UsernamesJune 9, 20265 min read

How to Find Every Account Linked to a Username (and Lock Yours Down)

By Scott Anderson, Clearfront maintainer

One username often maps to accounts across hundreds of sites. This is how username enumeration works, what it reveals when you run it on yourself, and how to lock down the accounts you forgot you had.

How do you find all accounts linked to a username?

Run the username through an enumeration tool that checks it against hundreds of sites at once. Sherlock checks around 400 platforms, Maigret checks several thousand, and Blackbird is a newer option in the same vein. Each returns the sites where that handle exists.

The tools work by requesting the profile URL for your username on each site and reading the response: a 200 usually means the account exists, a 404 means it does not. Run one and you get a list of every platform where your handle is taken, which for most people includes several they forgot about.

What one username reveals about you

A reused username ties your accounts together. Once someone has your handle on one site, the same handle on other sites links your professional identity to your private one.

This is the core of how footprint correlation works. Your work-adjacent GitHub, your gaming profile, an old forum account, a dating profile, all under the same name, become one connected picture. The tool does not need your real name to do this. The username is enough, and people reuse usernames far more than passwords.

Run it on yourself first

  1. 1.Pick the usernames you have reused over the years
  2. 2.Run each through a username-enumeration tool
  3. 3.Open each hit and confirm it is actually you, not a coincidence
  4. 4.Note which accounts you forgot existed
  5. 5.Decide which to close, rename, or separate

The verification step matters. A username match is not proof; someone else may have the same handle elsewhere. Open the profile and confirm. Investigators treat an unopened match as low confidence for exactly this reason.

How to lock down what you find

  • -Close accounts you no longer use rather than leaving them dormant
  • -Use different usernames for accounts you want kept separate
  • -Remove identifying details from profiles you keep
  • -Assume anything under a reused handle is publicly linkable

You cannot un-ring the bell on a handle you have used for a decade, but you can stop the bleed. Split your identities going forward, and retire the accounts that only exist as loose threads.

Doing it without the manual setup

Installing and running each tool by hand works, but it is fiddly, and username enumeration is only one pass of a footprint audit. Clearfront wraps the username tools alongside email, breach, and broker checks, then connects the results so you see not just where your handle exists but what it links to. The full self-audit is in the self-OSINT walkthrough.

Frequently asked questions

Is username enumeration legal?
Checking public profile pages is legal, and running it on your own usernames is plainly fine. Like any OSINT technique, the legality depends on the target and intent, not the tool.
What is the difference between Sherlock and Maigret?
Sherlock checks a username against roughly 400 sites and confirms by URL. Maigret checks several thousand and pulls more profile detail. Maigret is broader; Sherlock is faster and simpler to verify.
Can people still find me if I use different usernames?
It is much harder. Unique usernames per account break the correlation that enumeration relies on. It is one of the highest-value privacy habits you can adopt.

Scott Anderson believes your personal data is yours to own and protect. He built Clearfront, a free, open-source tool for scanning and scrubbing your own digital footprint from public data, and he writes about OSINT, breach exposure, and personal privacy.