Security Cipher
Home Blog About Us
Resources ▼
🗺️ Penetration Testing Roadmap 🌐 Web Application Security Checklist 🤖 OWASP Top 10 for LLM Applications 🧠 LLM AI Security Checklist 🛠️ Security Tools 🎯 Penetration Testing Tricks 📄 Secure Code Explain 📖 Vulnerability Explain ☁️ AWS Cloud Security Checklist
My Resume
Contact UsContact
← Security Tools View on GitHub

WhatsMyName

Unified data set and tooling for username enumeration across web services.

WhatsMyName

WhatsMyName

License: CC BY-SA 4.0 Sites tracked Categories Contributors PRs Welcome GitHub Stars

WhatsMyName (WMN) is a community-maintained dataset that lets you find out if a username exists across hundreds of websites. If you're investigating a person of interest, verifying an online identity, or simply curious about your own digital footprint, this project powers the tools that make that possible.

Created in 2015 by Micah "WebBreacher" Hoffman, WhatsMyName started as a personal fix for a real frustration: existing username checkers were full of false positives. Over the years, contributions from people all over the world have grown it into one of the most widely-used username enumeration datasets in the OSINT community.

Table of Contents

  • Just want to search a username right now?
  • How It Works
  • Tools and Sites That Use WhatsMyName
  • Help Keep WMN Accurate
  • Stay Connected
  • License

Just want to search a username right now?

Head to whatsmyname.app -- a free, browser-based tool built directly on this dataset. No installation required.

Or check out the many tools below that use WMN.


How It Works

WMN is a single, carefully maintained JSON file (wmn-data.json). Each entry describes how to check one website for a username -- what URL to query, what a successful response looks like, and what a "not found" response looks like.

Tools and scripts read this file and do the actual checking. That separation means anyone can build a checker, and the data stays accurate regardless of which tool you prefer.

For a site to be included, it must:

  1. Be publicly accessible -- sites behind paywalls or login walls can't be checked
  2. Include the username in the URL -- the profile URL must contain the username directly
  3. Not transform the username -- sites that swap usernames for numeric IDs won't work

In May 2023, we removed the bundled checker scripts and shifted focus entirely to maintaining the data file. See the tools section below for checkers that use our data.


Tools and Sites That Use WhatsMyName

🌐 Web-based (no install required)

ToolTypeDescription
whatsmyname.appWebThe go-to web interface by Chris Poulter. Filters by category, exports to CSV, always pulls the latest data.
Who Am IChrome ExtensionChrome/Brave extension combining WMN data with Sherlock and Maigret, by OSINT Liar.
K2OSINT BookmarkletBookmarkletBrowser bookmarklet -- enter a username in a popup, results open in a new tab.

⌨️ Command-line and scripts

ToolTypeDescription
NaminterPythonBuilt specifically for this dataset. Supports Cloudflare bypass, browser impersonation, concurrent checking, and extensive config options.
BlackbirdPythonFast username search that integrates WMN data.
WhatsMyName-PythonPythonSimple Python script by @C3n7ral051nt4g3ncy.
WhatsMyName-ClientPythonPython script with request header and POST support by @grabowskiadrian. Also useful for testing the JSON config.
Reveal My NamePythonThe original Python checker that shipped with this project, maintained by @yooper.
WMN ScreenshooterPythonSelenium-based helper that screenshots identified profile pages.
sn0intRustUses WMN data in the kpcyrd/whatsmyname module.

🖥️ Desktop and platforms

ToolTypeDescription
NameSeekerElectronCross-platform desktop app for username and email search across hundreds of sites. Exports to PDF, CSV, and JSON.
LinkScopePythonUses WMN in its Online Identity category.
Maltego WhatsMyName TransformsMaltegoLocal Maltego transforms that check usernames in real time using the JSON file.
SpiderfootPythonIntegrates WMN in the sfp_account module. (CLI demo video)

🐳 Self-hosted and containerized

ToolTypeDescription
WhatsMyName-WebFlaskSimple Flask web app version of WhatsMyName by @AXRoux.
WhatsMyName DockerDockerDocker API wrapper over the WMN tool by @kodamaChameleon.

Help Keep WMN Accurate

This project only stays useful if the detections stay accurate. Websites change their profile URLs, response codes, and page content constantly. We need contributors to help find new sites and fix broken detections.

You don't need to be a developer. Here's how to help at any level:

Experience levelHow to contribute
No technical backgroundSubmit a site via this form
Comfortable with GitHub Open an issue with a link to an example profile
Comfortable with JSON and HTTPFork the repo, fix or add a detection, and submit a pull request

See CONTRIBUTING.md for detailed instructions on adding or fixing site detections, including format requirements and examples.


Stay Connected

Follow the project on LinkedIn for updates.


License

Creative Commons License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services - Fiverr

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Application Security Engineer

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    August 10, 2026/
    0 Comments
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
    August 3, 2026/
    0 Comments
  • How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
    How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
    July 27, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Start Here
  • Cybersecurity Jobs
  • CVE Lookup
  • Bug Bounty Programs
  • Security Conferences
  • Payload Cheatsheets
  • Interview Prep
  • Report Templates
  • Blogs
  • About
  • Contact
  • RSS Feed

Recent Post

  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
  • I Ran Codex Security on a Shop API Lab: 14 Bugs, $1.64, Full Playbook
  • How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
© 2026 SecurityCipher. All rights reserved. Privacy Policies · Terms & Conditions