+- Jellyfin Forum (https://forum.jellyfin.org)
+-- Forum: Support (https://forum.jellyfin.org/f-support)
+--- Forum: General Questions (https://forum.jellyfin.org/f-general-questions)
+--- Thread: Do you use your admin account to watch media? (/t-do-you-use-your-admin-account-to-watch-media)
Do you use your admin account to watch media? - IroesStrongarm - 2024-10-13
Just setup a new Jellyfin server for the first time. It occurred to me that in most self-hosted instances I would leave the admin user for admin duties only, and then make separate users to actually use the service.
I haven't decided how necessary that is with Jellyfin so I wonder, are most people using the admin account to consume their media, or are you making yourself a separate account?
RE: Do you use your admin account to watch media? - TheDreadPirate - 2024-10-13
Generally speaking, this is good practice. Especially since you can disable "remote access" on an individual user level. This reduces the risk when publicly exposing your Jellyfin server.
But a lot of people don't abide by that recommendation, including myself (I don't want to have to redo my watch history!!).
RE: Do you use your admin account to watch media? - Host-in-the-Shell - 2024-10-13
I went through the slow and painful process of recreating my watch history in a new, unprivileged user after realizing this fact, so it's definitely worth it if you care to have an extra security measure.
Another plus is that you won't mistakenly hit something you shouldn't. I use vimium, an extension for the browser that allows me to navigate it using easy to press shortcuts if you know how to touch type. Well, problem is, sometimes I accidentally enter the wrong keys and well... with admin access enabled on my local user I could cause some trouble when I'm simply trying to navigate my movies. Just an outlier case but a good example of another benefit of having separate accounts.
RE: Do you use your admin account to watch media? - IroesStrongarm - 2024-10-13
(2024-10-13, 04:13 PM)TheDreadPirate Wrote: Generally speaking, this is good practice. Especially since you can disable "remote access" on an individual user level. This reduces the risk when publicly exposing your Jellyfin server.
But a lot of people don't abide by that recommendation, including myself (I don't want to have to redo my watch history!!).
I didn't even realize you can restrict remote access on a per user basis, that's pretty cool actually. Thanks for the response. Between you and host-in-the-shell it sounds like my instinct that I should use a separate account are on point.
Fortunately I have no watch history on Jellyfin since it's brand new, so no fault there.