Mastodon 4.6 Introduces Profile Collections and Mandatory Two-Factor Authentication Controls
Mastodon 4.6 adds a Collections feature for grouping profiles and gives server administrators the ability to enforce two-factor authentication on all member accounts.
The open-source social network Mastodon has released version 4.6, introducing a new feature called Collections that allows users to group profiles together and share those groups across the web. The update also brings reworked profiles, email newsletters, server administration controls, and a set of accessibility improvements.
From a security perspective, the most notable addition is the ability for server administrators to require two-factor authentication (2FA) on all member accounts. This mandatory 2FA control addresses a long-standing gap in Mastodon's security posture, where individual users could opt out of 2FA even on servers that encouraged its use. Jerry, the administrator of the popular infosec.exchange instance, has already announced plans to turn the requirement on.
The Collections feature allows users to curate groups of profiles and share them as a single link, making it easier to follow themed sets of accounts without having to manually follow each one. This could be particularly useful for journalists tracking multiple sources, researchers monitoring experts in a field, or communities organizing around specific topics.
Other improvements in the 4.6 release include a redesigned profile page that offers better organization of user information and posts, as well as support for email newsletters that can be sent to followers. Accessibility changes have also been made to improve the experience for users with disabilities, including better screen reader support and keyboard navigation.
The release comes as Mastodon continues to grow following the broader shift toward decentralized social media. The addition of mandatory 2FA controls is likely to be welcomed by security-conscious server administrators who have been seeking more granular control over account security on their instances. The update is available now for all Mastodon servers that choose to upgrade.