diff --git a/common/models/user.js b/common/models/user.js
index 0806d97e0b..1a577d0979 100644
--- a/common/models/user.js
+++ b/common/models/user.js
@@ -10,6 +10,12 @@ module.exports = function(User) {
   delete User.validations.email;
   // set salt factor for passwords
   User.settings.saltWorkFactor = 5;
+
+  User.validatesExclusionOf('username', {
+    inArray: blacklistedUsernames,
+    message: 'username is taken'
+  });
+
   debug('setting up user hooks');
   // send verification email to new camper
   User.afterRemote('create', function(ctx, user, next) {