webfinger.io is a Cloud Security Alliance Research project

webfinger.io is a public webfinger and verification service that lets you link your email address and social media accounts (currently Twitter, Reddit and GitHub) to your Mastodon ID, and to display that information in your Mastodon account in a way that is trustworthy.

Click below to unsubscribe and block all email from us, or delete your email record:

Using webfinger.io with a Mastodon client

To allow people to search for your email, simply redirect https://youremaildomain/.well-known/webfinger to https://webfinger.io/.well-known/webfinger and it'll work.

Security and anti-abuse

We've taken several steps to ensure this service is safe and respects users privacy. We only ask for the data you want us to serve (your email and Mastodon ID). We support email addresses deleting their record, and marking themselves as "do not contact". We also support administrative blocklists for both emails and Mastodon IDs, e.g. we can block "example.org" if you do not want your users to use this service, contact us at admin at webfinger.io. We also restrict the length and format of emails and Mastodon IDs to 128 characters. This service runs on Cloudflare Workers and KV store, and uses Mailchannels to send the emails. These providers log data such as IP addresses accessing their service and the email address of email sent.

webfinger.io is a Cloud Security Alliance Research project. It is available in GitHub at https://github.com/cloudsecurityalliance/webfinger.io.

The Cloud Security Alliance privacy policy is available here.