Mastodon Moderation Tools: An At-a-Glance Profile
Managing an independent community requires an understanding of how administrative controls operate under the hood. On decentralized platforms, enforcement behaves differently than on conventional bulletin boards because server environments interact across network boundaries. According to the Mastodon moderation actions documentation, moderation is always enforced locally as viewed from the specific host, meaning an administrator cannot alter an account on an outside machine, only the local representation of that account.
At a Glance: Enforcement Scope and Appeals
When community managers take administrative steps against individual accounts, Mastodon operates under specific built-in baseline rules:
- Scope: Actions affect local data and visibility on your specific server only.
- User Notification: As of release v3.5.0, default moderation choices notify the impacted user through an automated email.
- Appeal Windows: Impacted accounts receive access to an appeal form where they can provide one appeal within 20 days of the administrative action. Administrators and moderators can subsequently approve or reject that appeal.
- Reversibility: Lighter penalties remain completely reversible, while heavier sanctions carry time-limited recovery windows.
Account-Level Actions Profile
Administrators have access to distinct tiers of intervention when addressing problematic accounts, complementing standard practices found in our Forum Moderation Guide for New Community Owners.
Sensitive: Marking an account as sensitive forces all attached media uploads published by that person to be automatically labeled as sensitive content across the server.
Freeze: Available exclusively for local accounts on the instance. Freezing completely halts an individual from using or logging into the account, while preserving all existing posts and profile records intact. The interface redirects the user to their Account Settings view with a notice stating: "You can no longer login to your account or use it in any other way, but your profile and other data remains intact." An administrator can reverse this status at any moment to restore normal operations.
Limit: Formerly designated as silencing, limiting conceals an account from all instance members who do not follow it. Content remains discoverable through search, direct mentions, and existing follow links, but it loses broad public visibility. Notification activities triggered by limited users fall under account-level preference filters (which default to "filter"). Follow attempts made by limited accounts turn into follow requests. Limiting does not automatically apply across federation to outside servers and can be undone at any point.
Suspend: Suspension functions as an effective deletion. The public profile vanishes, search visibility disappears, and posts, media uploads, and follower lists disappear publicly. Mastodon keeps all data archived inside the management backend for a period of 30 days from suspension to give individuals time to resolve disputes. If reinstated within this 30-day window, profile records and posts reappear, though external federation follow links are broken upon suspension and will not restore automatically. Administrators can force-delete account data immediately or let the 30-day period lapse to permanently purge the records. Even after a purge, an account can technically be unsuspended, but it will lack any statuses, profile details, avatars, or header images. Suspending remote accounts removes their follows to local members permanently.
Federation Controls: Managing Entire Websites
Handling issues originating from external instances is handled under Preferences > Moderation > Federation by applying domain blocks:
- Reject Media: Blocks local handling of incoming files from the designated instance, encompassing avatars, headers, custom emojis, and media attachments.
- Limit: Applies the limiting penalty across all past and future accounts belonging to that target website, while automatically converting follows from that server into follow requests.
- Suspend: Completely suspends all past and upcoming accounts associated with that instance, storing only usernames while removing all local follow relationships.
- Blocklist Sharing: Administrators can import or export server lists formatted as a .csv file. During import, the software displays the list for review, letting operators deselect specific instances before applying the bulk domain block.
- Default Read Access: By default, users belonging to suspended external servers can still read posts on your instance unless an operator configures the AUTHORIZED_FETCH environment variable.
Automated Defenses and Spam Prevention
Baseline protections require confirming an email address during registration and impose IP-based rate limiting on new sign-ups. For deeper abuse prevention, administrators can use tools aligned with our practical checklist for stopping forum spam.
The software performs email domain checks by resolving domain records for an A or MX record—uncovering the email server's underlying IP address—and checking that destination against a dynamically updated blacklist. Because spammers often use rotating domain names tied to an identical mail server, operators can use online lookup tools or the Linux dig command to reveal DNS A records and ban the common IP.
Network blocks can be implemented within the IP Rules administrative interface for specific IPv4 or IPv6 targets, or across address blocks using CIDR syntax, adjusting severity and duration. Server operators can also configure firewall rules using iptables and ipset directly on Linux hosts.
Announcements and Real-Time Coordination
To reach local members with essential updates, operators can navigate to Administration > Announcements to publish or schedule messages. The system features a "Notify users" option that dispatches an email notice to all server accounts. These administrative announcement emails cannot be opted out of by recipients.
For team coordination, webhooks connect system events directly to external chat platforms including Discord, IRC, and Slack, providing real-time moderation event monitoring via the platform API as detailed in the official Mastodon documentation.
Sources
Published October 28, 2026. No affiliate links on this page. Facts come from the sources linked above; check them for updates.