I seen this question: Does username length/complexity positively impact security? which got me thinking about usernames/passwords from a developer-aspect.
If a developer for an application were to separate the user's 'username' (what they login with) from their 'display name' (what other users see) and add the ability for the user to change their 'username', would this necessarily increase security?
I had a few thoughts as to why it might help security that I'm not certain are valid.
- If an attack is targeted it might help by adding another layer? Assuming the user keeps their login-name secret and there are rules to prevent it from being the same as your display name.
- If your display name is separate from your username then you might be able to make it an option as a developer to change your username to add security similar to changing your password.