Many people used their own names and surnames as a username and, therefore, were easily recognizable. In addition, the combination of usernames and phone numbers opened the door to social engineering attacks like “You’re receiving this SMS from Snapchat, and we need you to verify your password for account johnsmith”.
Some companies implement security policies around usernames. For example, many websites now automatically indicate whether your username is unique and will not allow you to register if it’s not.
NordVPN, for example, deploys randomly generated credentials for users who want to set up the app on their router or other devices. This way, the product ensures that users have only unique and complex credentials.
How to create a secure username
When asked to summarize his top tips for username security, Chad Hammond, NordPass security expert, highlights the following: