While #Mastodon has a lower user base then say #Facebook or #X I still recommend people use some form of #2fa to fend against most bot automatic account break in attempts.
particular risks that are less likely but still possible would be if someone were to gain access to your account they could post something reputation damaging with your account, if they were to get through your password.








