diff --git a/lib/auth.js b/lib/auth.js
index 1a85fc17..3e1ad68c 100644
--- a/lib/auth.js
+++ b/lib/auth.js
@@ -7,7 +7,7 @@ import { clearCachedConfig, encryptValue, getMergedConfig, getNcurcPath } from '
 
 export default lazy(auth);
 
-function check(username, token, format = /^[A-Za-z0-9_]+$/) {
+function check(username, token, format = /^[A-Za-z0-9\-_.]+$/) {
   if (typeof username !== 'string') {
     throw new Error(`username must be a string, received ${typeof username}`);
   }