Don’t overlook username limitations

Photo Credit:

Photo Credit:

One of the items that I see often get overlooked in building a website with user profiles is limits to username validation. The obvious list to exclude are items like ‘admin’, ‘staff’, and ‘system’, however I’d suggest an even wider blacklist. Should your website offer shorter profile urls ( vs or virtual subdomains (, the list should also include items like ‘account’, ‘secure’, and ‘redirect’.

Security isn’t easy. Hopefully this helps you add yet another layer of protection to your site or client project. Username blacklists – added to the checklist.

Leave a Reply

Your email address will not be published. Required fields are marked *