webfinger.io (a Cloud Security Alliance Research project)

webfinger.io is a Cloud Security Alliance Research project

webfinger.io is a public webfinger and verification service that lets you link your email address and social media accounts (currently Twitter, Reddit and GitHub) to your Mastodon ID, and to display that information in your Mastodon account in a way that is trustworthy.

Mastodon ID: Twitter ID (verify by listing your Mastodon ID in your "Profile"): GitHub ID (verify by listing your Mastodon ID in your "Bio"): Reddit ID (verify by listing your Mastodon ID in your "About"): Email address (verify by clicking a link we'll email you):

Click below to unsubscribe and block all email from us, or delete your email record:

Unsubscribe and block all future email
Link to my Mastodon ID

Using webfinger.io with a Mastodon client

Mastodon profile metadata verification: simply add a link
- Twitter: https://webfinger.io/@yourname or https://webfinger.io/twitter/yourname
- GitHub: https://webfinger.io/github/yourname
- Reddit: https://webfinger.io/u/yourname or https://webfinger.io/reddit/yourname
- Email: https://webfinger.io/yourname@emaildomain or https://webfinger.io/email/yourname@emaildomain
- LinkedIN: Coming soon
Search field: @yourname_emaildomain@webfinger.io
If you redirect your webfinger to us: people can search for you with your email address: @yourname@emaildomain

To allow people to search for your email, simply redirect https://youremaildomain/.well-known/webfinger to https://webfinger.io/.well-known/webfinger and it'll work.

Security and anti-abuse

We've taken several steps to ensure this service is safe and respects users privacy. We only ask for the data you want us to serve (your email and Mastodon ID). We support email addresses deleting their record, and marking themselves as "do not contact". We also support administrative blocklists for both emails and Mastodon IDs, e.g. we can block "example.org" if you do not want your users to use this service, contact us at admin at webfinger.io. We also restrict the length and format of emails and Mastodon IDs to 128 characters. This service runs on Cloudflare Workers and KV store, and uses Mailchannels to send the emails. These providers log data such as IP addresses accessing their service and the email address of email sent.

webfinger.io is a Cloud Security Alliance Research project. It is available in GitHub at https://github.com/cloudsecurityalliance/webfinger.io.

The Cloud Security Alliance privacy policy is available here.