NameBest
Cart 0

01

Domain account security and the transfer lock

Your domains are only as safe as the account that controls them and the email address behind it. Use a long unique password, protect the email address on your account, and keep the transfer lock on for every domain. With the lock on, nobody can move a domain away, even with the EPP code.

Secure your account step by step

1. Set a strong password

Open the account menu and choose Security. Click Change password and enter a long passphrase that you use nowhere else. A password manager makes this easy.

2. Protect your email account

Anyone who controls your account email can request sign in codes and read transfer emails. Turn on two step sign in at your email provider and keep its recovery options current.

3. Keep the transfer lock on

Open each domain and check the Transfer lock and EPP code tab. Transfer lock is on by default. Leave it on unless you are moving the domain right now.

4. Keep the registrant email working

Approval and change emails go to the registrant email address. A dead address means you miss warnings. Update it in the Registrant tab. See update registrant contact details.

5. Review your domains regularly

Check the Domains list for expiry dates, auto renew, privacy and lock status. Unexpected changes are a sign to act at once.

What the transfer lock does

  • It tells the registry to reject any transfer request for the domain.
  • It stays on until you switch it off yourself.
  • It does not stop DNS edits, renewals or privacy changes.
  • It is different from the 60 day transfer lock, which the registry applies after registration or an owner change.

Security emails we send

We email you when someone signs in with a code, when the password changes, when an EPP code is shown, when the transfer lock is turned off and when a registrant change is requested. If you did not do it, change your password and contact us.

I think someone else accessed my account. What should I do?

Change your password in Security, secure your email account and check every domain for changes. Write to [email protected] with the subject Account security and list the domains concerned. We lock the affected domains while we check.

A transfer started that I did not request. Can I stop it?

Reject it with the link in the transfer email, then turn the transfer lock back on. Read domain transfer status.

Is it safe to give a developer access?

Do not share your password. If a developer needs DNS changes, make them yourself or give them the records to add. For agencies, see domain management for agencies.