Bad username scan

What It Checks

This scanner checks if your usernames are correctly set. Some usernames are known to be used for malicious purposes, created by bots, or match common nicknames. These weak usernames make your site more vulnerable to attacks.

Why It Matters

Some usernames are known to be used for malicious purposes, created by bots, or match common nicknames. Using weak or predictable usernames makes your site more vulnerable to brute-force attacks. Attackers often try common usernames when attempting to break into sites.

What You'll See

Good Status:

• All the usernames are correct.
• Module activated: The users with a disallowed username will be asked to change it, also users with a nickname same as their login will be automatically renamed.
• Users updated: The users with a login same as their nickname or display_name have been renamed, their login is still the same.

Bad Status:

• [number] user(s) has a disallowed username: [username list]
• [number] user(s) has the same display name as login: [username list]
• [number] user(s) has the same nickname as login: [username list]

Cannot Fix Automatically:

• The module is already activated. Let's give your users some time to change their username.

How to Fix

Activate the option "Forbid Bad Usernames" in the Users & Login module. Once activated, users with disallowed usernames will be asked to change them, and users with a nickname same as their login will be automatically renamed.

Bad Usernames