webfinger.io is a Cloud Security Alliance Research project
⚠ No new registrations.
webfinger.io is not accepting new registrations while we evaluate how to renew and refresh this project. Existing registrations will continue to work, and WebFinger lookups are served as normal. Questions are welcome via GitHub issues.
webfinger.io is a public WebFinger service that maps an email address to a Mastodon ID, so people can find you by your email address and see that the link is trustworthy.
Social-media verification (Twitter, Reddit and GitHub) has been retired; see the write-up for why.
To have an existing record removed, or to stop all email from us, contact admin@webfinger.io.
Using webfinger.io with a Mastodon client
- Mastodon profile metadata verification: simply add a link
- Twitter: https://webfinger.io/@yourname or https://webfinger.io/twitter/yourname
- GitHub: https://webfinger.io/github/yourname
- Reddit: https://webfinger.io/u/yourname or https://webfinger.io/reddit/yourname
- Email: https://webfinger.io/yourname@emaildomain or https://webfinger.io/email/yourname@emaildomain
- LinkedIN: Coming soon
- Search field: @yourname_emaildomain@webfinger.io
- If you redirect your webfinger to us: people can search for you with your email address: @yourname@emaildomain
To allow people to search for your email, simply redirect https://youremaildomain/.well-known/webfinger to https://webfinger.io/.well-known/webfinger and it'll work.
Security and anti-abuse
We've taken several steps to ensure this service is safe and respects users' privacy. We only ask for the data you want us to serve (your email and Mastodon ID), and we restrict the length and format of emails and Mastodon IDs to 128 characters. We support administrative blocklists for both emails and Mastodon IDs — for example we can block "example.org" if you do not want your users to use this service. Record deletion, "do not contact" requests and blocklist requests are all handled by emailing admin@webfinger.io. This service runs on Cloudflare Workers and KV store, which logs data such as IP addresses accessing the service. No email is currently sent, as registrations are closed.
webfinger.io is a Cloud Security Alliance Research project. It is available in GitHub at https://github.com/cloudsecurityalliance/webfinger.io.
The Cloud Security Alliance privacy policy is available here.