nexuscheckVerification checklists for Nexus Market, with pass criteria
18 checks across 5 moments
3 verified addresses
Overview Full checklist First time setup Every session Before funding On delivery Periodic review Addresses FAQ Scope

Checks > First time setup > C-03

C-03: Username exists nowhere else

IdentifierC-03
Weightcritical
AppliedFirst time setup (M1), Once, before you ever sign in
StatementThe username on this account has never been used on any other site, market, forum or messaging service.
Grading criteria
PASSNewly invented for this account and used nowhere else, ever.
PARTIALNew but similar in pattern to a name you use elsewhere.
FAILReused, or a recognisable variation of a name with history attached.
COSTThis is the only item on the list with no repair path. A password can be changed and a key can be rotated. A name that already exists somewhere with a history cannot be unlinked afterwards.

Why this one is different

Every other item here can be fixed after the fact. Change the password, rotate the key, move the funds. A username that also exists on a forum you posted to for three years cannot be unlinked, because the association was created the moment both accounts existed and nothing you do now removes it.

What counts as reuse

  • The same name on another market, current or long closed
  • A handle from a forum, chat service or code hosting account
  • A name plus a number, where the base is recognisable
  • A deliberate misspelling of something you use elsewhere
  • A name you once used and abandoned, since abandoned does not mean unindexed

Choosing one that passes

Generate it rather than invent it. Names people invent follow patterns from their own vocabulary, and those patterns repeat across accounts without the person noticing. A random string is unmemorable, which is exactly what a password manager is for.

If this check fails

The honest answer is that the account cannot be repaired, only replaced. That costs the order history attached to it, which is a real loss and a smaller one than the alternative. Weigh it deliberately rather than deciding by inertia.

Related items

Passwords and recovery material are covered separately because they are recoverable failures. This item is grouped with them by moment rather than by severity, and it is the one to get right first.

Verified address set

Verified address set
[1]nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion
[2]nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
[3]nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

Run C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.

Other checks in this group

C-01critical
Browser obtained from the Tor Project and verified
Applies: First time setup (M1)
Passes when: Downloaded from the official site and the signature was verified before first run.
The Tor Browser you are using came from the Tor Project website and its signature was checked on first install.
C-02high
Security level set to Safest
Applies: First time setup (M1)
Passes when: Shield control reads Safest and no exceptions have been added.
The Tor Browser security level is set to Safest and has not been lowered for any site.
C-04high
Password generated, unique and stored locally
Applies: First time setup (M1)
Passes when: Generated, unique, stored in a local manager.
The account password was generated by a password manager, is used nowhere else, and is stored in that manager rather than remembered or written in a note.
C-05critical
Recovery phrase on paper, two factor with a key backup
Applies: First time setup (M1)
Passes when: Phrase on paper, two factor on, key backed up in a second location.
The recovery phrase is written on paper and stored away from the machine, PGP two factor is enabled, and the signing key is backed up offline.