2026-10-17 13:27 UTC
@jwildeboer@social.wildeboer.net @gbargoud@masto.nyc @MastodonEngineering@mastodon.social I exactly suggested this yesterday to the dev team
Also password resets maybe after X time of inactive
Replies (1)
-
@renchap@oisaur.com 2026-10-17 14:10
@stux@mstdn.social @jwildeboer@social.wildeboer.net @gbargoud@masto.nyc The issue here is not stolen tokens, but users who reused their password somewhere else, or got their password leaked. We recently merged https://github.com/mastodon/mastodon/pull/40745 which should help for inactive users. For active users, they should configure 2FA, and we are working on prompting them to do so when they log in.