Easy PIN code local login

[pavichokche]

I used to use the easy pin login option for local user logins but I'm not seeing it in the settings since 10.9. Was it removed? The 'Managing Users' help page still mentions it...

[TheDreadPirate]

It was removed due to security concerns. Quick Connect is still an option.

[Efficient_Good_5784]

It was removed for v10.9 due to security issues.

The docs is outdated.

[pavichokche]

Thank you for confirming, guys, I did some googling but didn't see any mention of it being removed. Is there some way to update those docs, even just to add a comment in parentheses (removed in 10.9+) ?

[TheDreadPirate]

Ask and thou shalt receive.

https://github.com/jellyfin/jellyfin.org/pull/1012

[pavichokche]

Thank you. I should learn how to do this myself

[Reshuffle4084]

This has been driving me crazy for the last week as the kids keep locking their account out. I spent too long checking my config and trying to workout how I broke it...

I can see it was removed in https://github.com/jellyfin/jellyfin/pull/9820 because it wasn't secure, fine won't disagree with losing functionality for security, such is the way nowadays.

I've tried the quick connect and works great for adults with phones and the JF app installed. However what is the workflow for kids who access via a tablet and don't own a phone?

The 30 character password the password manager generated isn't working for the little one! Should I change the password to something less complex/secure? Like a 4 digit pin number. 🤦

[Efficient_Good_5784]

The 30 character password the password manager generated isn't working for the little one! Should I change the password to something less complex/secure? Like a 4 digit pin number. 🤦

If the devices your kids' use only ever connect on the local network, that's not much of a problem. You can disable remote access for them so that the simple password doesn't become a liability. By the time they grow older and have a better understanding on how to keep/use more complex passwords, you can change it back for them then.

Also in my opinion, 30 character-long passwords seem overkill on any non-admin accounts. You can disable accounts from having modify/delete privileges, so if a bad actor compromises them, the worst they can do is mess with the watched status, create private playlists, or just leech off of your server until you catch on (assuming there's no security bug that can be exploited in general).