Pixelfed: Security Features

[dansup]

• [x] ~bcrypt password hashing~
• [x] OAuth / Authorized Applications
• [x] ~Option to verify email before account can do anything~
• [x] Option to require TLS by default (including remote apis)
• [x] ~Two Factor Auth~
• [x] ~Account Audit Log~
• [x] ~Show Active Sessions in Security Settings~
• [x] Usernames are retired after user deletes account
• [x] ~Close new registrations~
• [x] Restrict new registrations to invite-only
• [x] Restrict new registrations to domain specific email addresses

[nailyk-fr]

Also looks like I am not able to delete my account.

[dansup]

@nailyk-fr It is a WIP!

[andyrtr]

Please also support WebAuthn/U2F login using hardware security tokens. While it works great with GitHub and GitLab the Fediverse is lacking that support. See also https://github.com/tootsuite/mastodon/issues/562