Bluesky

How handles work on Bluesky

A Bluesky handle sits directly under your display name on your profile and doubles as your profile URL (bsky.app/profile/yourhandle), so it's more visible than Instagram's secondary @handle but not quite as omnipresent as X's constant @-mentions. The distinguishing fact about Bluesky, though, is that the handle isn't just a string, it's literally a domain name: everyone starts on a subdomain of bsky.social (yourname.bsky.social), and anyone can swap in a domain they actually own (yourname.com) as a "custom domain" handle instead.

Bluesky's early adopters skewed toward journalists, academics, and tech workers who mostly used real names or recognizable professional handles, a holdover from its 2023 invite-only period. The platform has since broadened, and persona and pseudonymous accounts (fandom, political commentary, art) are common and unremarkable, but the real-name skew is still more visible here than on, say, X.

A numeric-suffix handle like bundy2038933 reads the same way it does on most platforms: low-effort, or a sign the good name was gone. But the more distinctive tell on Bluesky is the domain suffix itself. bundyfit.bsky.social reads as an ordinary free-tier handle, unremarkable for the vast majority of accounts. A verified custom domain handle like bundyfit.com or real.bundy.com reads as more deliberate and, for public figures or brands, functions as Bluesky's de facto verification signal, since claiming a domain as a handle requires proving DNS ownership.

The handle can be changed at any time with no published fixed cooldown for ordinary use, though Bluesky applies rate limits to slow down rapid repeated changes [VERIFY: exact threshold. Bluesky's own rate-limits documentation doesn't list a specific number for com.atproto.identity.updateHandle, and secondary reports describe hitting "rate limit exceeded" after a handful of changes without citing an official figure]. Changing away from a default .bsky.social handle used to free that handle up for anyone else to claim; as of a December 2024 policy change, switching to a verified custom domain now permanently reserves your original .bsky.social handle for you, so you don't have to keep using it to keep it, per TechRadar.

Naming requirements

Sourced directly from the live naming-policy rule for this service (app.services, service_id = 2008). These numbers describe the checked portion of the handle, the part before .bsky.social or your own domain:

• Minimum length: 3 characters

• Maximum length: 18 characters

• Allowed characters: letters (a-z, A-Z), numbers (0-9), and hyphens (-)

• Disallowed patterns: can't start or end with a hyphen

• Case sensitivity: case-insensitive for uniqueness; the underlying AT Protocol spec says handles should be normalized to lowercase, per atproto.com

• Mutability: can be changed at any time with no fixed cooldown for normal use, subject to rate limits on rapid changes [VERIFY: exact threshold, not published by Bluesky]

A full Bluesky handle is a real domain name under the hood, so if you move off the free .bsky.social subdomain entirely, standard domain rules apply instead: up to 253 characters total across all segments, each segment 1-63 characters, no bare top-level domains, per the AT Protocol handle spec.

FAQ

Can I change my Bluesky username later?

Yes, at any time, with no published fixed cooldown for normal use. Bluesky does rate-limit rapid repeated changes to deter abuse, though the exact threshold isn't publicly documented.

Does Bluesky allow numbers/hyphens in usernames?

Yes to both. Numbers and hyphens are allowed within the checked portion of the handle, but a hyphen can't be the first or last character. Underscores and periods aren't allowed inside a segment (a period is reserved as the domain separator).

What happens to inactive Bluesky usernames?

Bluesky keeps a deactivated account's handle reserved rather than releasing it. A fully deleted account is different: a default .bsky.social handle can eventually become available for someone else to claim, per longer.blue, but Bluesky hasn't published the actual reclaim window [VERIFY: no official source gives a specific number of days]. Custom domain handles are a separate case since you control the domain yourself, though at least one user has reported the platform failing to let them re-verify their own domain on a new account after deleting the old one, per a still-open GitHub issue, so even domain-owner reuse isn't guaranteed to be smooth.

Is Bluesky username case-sensitive?

No. Handles are treated as case-insensitive for uniqueness and normalized to lowercase, so BundyFit.bsky.social and bundyfit.bsky.social are the same handle.

What's the difference between a .bsky.social handle and a custom domain handle?

A .bsky.social handle is free and instant, just a subdomain Bluesky hands out. A custom domain handle uses a domain you actually own (yourname.com), verified via a DNS record, and functions as Bluesky's main proof-of-identity mechanism since only the domain's owner can complete the verification.

Do I lose my old handle if I switch to a custom domain?

No, not since a December 2024 policy change: switching to a verified custom domain permanently reserves your original .bsky.social handle, even if you never use it again.

Why won't Bluesky verify my custom domain handle?

Almost always DNS propagation lag: after adding the TXT record Bluesky asks for, it can take up to roughly 48 hours to fully propagate, so a failed check right after saving the record isn't necessarily wrong, just early, per WiseChecker. Moving a domain between registrars can also reset verification and require re-adding the record.

Reserved names & impersonation policy

Bluesky maintains a blocklist that stops new accounts from registering handles containing slurs and certain other flagged terms at signup, per TechCrunch. That filter applies going forward, not retroactively, and Bluesky has revised the list's scope over time, so it's a moderation backstop rather than a fixed public reference for what's off-limits.

Separately, Bluesky runs an impersonation and handle-squatting policy that it tightened in late 2024: accounts impersonating a real person or organization are removed, and parody, fan, or commentary accounts must clearly label themselves as such in both the handle and bio or risk being treated as impersonators, per Engadget and MIT Technology Review. Researcher Alexios Mantzarlis found that of 305 named-person accounts he checked among Bluesky's top 500, at least 74 had been impersonated by another account, per MIT Technology Review. Domain-based handles introduced a new twist on the problem too: scammers registered domains matching public figures' names, then messaged them offering to sell the domain back, since owning that domain is what it takes to verify the matching handle. Bloomberg columnist Conor Sen was one target, told "I own conorsen.com... you can make an offer for the domain or do nothing," per 9to5Mac.

Bluesky doesn't run a name-protection trademark filing process the way X does. Instead it leans on domain verification as identity proof (a senator using senate.gov, a newsroom using its own domain) and, starting in 2025, a checkmark verification system where Bluesky's own team and a limited set of partner "Trusted Verifiers" confirm the identity of notable accounts, with every verification reviewed by Bluesky moderation before it's granted.

What happens if it's taken

Bluesky doesn't publish a formal reclaim timeline or a "request a dormant handle" process the way some platforms do. Deactivated accounts keep their handle reserved indefinitely rather than releasing it. A default .bsky.social handle can eventually free up after the account behind it is fully deleted, per longer.blue, but Bluesky hasn't published how long that takes [VERIFY: no official source specifies a reclaim window for deleted-account handles].

There's no handle marketplace and no official appeals path for a squatted name short of reporting it as impersonation or a slur-list violation, neither of which applies to an ordinary taken handle someone is actually using. Realistically, waiting out a taken .bsky.social handle isn't a dependable plan. Since Bluesky handles can be any domain you control, the more practical move is often to verify a domain variant (yourname.com, yourname.blog) rather than hold out for the exact subdomain.

Tips for landing a good handle

• Because a Bluesky handle is a real domain, a cheap domain you own (a .com, .blog, or similar) is a legitimate way around a taken .bsky.social name, not just a workaround, it's the platform's own verification mechanism

• Use hyphens where you'd reach for an underscore or period elsewhere (bundy-fit), since those are the only separator character allowed inside a single handle segment

• Stay inside the 18-character ceiling on the free subdomain tier; a longer brand name may need an abbreviation there even if the domain version has more room

• If you do land the free .bsky.social handle first, know that upgrading to a custom domain later keeps the original reserved for you, so there's no rush to pick the "permanent" one on day one

• Check the name across every platform at once before settling on a variant, so your Bluesky handle stays consistent with your handle everywhere else

• If you switch to a custom domain, add the DNS TXT record first and expect to wait, not troubleshoot: propagation can take up to 48 hours, so a failed verification check right after saving the record usually just needs another try later

Check if your handle is still yours to claim on Bluesky