Username Enumeration Prevention and Drupal 11
The latest stable release, 8.x-1.4, declares a core version requirement of ^9.5 || ^10 || ^11, which covers Drupal 11.
What Is Username Enumeration Prevention By default Drupal is very secure (especially Drupal 7). However, there is a way to exploit the system by using a technique called username enumeration. Both Drupal 6 and 7 have this issue, but it is much worse for people using Drupal 6. This is because Drupal 6 does not have any built in brute force prevention.
Key facts
- Project
- username_enumeration_prevention
- Latest stable with Drupal 11 support
- 8.x-1.4 (5 Sept 2024)
- Core version requirement
- ^9.5 || ^10 || ^11
- Maintenance status
- Actively maintained
- Reported installs
- 19,917
- Last synced from drupal.org
- 21 Sept 2026
Every field above comes from the drupal.org API. The Drupal 11 status is derived from the core version requirement across this project's releases.
Source: drupal.org/project/username_enumeration_prevention
Related modules in Access control
CAPTCHA
ReadyAdd challenge-response tests to user-facing forms on your site to protect against spambot submissions. Further CAPTCHA types are supported via contrib modules.
captchaLatest stable 8.x-1.17244,588 sitesExternal Authentication
ReadyProvides a generic service for logging in and registering users that are authenticated against an external site or service and storing the authentication details.
externalauthLatest stable 2.0.13108,588 sitesField Permissions
ReadyThe Field Permissions module allows site administrators to set field-level permissions to edit, view and create fields on any entity. Features Enable field permissions on any entity, not just nodes. Role-based field permissions allowing different viewing patterned based on what access the user has. Author-level permissions allow viewing and editing of fields based on who the entity owner is.
field_permissionsLatest stable 8.x-1.569,071 sitesEU Cookie Compliance (GDPR Compliance)
ReadyProvides a GDPR cookie banner where you can gather consent from the user when the website stores cookies on their computer or otherwise handles their personal information.
eu_cookie_complianceLatest stable 8.x-1.2967,536 sitesMasquerade
ReadyAllows site administrators (or anyone with enough permissions) to switch users and surf the site as that user
masqueradeLatest stable 8.x-2.265,275 sitesView Unpublished
ReadyGives users with specific roles the ability to view unpublished content of certain content types.
view_unpublishedLatest stable 8.x-1.361,676 sites