WhatsMyName
Community-maintained dataset and web tool for enumerating a username across hundreds of sites.
Technical Architecture & Overview
WhatsMyName, started by Micah Hoffman (WebBreacher), maintains a curated JSON dataset of hundreds of websites and the URL patterns that reveal whether a username exists on each. The free whatsmyname.app web interface runs the enumeration in the browser, and multiple third-party checkers consume the same dataset. The project dropped its bundled checker scripts in May 2023 to focus on the data file that other tools build on.
Targeted Technical Use Cases
Username attribution across hundreds of websites during authorized investigations.
Evaluation & Trade-offs
Core Strengths
- +Actively curated site list with community verification.
- +Free hosted interface, no install required.
- +Dataset is reusable in custom tooling.
Trade-Offs & Limitations
- -Only covers sites in the dataset.
- -No bundled checker since May 2023; lookups run through whatsmyname.app or third-party tools.
Defensive Security Application
Investigating impersonation accounts and exposure of staff usernames.
Frequently Asked Questions
What is WhatsMyName?→
WhatsMyName, started by Micah Hoffman (WebBreacher), maintains a curated JSON dataset of hundreds of websites and the URL patterns that reveal whether a username exists on each. The free whatsmyname.app web interface runs the enumeration in the browser, and multiple third-party checkers consume the same dataset. The project dropped its bundled checker scripts in May 2023 to focus on the data file that other tools build on.
What is WhatsMyName used for?→
Username attribution across hundreds of websites during authorized investigations.
What are the strengths of WhatsMyName?→
- +Actively curated site list with community verification.
- +Free hosted interface, no install required.
- +Dataset is reusable in custom tooling.
What are the limitations of WhatsMyName?→
- +Only covers sites in the dataset.
- +No bundled checker since May 2023; lookups run through whatsmyname.app or third-party tools.
How is WhatsMyName used defensively?→
Investigating impersonation accounts and exposure of staff usernames.