In the release for 3.3, we should key on lowercase usernames: https://github.com/ulsdevteam/pkp-betterPassword/blob/1a7a29742e680da57a907398d53a0da298458e3c/classes/BadpwFailedLoginsDAO.php#L64 Core enforces the lowercasing here: https://github.com/pkp/pkp-lib/blob/edeb7094764d7c289796fef23116a916e80716a2/classes/user/DAO.php#L230 Also for 3.4 with usernames and emails: https://github.com/pkp/pkp-lib/blob/edeb7094764d7c289796fef23116a916e80716a2/classes/user/DAO.php#L230 https://github.com/pkp/pkp-lib/blob/edeb7094764d7c289796fef23116a916e80716a2/classes/user/DAO.php#L248