Mastodon 4.7 adds encrypted private keys, smoother migrations & Fediverse protocol updates

Mastodon 4.7 has been released as the latest version of the open-source decentralized microblogging platform. This release is primarily technical, focusing on back end improvements, better performance, and enhanced compatibility with other Fediverse platforms, all in preparation for the more user-focused Mastodon 5.0 planned for later this year.

A key change is the introduction of multiple long-running database migrations. The team addressed long-standing structural issues, supporting seamless zero-downtime migrations from Mastodon 4.6 to 4.7 and from 4.7 to future versions. Mastodon 4.7 will now be a required step for administrators seeking uninterrupted upgrades.

Another significant security improvement involves encrypting private keys of local users in the database, which lowers the risk of leaks from backup files or external providers. This setup also allows for future rotation of keys and changes to signature algorithms.

While visible user changes are minimal, the release enhances support for handle changes on external Fediverse accounts, moving closer to enabling users to change their Mastodon handles in a future update. In addition, Mastodon 4.7 introduces support for FEP-8967, standardizing link preview representation and paving the way for more flexible multi-link previews. In addition, improvements to ActivityPub cryptographic signature handling further align Mastodon with evolving Fediverse protocols.