) then you obtain access to your Jellyfin server through a VPN.
Ease of use, and actual secure and usable external access.
Friends/family make an account and tell you their account name or email address, you invite them to your library and that’s it, they can watch/listen to your media on pretty much any device they have. No vpn needed.
Jellyfin is not meant to be exposed to the internet for remote viewing. It also doesn’t have a client on most devices people use to watch tv/movies.
I’ve got a bunch of friends accessing my jellyfin server. It has clients for most devices now.
I didn’t say it’s not possible, I said it’s not secure and/or easy.
It’s definitely easy, and the secure part is debatable.
Doing it insecurely is easy.
The secure part isn’t debatable. Even the devs will tell you it’s not secure.
Secure isn’t a binary. Depending on your threat model, using Plex is impossible to use securely!
I was Osama bin Laden and I can confirm that this is true.
HDR, hardware transcoding, remote access.
My Jellyfin has all of these things.
Mine too. And I appreciates that.
Probably going to get hate for this. But I have easily gotten 750 dollars worth of value out of my lifetime subscription. I’m sure they are doing this to drive down lifetime subscriptions and increase month to month. But I legit think 750 over 20 years it’s still a legit price.
About $3/mo. But for a lifetime deal you’re also buying the risk. If they go bankrupt, stop honoring the lifetime deal, or any variation thereof tomorrow, you’re out $750 - lifetime deals, where they exist are often heavily discounted compared to normal rates due to this. 20 years is though quite a long time. Plex is only 16 years old.
In a perfect world a company would limit the amount of lifetime deals available and only have them in the beginning to get some quick cash allowing them to scale. I don’t think Plex is running a very good business, which also devalues the lifetime deal.














