diff --git a/avatar/conf.py b/avatar/conf.py
index ed28b18..2af38ab 100644
--- a/avatar/conf.py
+++ b/avatar/conf.py
@@ -19,7 +19,7 @@ class AvatarConf(AppConf):
     THUMB_QUALITY = 85
     HASH_FILENAMES = False
     HASH_USERDIRNAMES = False
-    EXPOSE_USERNAMES = True
+    EXPOSE_USERNAMES = False
     ALLOWED_FILE_EXTS = None
     CACHE_TIMEOUT = 60 * 60
     STORAGE = settings.DEFAULT_FILE_STORAGE
diff --git a/docs/index.txt b/docs/index.txt
index 3dae829..d6128ce 100644
--- a/docs/index.txt
+++ b/docs/index.txt
@@ -124,7 +124,7 @@ appear on the site. Listed below are those settings:
 
     Puts the User's username field in the URL path when ``True``. Set to
     ``False`` to use the User's primary key instead, preventing their email
-    from being searchable on the web. Defaults to ``True``.
+    from being searchable on the web. Defaults to ``False``.
 
 .. py:data:: AVATAR_FACEBOOK_GET_ID