Mastodon

Mastodon

Open-source, federated social network server

Overview

Mastodon is a free, open-source social network built on the ActivityPub protocol. It runs on federated servers (instances) that communities can operate, and users post text, images, links, and videos. These servers interconnect so people on one server can follow and interact with users on other servers, including those using other ActivityPub-enabled software. Revenue comes from community support and donations, and the goal is to provide a decentralized, user-owned social space where individuals control their data.

About Mastodon

Simplify's Rating
Why Mastodon is rated
C
Rated C on Competitive Edge
Rated C on Growth Potential
Rated C on Differentiation

Industries

Consumer Software

Social Impact

Company Size

1-10

Company Stage

N/A

Total Funding

N/A

Headquarters

Berlin, Germany

Founded

2016

Get referred to Mastodon

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • August 2026 funding added €614K from Sovereign Tech Agency and two backend hires.
  • July 2026 releases 4.6.3 through 4.6.5 fixed security bugs, including one high severity issue.
  • 4.7 beta and discovery-week redesigns target easier onboarding, better navigation, and creator adoption.

What critics are saying

  • April 20, 2026 DDoS crippled mastodon.social, proving flagship servers remain attack magnets.
  • August 11, 2026 CVE-2026-72915 exposed users' email addresses and last-used IPs in 4.6.4.
  • BlueSky's AT Protocol and Mastodon's onboarding friction threaten long-term user and employer relevance.

What makes Mastodon unique

  • Mastodon's ActivityPub federation lets independent servers interoperate across the fediverse by design.
  • August 2026 backend work added post-quantum keys, RFC 9421 signatures, and encrypted private-key storage.
  • Mastodon GmbH runs a non-profit, open-source stack with no venture capital dependence.

Help us improve and share your feedback! Did you find this helpful?

Company News

Mastodon
Aug 12th, 2026
Trunk & Tidbits, July 2026.

Trunk & Tidbits, July 2026. The Mastodon Team Building a better social web Welcome to the 28th edition of Trunks & Tidbits! This is the summer here in Europe, but while some of the team is enjoying some well-earned vacations, the work on Mastodon continues and Mastodon GmbH made a lot of progress this month. The team is continuing to grow, and Mastodon GmbH is very pleased to welcome Juan as the 4th member of its web backend team. As Mastodon GmbH has doubled the size of the backend team over the last few months, Mastodon GmbH is now all set up to start working on the various projects funded by the Sovereign Tech Agency that Mastodon GmbH announced a few months ago. Mastodon GmbH also published the results of its first Discovery Week. Find out what Mastodon GmbH learned and what will be its next focuses after this week of user surveys and workshops organised by Imani, its Head of Design. Releases. Mastodon GmbH recently released Mastodon 4.6.3, 4.6.4 and 4.6.5, fixing various bugs and security issues (including one high severity). Mastodon GmbH recommend all administrators running Mastodon 4.6 to update as soon as possible. Mastodon GmbH also backported those fixes for its currently supported versions. If you are not (yet) running Mastodon 4.6, Mastodon GmbH recommend you to update to either Mastodon 4.5.15 or 4.4.22. Finally, Mastodon GmbH just released the first beta version for Mastodon 4.7. It contains very few user-facing changes, but does contain significant reworking of the backend code to improve security and support new protocol features. This requires substantial database migrations that could take a couple of hours on very large servers, but will not cause downtime if the upgrade instructions are followed. Backend & web. In July 2026 Mastodon GmbH reviewed and merged 204 Pull Requests (120 with translation and dependency updates removed) from 14 contributors. * Migrated local private keys to a new, on-disk encrypted, database table - PR #39686 (by ClearlyClaire) * Added support for storing (not yet using) ML-DSA-44 (post-quantum algorithm) account keys - PR #39747 (by ClearlyClaire) * Added support for ML-DSA-44 in Object Integrity Proofs (for servers running a recent OpenSSL version) - PR #39522 (by ClearlyClaire) * Added support for FEP-8b32 - PR #39530 (by ClearlyClaire) * Added support for sending RFC 9421 HTTP Message signatures. Mastodon will still first send the legacy cavage-12 signatures for now, due to issues in other Fediverse software - PR #39756 (by ClearlyClaire) * Added support for Link objects in attachment as per FEP 8967 - PR #36104 (by Gargron) * Two big database changes have been merged to better differentiate between deleted and suspended accounts, and to ensure that an account's uri is unique - PR #23617 (by ClearlyClaire) - PR #39882 (by ClearlyClaire) * Started to refactor the <Status> component to make future changes easier * Added end-of-life date on the "Available Updates" page and notify admins when they run an out-of-support Mastodon version - PR #39732 (by ClearlyClaire) * Fixed an issue for the controller handling the web push notification Unsubscribe-URL endpoint. This is now working correctly, and Mastodon GmbH advise client developers that process web push notifications asynchronously to support it to reduce the number of failed requests. Its own push relays have been updated - PR #39918 (by ClearlyClaire) * Improved Emoji search after the recent refactor - PR #39815 (by chaosexanima) * Various front-end components have been updated or created in preparation of future interface changes. More new about this very soon! * Work is in progress to get Fediscoverer, its provider software for Fediscovery, ready to be deployed at scale. Multiple bugs have also been fixed and Mastodon GmbH is planning to start testing it on heavy traffic servers soon, before making it available for everyone. Android & iOS. On Android, version 2.13.2 has been released to fix a few bugs and brings the app in compliance with the Google Play target SDK requirement. For the iOS app, while a large rework of the app is in progress, Mastodon GmbH released 2026.05 fixing a couple of important bugs with profiles. Thanks. Thanks for reading! If you're excited about what Mastodon GmbH is working on, would you consider supporting Mastodon GmbH with a small, recurring donation? Thank you for supporting Mastodon. Mastodon GmbH develop and maintain the free and open source software that powers the social web. There is no capital behind this - Mastodon GmbH rely entirely on your support.

Ergora
Jul 15th, 2026
Mastodon + Ergora: federated-native marketing without the learning curve.

Mastodon + Ergora: federated-native marketing without the learning curve. Mastodon offers a powerful, community-driven alternative to traditional social media, but its federated nature can present a learning curve for marketing teams. Integrating Mastodon with Ergora bridges this gap, enabling seamless, native-first engagement with the fediverse while leveraging Ergora's AI-powered intelligence. The power of the fediverse, simplified. Mastodon is a decentralized social network, part of a larger "fediverse" (federated universe) of interconnected servers. This structure fosters independent communities and offers greater control over data and content. However, for marketers, managing multiple instances, understanding API nuances, and ensuring native engagement can be complex. Ergora simplifies this, allowing you to harness Mastodon's unique benefits without getting bogged down in the technicalities. Why Mastodon matters for B2B marketing. * Audience Engagement: Tap into niche communities and highly engaged audiences often overlooked on mainstream platforms. * Brand Control: Participate in a platform where community guidelines and content moderation are often more transparent and user-driven. * Ethical Marketing: Align with a platform that prioritizes user privacy and open standards, resonating with a growing segment of conscious consumers and professionals. * Early Adopter Advantage: Establish a presence and build authority on a platform poised for growth, positioning your brand as forward-thinking. How Ergora integrates with Mastodon. Ergora's integration with Mastodon is designed for simplicity and power. It handles the underlying complexities, allowing your marketing team to focus on strategy and content. 1. Instance choice and connection. Unlike centralized platforms, Mastodon requires you to choose an "instance" (a specific server) to join. This choice impacts the communities you'll primarily interact with. Ergora guides you through this, helping you: * Select the Right Instance: Based on your target audience and industry, Ergora can suggest relevant instances or allow you to connect to your preferred one. For example, a tech company might choose an instance focused on open-source software, while a creative agency might opt for one popular with designers. * Secure Connection: Once an instance is chosen, Ergora facilitates the secure connection using an access token. This token grants Ergora the necessary permissions (e.g., to post, upload media, read timelines) without requiring your direct login credentials. This ensures a high level of security and control. 2. Data flow: what moves between platforms. The integration establishes a two-way data flow, ensuring Ergora has the intelligence it needs to optimize your Mastodon presence and that your content reaches the fediverse effectively. * From Ergora to Mastodon: - Posts (Toots): Ergora sends your scheduled or immediate content directly to your chosen Mastodon instance. - Media Files: Images, videos, and GIFs prepared in Ergora are uploaded and attached to your toots. - Content Metadata: Tags, accessibility descriptions (alt text for images), and content warnings (CWs) are passed through for native Mastodon experience. * From Mastodon to Ergora: - Engagement Metrics: Ergora pulls data on boosts, favorites, and replies to your toots, providing insights into content performance. - Mentions and Replies: Ergora tracks mentions of your brand or specific keywords, allowing for timely responses. - Timeline Monitoring: For specific strategic purposes, Ergora can monitor relevant public timelines on your instance to identify trends or conversation opportunities. 3-5 specific automations for federated-native marketing. With the integration established, Ergora unlocks several powerful automations, transforming your Mastodon marketing from a manual chore into a strategic asset. 1. AI-Powered content scheduling & optimization. Problem: Understanding the best times to post on a decentralized network with diverse communities can be challenging. Crafting engaging content that adheres to Mastodon's unique culture (e.g., preference for informative posts, less overt self-promotion) requires effort. Solution: Ergora's AI analyzes engagement patterns specific to your Mastodon instance and audience. * Optimal Posting Times: Ergora identifies when your followers are most active and schedules your toots accordingly, maximizing visibility. * Content Tone & Style Suggestions: Based on successful posts within your target communities, Ergora can suggest adjustments to your content's tone, length, and use of hashtags to better resonate with Mastodon users. For example, it might recommend breaking down a longer update into a thread or adding a content warning for sensitive topics. * Automated Alt Text: Ergora can automatically generate descriptive alt text for your images, ensuring your content is accessible and meets Mastodon's inclusive standards. 2. Cross-Platform content syndication with fediverse nuance. Problem: Manually adapting content for each platform is time-consuming. Simply cross-posting from Twitter or LinkedIn often results in content that feels out of place on Mastodon. Solution: Ergora allows you to syndicate content across platforms while automatically applying Mastodon-specific formatting and best practices. * Automatic Hashtag Conversion: Ergora can convert common hashtags from other platforms into Mastodon-friendly equivalents or suggest relevant, niche hashtags based on fediverse trends. * Character Limit Adaptation: Long-form content from blogs or LinkedIn can be automatically summarized or broken into a Mastodon thread (a series of linked toots), preserving context while respecting the platform's format. * Content Warning (CW) Suggestion: For posts that might contain spoilers, sensitive news, or specific industry jargon, Ergora can suggest adding a CW to hide the content behind a click, allowing users to choose to view it. 3. Proactive Engagement & reputation management. Problem: Monitoring mentions and conversations across multiple Mastodon instances can be overwhelming, leading to missed opportunities or delayed responses. Solution: Ergora consolidates your Mastodon interactions, making it easy to engage proactively and manage your brand's reputation. * Unified Inbox for Mentions & Replies: All direct mentions of your handle and replies to your toots are pulled into a single Ergora inbox, regardless of the instance they originated from. * Keyword Monitoring: Set up alerts for specific keywords related to your brand, industry, or competitors. Ergora will notify you when these terms appear in public timelines on your connected instance, allowing you to join relevant conversations. * Sentiment Analysis (Lite): Ergora can provide a basic sentiment analysis of incoming replies, helping you prioritize responses to urgent or negative feedback. 4. Performance tracking & reporting. Problem: Understanding the ROI of your Mastodon efforts requires tracking metrics and analyzing engagement, which can be fragmented across different tools. Solution: Ergora centralizes your Mastodon analytics, providing clear, actionable insights alongside your other marketing channels. * Comprehensive Engagement Reports: Track boosts, favorites, replies, and reach for individual toots and overall campaigns. * Audience Growth & Demographics: Monitor your follower growth and, where possible, gain insights into the interests of your Mastodon audience based on their public activity. * Cross-Channel Comparison: Compare Mastodon performance against other social platforms within Ergora's unified dashboard, helping you allocate resources effectively and refine your fediverse strategy. Conclusion. Mastodon offers a unique landscape for B2B marketing, but its decentralized nature can be a barrier. Ergora's integration removes this complexity, providing the tools to engage authentically and effectively with the fediverse. By streamlining content creation, scheduling, engagement, and analytics, Ergora empowers your team to harness the power of Mastodon, turning its learning curve into a competitive advantage. Ready to put this into practice? Ergora connects your tools and handles the work automatically - no developers needed.

Owl Owl OÜ
Jul 3rd, 2026
Mastodon updated to 4.6.3.

Mastodon updated to 4.6.3. published 2026-07-03 Owl Owl OÜ has updated C.IM to Mastodon v4.6.3. C.IM was previously on Mastodon v4.6.1. This upgrade brings in the v4.6.2 security release and Mastodon's v4.6.3 patch set from July 3, 2026. Security and dependency work. Mastodon lists dependency updates under the v4.6.3 security section. v4.6.2 matters here too. Upstream shipped that tag solely to rebuild the official Mastodon Docker container images with a fixed FFmpeg for CVE-2026-8461, which the release notes classify as critical severity. For instances that do not use the official Mastodon container images, the application tag is only part of the check. FFmpeg still has to come from a fixed package or local image. Upstream lists the fixed versions as 8.1.2, 7.1.5, 6.1.6, or 5.1.10. User-facing changes. Mastodon v4.6.3 adds an "Update available" item to the navigation when a newer Mastodon version exists. Small thing, useful thing. Update visibility should not depend on someone remembering to check GitHub. Post images now render in emails as well. Since Mastodon 4.6 introduced public-post email subscriptions, emails with attached media should now look closer to the posts they came from. Fixes. Most of v4.6.3 is cleanup around the 4.6 web interface and background jobs: * Fixed an incorrect filter cache key that could sometimes apply the wrong filters * Fixed the "view collection" menu item appearing while already on a collection page * Fixed missing JSON serialization in the announcement reaction publishing worker * Fixed duplicate clear buttons in Chrome's main search input * Fixed visual issues around spoiler buttons, highlighted posts, profile follow buttons, and Windows forced-contrast mode * Fixed an encryption warning link and a tootctl media lookup failure on some setups * Fixed a web UI crash caused by some browser extensions injecting custom elements into the page None of these are large features. They are the sort of fixes that make the 4.6 series less noisy on a public instance. Upgrade notes. External dependency requirements have not changed since Mastodon 4.6.0: * Ruby 3.3 or newer * PostgreSQL 14 or newer * Elasticsearch 7.x, recommended for full-text search; OpenSearch should also work * LibreTranslate 1.3.3 or newer, optional for translations * Redis 7.0 or newer * Node.js 22 or newer * libvips 8.13 or newer * FFmpeg 5.1 or newer The v4.6.3 upstream notes mark this release as requiring asset recompilation for non-Docker installs. The published update steps are to install dependencies, precompile frontend assets, and restart all Mastodon processes. Docker-based deployments need to restart all Mastodon processes after pulling the new image. C.IM was on v4.6.1 before this update, so the v4.6.2 notes were part of the upgrade window. The extra check is FFmpeg, especially for anyone using upstream container images or managing FFmpeg as a system package. Official release links. Summary. C.IM is now running Mastodon v4.6.3. Users should mostly notice fewer rough edges in the 4.6 web UI and better email rendering when posts include images. On the admin side, the boring part is the important part: keep FFmpeg patched, rebuild frontend assets where required, and restart all Mastodon processes after the update. Source code for its instance is available at:

SquaredTech
Apr 21st, 2026
Mastodon DDoS attack disrupts flagship server and tests decentralized networks.

Mastodon DDoS attack disrupts flagship server and tests decentralized networks. April 21, 2026 Table of contents. Mastodon confirmed that its primary server, mastodon.social, faced a distributed denial of service attack that made large parts of the platform inaccessible. Users encountered error messages and full screen outage warnings during peak disruption periods. The company acknowledged the incident early and later confirmed that countermeasures restored partial access, though instability remained as the attack continued. This sequence shows that even decentralized systems depend on key infrastructure points that can become targets. How the Mastodon DDoS attack affected access. The Mastodon DDoS attack focused on overwhelming the main server with large volumes of traffic. This type of attack does not involve data theft but instead blocks legitimate users by flooding servers with requests. In this case, mastodon.social experienced intermittent outages, which affected a large portion of the network's visible activity. However, smaller independent servers within the Mastodon ecosystem continued to operate normally. This distinction highlights a core feature of decentralized platforms, where service disruption can be uneven rather than system wide. The incident also follows a similar attack on Bluesky, which faced multi day disruption before stabilizing. In that case, users hosted on alternative servers remained unaffected, reinforcing the idea that decentralization can limit the spread of outages. However, the reliance on large flagship servers still creates central pressure points that attackers can exploit. This creates a hybrid risk model where decentralization reduces total failure but does not eliminate high impact targets. Rising scale of DDoS attacks. The Mastodon DDoS attack also reflects the increasing scale of such cyber incidents. Distributed denial of service attacks have grown significantly in size and intensity. Cloudflare reported mitigating a record breaking attack that reached 29.7 terabits per second, which shows how much traffic attackers can generate. This level of scale makes it difficult for platforms to maintain consistent availability without advanced mitigation systems. For social platforms, the impact is immediate and visible. Users lose access, engagement drops, and trust can weaken if outages persist. While Mastodon restored access within hours, the warning about ongoing instability indicates that mitigation is not always a one step solution. Continuous monitoring and response are required to maintain uptime during prolonged attacks. Outlook for decentralized platform resilience. The Mastodon DDoS attack suggests that decentralized networks will need stronger protection strategies as they grow. While distributed architecture limits total collapse, high traffic servers still require advanced defenses. Platforms may need to invest in traffic filtering, load distribution, and faster response systems to reduce disruption. From its perspective at SquaredTech.co, the incident highlights a key trade off. Decentralization improves resilience at the network level, but it does not remove the importance of critical nodes. As more users adopt decentralized platforms, attackers may continue to target these nodes to create maximum impact. The long term stability of such networks will depend on how effectively they can protect these entry points while maintaining the open structure that defines them.

Coywolf LLC
Apr 14th, 2026
Mastodon will get end-to-end encryption for private messages thanks to Sovereign Tech Agency.

Mastodon will get end-to-end encryption for private messages thanks to Sovereign Tech Agency. The Sovereign Tech Agency, commissioned by Germany's Federal Ministry for Economic Affairs and Climate Action, has awarded hundreds of thousands of Euros to Mastodon to address key infrastructure challenges faced within the fediverse ecosystem. Mastodon, a popular decentralized social media platform that uses ActivityPub, announced it will add five much-needed features and improvements thanks to funding from the German government's Sovereign Tech Agency. The five deliverables include: * Blocklist synchronisation - To improve moderation and safety, Mastodon servers will be able to subscribe to shared blocklists to block offending servers or suggest servers to block automatically. * Remote media storage - Mastodon will add support for the Fediverse Auxiliary Service Provider (FASP) specification - a proposed standard for connecting fediverse servers to external service providers - to enable cost-saving media processing between servers. * Automated content detection - Using FASP, Mastodon will allow server owners to use external or self-hosted tools to scan for and process spam and illegal content automatically. * End-to-end encryption for private messages - Mastodon will work with the Social Web Foundation - a nonprofit dedicated to growing the fediverse through ActivityPub - and its E2EE messaging project to implement support for ActivityPub E2EE extensions for private messages. * Documentation improvements - Mastodon will create a new documentation site, provide more detailed installation and upgrade instructions, and make it easier for server owners to have the correct software dependencies. The Sovereign Tech Agency is investing €614K into Mastodon with the stated goal of strengthening the fediverse with shared, interoperable infrastructure for safer and more resilient social networks. The investment comes as Mastodon faces growing competition from Bluesky, a rival decentralized platform built on the AT Protocol rather than ActivityPub. In Mastodon's announcement, they said €90K was reserved for other fediverse projects focused on integrating FASP into their software. They also plan to start work on these features immediately and have begun recruiting people to help them. I'm excited about these new features, especially since Mastodon is my primary social network, and I plan to use all of them. I'm also grateful for the funding from the Sovereign Tech Agency and believe this is a step in the right direction toward everyone having more control over their digital lives. Jon Henshaw is the founder of Coywolf and an industry veteran with almost three decades of SEO, digital marketing, and web technologies experience. Follow @[email protected]

Recently Posted Jobs

Sign up to get curated job recommendations

There are no jobs for Mastodon right now.

Find jobs on Simplify and start your career today

We update Mastodon's jobs every few hours, so check again soon! Browse all jobs →