Username Squatting
Registering desirable usernames with intent to sell, impersonate, or prevent others from using them.
Squatters register @nike, @apple, @celebrity names to sell to the rightful owners. Prevention: reserve brand names, implement verification for notable accounts, reclaim inactive accounts after 12+ months, limit accounts per email/IP. Some platforms auction premium usernames rather than allowing free registration.
ExampleUser registers @Starbucks hoping to sell it to Starbucks Corporation
Reserved Names
Usernames that are blocked from registration to protect system functions, brands, or prevent abuse.
Common reserved categories: system accounts (admin, moderator, support), your company brand, competitor brands (anti-phishing), common misspellings of reserved names, offensive/profane terms. Maintain allowlist for legitimate uses and blocklist for always-prohibited. Update quarterly.
ExampleReserved: admin, support, yourcompany, adm1n, supp0rt
Username Portability
The ability (or inability) to change usernames after account creation.
Immutable usernames (can't change) ensure stable @mentions and profile URLs but frustrate users who want to rebrand. Changeable usernames improve UX but break old links and @mentions. Compromise: allow username changes but keep old username reserved for 30-90 days and redirect to new profile.
ExampleTwitter allows username changes; Discord uses immutable user IDs + changeable display names