Block Usernames documentation
Stop new accounts from using “admin” and “administrator”, the usernames attackers try first. Pro adds a list of common names and your own comma-separated list.
Overview
Bots try “admin”, “administrator” and the site name before anything else. If a real account uses one of those names, half the attacker’s work is already done.
Plan: Free + Pro options. The options marked Pro below need WP Extended Pro.
Setup
- Go to WP Extended in your WordPress admin and find Block Usernames under Security & Privacy.
- Switch Block Usernames on.
- Open its settings, adjust the options below and save.
Settings
| Setting | What it does | Plan |
|---|---|---|
| Block Usernames | Enter comma separated usernames | Pro |
Questions and troubleshooting
Does it rename existing users?
No. It stops new accounts using blocked names and shows a notice listing existing accounts that use one, so you can change them.
What do I get with Pro?
The common usernames list and your own custom list. See Free vs Pro.
It isn’t working as expected
Check the module is switched on and its settings are saved. If another plugin does the same job, deactivate one of them. Then clear any page cache and test again. Still stuck? Pro customers can contact support; free users can post on the WordPress.org forum.
Developers
Block Usernames has 2 hooks. See the Block Usernames developer reference.