On This Page
On This Page
Last updated: 24/07/2026
Block Usernames
Blocks risky default usernames during registration so bots have fewer easy targets.
Overview
Blocks risky usernames at registration via WordPress illegal_user_logins. Optional default list (admin, administrator, root, test, demo, support, webmaster) plus a custom list up to 500 entries. Default blocklist is opt-in—check it to activate. Does not rename existing users. Soft overlap with Login ID Type, Generic Login Errors, and registration CAPTCHAs.
Who is this for?
- Open-registration and membership sites
- Teams shipping free hardening baselines
- Sites tired of bots claiming
admin/support
Features
Registration blocking
Stops risky names before accounts are created.
Optional default list
Common high-risk handles ready to enable.
Custom blocklist
Add up to 500 usernames your site should never allow.
Core integration
Uses WordPress illegal_user_logins (works with Username Changer validation too).
Existing users untouched
Does not rename accounts already on the site.
Use Cases
- Open membership signupBlock admin, support, and brand-squatting handles at register.
- Agency baselineEnable the default list on every new client site.
- Custom deny listBan role-like names (editor, billing) your community should never claim.
Frequently Asked Questions
What does Block Usernames do in WP PowerSuite?
It blocks risky default usernames during registration so bots have fewer easy targets.
How do I enable Block Usernames in WP PowerSuite?
Enable the module, turn on the default list and/or add custom names, and save.
Who should use Block Usernames?
Sites with public registration that want fewer obvious username targets.
Does it rename an existing admin user?
No. It only blocks new registrations—secure existing accounts separately.
Is Block Usernames a free or Pro module in WP PowerSuite?
It is included (free) with WP PowerSuite.
