How to Set Up Plex Remote Access — Stream From Anywhere
One of Plex's best features is the ability to stream your media library from anywhere in the world. Whether you are at work, traveling, or at a friend's house, remote access lets you watch your movies, browse your photos, and listen to your music as if you were on your home network. But it requires some network configuration to work reliably. This guide walks through every step.
How Remote Access Works
When you access Plex locally, your client connects directly to your server's internal IP address (like 192.168.1.100) on port 32400. Remote access works by making that same port reachable from the internet through your router's public IP address.
Plex's servers act as a broker: your client contacts Plex's authentication servers, which tell it your server's public IP and port. The client then connects directly to your server. Plex itself does not relay your media traffic — the stream goes directly from your server to the remote client.
Step 1 — Enable Remote Access in Plex
Open the Plex web interface and go to Settings (the wrench icon), then Remote Access. Click "Enable Remote Access." Plex will attempt to configure your router automatically using UPnP (Universal Plug and Play).
If UPnP succeeds, you will see a green status indicating that remote access is fully accessible. You can test it by accessing your server from a device on a different network (like your phone on cellular data).
If UPnP fails, you will see an orange or red warning. This means you need to configure port forwarding manually.
Step 2 — Manual Port Forwarding
Port forwarding tells your router to send incoming traffic on a specific port to a specific device on your local network. For Plex, you need to forward TCP port 32400 to the internal IP address of your Plex server.
Find Your Server's Local IP
On your Plex server machine:
- Windows: Open Command Prompt, type
ipconfig, and look for the IPv4 address under your active network adapter. - macOS: Open System Settings, then Network, and note the IP address for your connection.
- Linux: Run
ip addr showorhostname -I.
Access Your Router's Admin Panel
Open a browser and navigate to your router's gateway address, typically 192.168.1.1 or 192.168.0.1. Log in with your router's admin credentials (check the sticker on the router if you have not changed them).
Create the Port Forwarding Rule
The exact location varies by router brand, but look for a section called Port Forwarding, Virtual Servers, or NAT/Gaming. Create a new rule with these settings:
- Service Name: Plex (or any label you choose)
- External Port: 32400
- Internal Port: 32400
- Protocol: TCP
- Internal IP: Your Plex server's local IP address
Save the rule and restart your router if prompted. Go back to Plex Settings and click "Retry" under Remote Access. It should now show a green status.
Use a Custom External Port
If your ISP blocks port 32400 or you prefer not to use the default, you can specify a custom external port in Plex's Remote Access settings. Check the "Manually specify public port" box and enter a port number (e.g., 42400). Then update your router's port forwarding rule to forward the custom external port to internal port 32400.
Step 3 — Assign a Static IP to Your Server
Port forwarding rules point to a specific local IP address. If your server's IP changes (which can happen if it is assigned by DHCP), the forwarding rule breaks. There are two ways to prevent this:
- DHCP reservation: In your router's DHCP settings, bind your server's MAC address to a specific IP. The router will always assign the same IP to that device.
- Static IP on the server: Configure the network interface on your server to use a fixed IP address, gateway, and DNS servers instead of DHCP.
DHCP reservation is generally easier and works well for most setups.
Step 4 — Set Up Dynamic DNS (Optional)
Most residential internet connections have a dynamic public IP address that changes periodically. If your IP changes, remote clients will not be able to find your server until Plex's servers update the connection information (which usually happens within minutes).
For more reliable access, especially if you share your server with others, set up a dynamic DNS (DDNS) service. DDNS maps a hostname (like myplexserver.duckdns.org) to your current public IP and updates it automatically when your IP changes.
Popular free DDNS services include:
- DuckDNS — Free, open source, simple API.
- No-IP — Free tier with hostname confirmation every 30 days.
- Dynu — Free, supports multiple hostnames.
Many routers have built-in DDNS clients. Check your router's settings for a DDNS section and enter your service credentials. If your router does not support DDNS, you can run a lightweight update client on your server.
Step 5 — Configure Your Firewall
If your Plex server runs a software firewall, make sure port 32400 (TCP) is allowed for incoming connections.
Windows Firewall: The Plex installer typically creates firewall rules automatically. If not, open Windows Defender Firewall, click "Allow an app through firewall," and add Plex Media Server. Alternatively, create an inbound rule for TCP port 32400.
Linux (UFW):
sudo ufw allow 32400/tcp
Linux (firewalld):
sudo firewall-cmd --permanent --add-port=32400/tcp
sudo firewall-cmd --reload
macOS: The built-in macOS firewall blocks incoming connections by default. Go to System Settings, then Network, then Firewall, and add Plex Media Server to the allowed applications list.
Step 6 — Test Remote Access
The simplest test is to disconnect from your home Wi-Fi and use your phone's cellular data to open the Plex app. If your server appears and you can play media, remote access is working.
You can also use the Plex web interface at app.plex.tv from any network. If it connects to your server, remote access is confirmed.
For a more technical test, check if port 32400 is reachable from the outside. Use an online port checker tool (search for "open port check tool"), enter your public IP and port 32400, and verify it reports the port as open.
Troubleshooting Common Issues
Double NAT
If you have two routers in your network (common with ISP-provided gateways plus your own router), you have a double NAT situation. Port forwarding on only one router is not enough — traffic must be forwarded through both. Options include putting the ISP gateway into bridge mode (so it passes traffic directly to your router) or setting up port forwarding on both devices.
CGNAT (Carrier-Grade NAT)
Some ISPs, especially mobile and fiber providers, use CGNAT, where multiple customers share a single public IP. In this case, port forwarding is impossible because you do not have a dedicated public IP. Solutions include requesting a public IP from your ISP (some offer this for a small fee), using a VPN with port forwarding (like Tailscale or WireGuard), or using Plex's relay feature (limited to low quality without Plex Pass).
Remote Access Drops Intermittently
If remote access works but drops periodically, common causes include a changing dynamic IP (set up DDNS), ISP throttling, router instability (check for firmware updates), or the Plex server sleeping or hibernating (disable sleep on the server machine).
VPN Alternatives
If port forwarding is not an option due to CGNAT or complex network setups, a VPN tunnel can provide remote access without opening any ports. Tailscale is the simplest option — install it on your Plex server and your remote devices, and they can communicate as if they were on the same local network. WireGuard is another option for users who prefer self-hosting their VPN endpoint.
With either approach, you access Plex using the VPN-assigned IP address of your server, bypassing the need for public port forwarding entirely.
Phlix — The Photo Browser for Plex
If you use Plex for photos, Phlix gives you a chronological timeline, year scrubber, 4K AirPlay slideshows, and offline downloads. Free to browse, Pro from $6.99/yr.
Download Phlix FreeiOS 17+ · Works with any Plex Media Server