REGEXVAULTv2.0
Finance/Tax & Registration
Verified Safe

US Social Security Number (SSN) Regex for JavaScript

/^(?!(?:000|666|9[0-9]{2})-)[0-9]{3}-(?!00-)[0-9]{2}-(?!0{4})[0-9]{4}$/

What this pattern does

This page provides a comprehensive, battle-tested regular expression for matching us social security number (ssn), ported and verified for JavaScript. Financial data validation has zero tolerance for false negatives — a missed invalid entry can corrupt downstream calculations. The snippet below is ready to drop into your JavaScript project — whether you're validating in an Express middleware, a Next.js API route, or a client-side form.

Javascript Implementation

Javascript
// US Social Security Number (SSN)
// ReDoS-safe | RegexVault — Finance > Tax & Registration

const usSocialSecurityNumberSsnRegex = /^(?!(?:000|666|9[0-9]{2})-)[0-9]{3}-(?!00-)[0-9]{2}-(?!0{4})[0-9]{4}$/;

function validateUsSocialSecurityNumberSsn(input: string): boolean {
  return usSocialSecurityNumberSsnRegex.test(input);
}

// Example
console.log(validateUsSocialSecurityNumberSsn("123-45-6789")); // true

Test Cases

Matches (Valid)
Rejects (Invalid)
123-45-6789000-12-3456
001-23-4567666-12-3456
899-12-3456900-12-3456
123-00-3456
123-45-0000
123456789
123-456-789

When to use this pattern

This pattern is drawn from the Finance > Tax & Registration category and carries a ReDoS-safe certification. That matters for JavaScript developers because especially critical in long-running Node.js event loops where a ReDoS vulnerability can block the entire process. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

SSNs are extremely sensitive PII. Never store in plaintext. Treat as a secret — use one-way hashing (bcrypt or Argon2) or tokenization for storage. Log masking is mandatory.

Technical Notes

Invalid SSN ranges: 000-XX-XXXX (area 000), 666-XX-XXXX, 900-999-XX-XXXX. Group 00 and serial 0000 are also invalid. The pre-2011 geographic assignment pattern is no longer used.

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern