Tom 
Btw: Mastodon lets you use two-factor authentication (e.g. with Google Authenticator, Yubico Authenticator, ...)
I'd recommend making use of it to protect your account.
Richard Bairwell@thomas I've set mine up with my Google Pixel phone (which has Titan Security), a Yubikey and Windows Hello: physical security for the win!