Plex works on your couch, but not on your phone at work, at a friend's place, or on your parents' TV. Remote access failures come down to a handful of causes, and since 2025 one of them is not a network problem at all. Work through these fixes in order — most people are done by fix 4.
1. Rule out the Remote Watch Pass first
If you see “Remote playback requires a Remote Watch Pass”, nothing is broken. Since April 2025, Plex requires either the server owner to have Plex Pass or the viewer to have a Remote Watch Pass to stream a personal server from outside its home network. It began in Plex's own apps, and Plex has said it extends during 2026 to third-party apps that use its API. If the server owner has Plex Pass, the people they share with are covered. Check Plex's site for the current plans and prices.
If there is no such message and the app simply cannot reach the server, keep going.
2. Turn Remote Access on and read its status
In Plex Web, signed in as the server owner, open Settings › Server › Remote Access. If it is off, click Enable Remote Access: the server first tries to set your router up by itself (UPnP or NAT-PMP). It is working when the page says “Remote Access is enabled”; “Remote Access is not set up” means it is not. Show Advanced reveals the private and public IP and port Plex is using — note both for the next steps. Plex's own walkthrough is Setting Up Remote Access.
3. Set a manual port and forward it
Automatic setup (UPnP or NAT-PMP) is the most common thing to fail. In your router, create a port-forwarding rule: TCP, external port 32400 (or another you choose), to the Plex server's LAN IP, internal port 32400. Then, back in Plex, turn on Manually specify public port, enter the external port and click Retry.
Also turn UPnP off in the router once the manual rule exists. A UPnP mapping that expires is the classic cause of “Plex remote access keeps turning off”.
4. Give the server a fixed LAN address
If the server's local IP changes after a reboot, your port forward points at nothing. Create a DHCP reservation for the server in your router so it always gets the same address. This fixes most cases of remote access that “suddenly stopped working”.
5. Check for double NAT
If your internet provider's box is a router and you added your own router behind it, there are two layers of address translation and a forward on only one of them goes nowhere. Put the provider's box in bridge (or modem-only) mode, or forward 32400 on both: from the provider's box to your router, and from your router to Plex.
6. Check for CGNAT
Compare the WAN address your router shows with the public IP a site like ifconfig.me reports. If they differ, or the router's address starts with 100.64–100.127, your provider uses carrier-grade NAT and no port forward at home can work. Ask the provider for a public IPv4 address (some charge for it), or use one of the options without port forwarding below.
7. Exclude Plex from your VPN
A VPN running on the Plex server sends its traffic out through the VPN provider, so the public address Plex reports is not your home's. Use the VPN's split tunneling to exclude Plex Media Server, or run the VPN on a different device.
8. Allow Plex through the firewall
On Windows, allow Plex Media Server through Windows Defender Firewall for private and public networks. On a NAS or Linux server, allow inbound TCP 32400. Security software that “protects” the router can also block forwarded ports.
9. If it connects, then disconnects
A connection that drops after a few minutes is usually a router that reassigns the forward (fix 3 and 4), a public IP that changed, or a stream falling back to Plex's relay. Plex tracks a changed public IP for you — apps that take your server's addresses from Plex, as Media Center does, follow it on their own; an address typed into an app by hand goes stale. The relay is a fallback for when a direct connection fails, and Plex caps it at 2 Mbps for everyone, Plex Pass included. If video suddenly looks soft or keeps buffering, the direct connection is the thing to fix.
10. Make sure the server answers on HTTPS
Under Settings → Network, Secure connections should be on Preferred (the default) or Required — Plex no longer lets you turn them off. Many apps, especially on Apple devices, refuse a plain http:// address. Plex's secure addresses are the …plex.direct ones — Sign in with Plex in Media Center uses those automatically; for other apps, see how to find your Plex server URL.
Plex remote access without port forwarding
- Tailscale. Install it on the Plex server and on each device you watch on; Tailscale has apps for phones, computers, Apple TV and Android TV. To include someone outside your household, share just the Plex machine with their Tailscale account. Nothing is exposed to the internet. The trade-off is that every viewing device must run Tailscale.
- A reverse proxy on a small cloud server. Rent an inexpensive server, connect it to your home over WireGuard or Tailscale, and run a Plex reverse proxy there. Viewers reach a normal HTTPS address, and it works behind carrier-grade NAT.
- Avoid Cloudflare's proxy for video. Cloudflare's terms say that, unless you are an Enterprise customer, serving video through its CDN requires its paid services such as Stream. A proxied record is the wrong tool for Plex, and a Cloudflare Tunnel's public hostname is served through the same network.
In Media Center: “only works on your home network”
When Plex lists only a home-network address for a server — Remote Access off, or not getting through the router — the Media Center dashboard says so: the Plex source shows a notice that it only works on your home network, with the steps above. Once Plex says Remote Access is enabled, click Update addresses on that notice. Media Center asks Plex for every address your server has — on the home network, away from home and through the Plex relay — and keeps them current on its own, so a changed public IP needs nothing from you.
Once it works remotely, stop fixing it for everyone else
Getting remote access working is the hard part, and you only want to do it once. What usually comes next is helping your family: which app to install, which account to use, why the TV signed out. Media Center takes that off your plate.
- One setup. Click Sign in with Plex in the web dashboard and approve Media Center in Plex's own window. It finds your server and every address it has — at home, away from home and through the relay — and keeps them current, so a changed public IP needs nothing from you.
- Invitations, not passwords. Invite each household by email. They never need your Plex login or an account of their own.
- Sign-in that does not need you. On Apple TV and Android TV they scan a QR code with their phone. On iPhone, iPad and Android phones they sign in with their email.
- A profile for every person, kids profiles limited to what you approve, and an optional PIN.
- Jellyfin too. Many people fix Plex remote access and then set up Jellyfin as well. Media Center plays both in one app.
Video goes straight from your server to their screen over HTTPS, never through our servers. Plex's remote-playback rules are Plex's to set, and Plex has said they extend to third-party apps during 2026; a Plex Pass on the server owner's account covers the people you share with.
Set up Media Center for your household →The Free plan covers one household. Your household then installs the app.
