The password manager NordPass has put together a list of the 200 most popular usernames of all time. Unsurprisingly, most of the usernames are simply people’s names. Amongst the most popular is “ยศกร”, which means “title” in Thai, “David”, “Alex”, “Maria”, “Anna”, “Marco”, “Antonio”, and other popular names. The top username had nearly 1 million (875,562) hits.
Interestingly, usernames one would think might be quite common, such as “admin” or user”, didn’t make the list of the 200 most popular usernames.
Here are the top 20 usernames of all time:
| Username | Count | |
| 1 | ยศกร | 875562 |
| 2 | David | 470646 |
| 3 | Alex | 451546 |
| 4 | Maria | 438485 |
| 5 | Anna | 387660 |
| 6 | Marco | 352629 |
| 7 | Antonio | 325085 |
| 8 | Daniel | 310096 |
| 9 | Andrea | 305442 |
| 10 | 집을뒤집자 | 298963 |
| 11 | Laura | 296627 |
| 12 | Ali | 290285 |
| 13 | 박춘우 | 277859 |
| 14 | Jose | 271960 |
| 15 | Sandra | 264886 |
| 16 | พิมวิภา | 249476 |
| 17 | Sara | 247072 |
| 18 | Carlos | 214261 |
| 19 | Ana | 212049 |
| 20 | Michael | 198312 |
Why are usernames important?
While passwords remain the most important attribute when securing your accounts, security experts encourage users to pay attention to usernames too.
“Having an easy-to-guess username is dangerous. Essentially, you’re giving out half of your login information,” says Chad Hammond, security expert at NordPass.
The security expert also warns that, for many different reasons, hackers target all personal information they can get their hands on, including usernames.
For example, in 2014, the social media platform Snapchat suffered from a data breach, during which hackers downloaded 4.6 million usernames and phone numbers. Many people used their own names and surnames as a username and, therefore, were easily recognizable. In addition, the combination of usernames and phone numbers opened the door to social engineering attacks like “You’re receiving this SMS from Snapchat, and we need you to verify your password for account johnsmith”.
Some companies implement security policies around usernames. For example, many websites now automatically indicate whether your username is unique and will not allow you to register if it’s not.
NordVPN, for example, deploys randomly generated credentials for users who want to set up the app on their router or other devices. This way, the product ensures that users have only unique and complex credentials.
How to create a secure username
When asked to summarize his top tips for username security, Chad Hammond, NordPass security expert, highlights the following:
1. Don’t just use your name as a username
2. Avoid using the beginning of your email address as your username
3. Your username should be simple enough to remember but hard to guess
4. Never use easy-to-guess numbers with your usernames (for example, address or date of birth)
5. Don’t use your social security number or ID number as your username
6. If you’re struggling, try online username generators
Methodology: NordPass partnered up with a white-hat hacker, who compiled a report of the most popular usernames of all time. The hacker requested to stay anonymous.
