Risk level: low. Can you change it: yes. Found in 485 breaches in this directory.
What this data is
The handle or login name you chose for an account, which may be public on forums, games and social platforms or used privately to sign in.
The risk on its own
A username alone cannot open an account, and many were already visible to other users. Its main risk is that people reuse the same username across sites. That lets anyone search for it and find other accounts owned by the same person.
The risk combined with other data
With a leaked password, a username becomes a working login on any site where both were reused. It also links accounts that reveal your real name, location, photos or interests. A distinctive username can connect an anonymous account to your professional identity.
How criminals use it
An attacker tests your leaked username and password on other sites where you use the same handle.
A search for your unique username finds your gaming, forum and social media accounts.
A scammer creates a lookalike account with your username on a new platform to impersonate you.
An anonymous forum username is linked to your real name through an old profile.
What to do now
Change the password on the breached account and anywhere you used the same username and password.
Search your username in quotes to see which accounts are linked to it.
Use different usernames for accounts you want kept separate.
Turn on two-factor authentication for accounts that use the same username.
Delete old accounts with usernames that reveal personal information.
Frequently asked questions
Is a leaked username a big deal?
Usually not by itself. It becomes a problem when the password also leaked or when the username links private accounts.
Should I change my username?
Change it if it contains personal details or connects an account you want to keep private.
Can someone log in with just my username?
No. They also need your password or a way to reset it, so protect accounts with unique passwords and two-factor authentication.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.