HackerOne currently supports the creation of multiple accounts under some circumstances, since legitimate researchers may have good reasons to submit under pseudonyms.
There are, however, uses of multiple accounts that are considered abuses of the community and the platform and are not permitted. The following behavior is explicitly banned and will lead to corrective action:
- Creating a new account to bypass rate limiting on your primary account (this includes e.g. Signal Requirements)
- Creating a new account to bypass a ban applied to your primary account
- Collusion across multiple accounts (e.g., intentionally submitting duplicate reports)
If you are unsure if any of your activity falls into one of the above categories, please contact us.