Category: Security

If you use Google Authenticator, you can export two-factor authentication setups. You can use this feature if you want to use two-factor authentication on multiple devices or if you want to get a recovery QR code after two-factor authentication is already set up. You can follow these steps to export the setup:

1. Launch Authenticator
2. Tap … in the top menu
3. Select Export accounts
4. Select Continue
5. The default setting is to export every code on the device. If you want to skip some codes, uncheck them
6. Select Export
7. You can scan the QR code on another device, or you can take a screenshot of the QR code.
8. After scanning or taking a screenshot, select Next
9. If you want the codes on multiple devices or want a recovery code, select to Keep all exported accounts
   If you are getting ready to replace your device, select Remove all exported accounts
10. Select Done. If you are removing accounts, you will be prompted to confirm the removal

You can follow these steps to unlock a domain that has been locked:

1. Log into the Domain Name Management System
2. Click the domain you want to unlock
3. Click Unlock Your Domain
4. Click Unlock

We will send an email to the Account Contact address. The email includes additional steps to follow. Unlocking will require submitting proof of identity to us.

If a domain is not locked and you just want to allow transfers, you can follow these steps:

1. Log into the Domain Name Management System
2. Click the domain you want to update
3. To allow transfers, uncheck the box labeled Automatically Reject Outbound Transfers, and click Modify

Do you want extra security beyond Two-Factor Authentication, preventing transfers, and locking domains?

We can add an additional security question to your account. We would need to call you and get the correct answer to the question before we would make any changes to your account and domains. As an example, if somebody sends us documentation authorizing us to change the Registrant email address, we would still call you and require the correct answer to the security question before we would change the address.

Please contact us if you want to add an extra security question.

If you want to protect your domain, we have a setting to automatically reject outbound transfers. When you register a domain or transfer it to us, there is a checkbox to enable this setting. It is checked by default, so unless you uncheck it, you are already protected from unauthorized transfers.

You can change the setting at any time by following these steps:

1. Log into the Domain Name Management System
2. Click the domain you want to update
3. To allow transfers, uncheck the box labeled Automatically Reject Outbound Transfers, and click Modify
   To prevent transfers, check the box labeled Automatically Reject Outbound Transfers, and click Modify

Domain Locking

If you want more security, we allow you to lock domains. Locking prevents transfers and any changes to the name servers or contact information. Unlocking a domain involves a multi-step verification process and requires you to send us verification before the domain can be unlocked. Most unlocking requests can be completed within one business day, but we can take up to five days to verify a request to unlock a domain.

You can follow these steps to lock a domain:

1. Log into the Domain Name Management System
2. Click the domain you want to lock
3. Click Lock Your Domain
4. Agree to the terms of service, and click Lock
5. Read the warning message, and click Yes

Information on unlocking a domain can be found in this Knowledge Base Article.

We offer two-factor authentication as a way to keep your account more secure.

An account name and the associated password are required to log into an account. Two-factor authentication adds an extra level of security to the login process. After entering the account name and password, you will need to enter a single-use authentication code.

There are free authentication apps like Authy (which is available for Android and iOS) and Google Authenticator (which is available for Android and iOS). Most password management apps support two-factor authentication.

Codes cannot be sent by email and cannot be sent by a voice phone call.

Please follow these steps to turn on two-factor authentication:

1. Log into the Domain Name Management System
2. Select Preferences from the drop-down navigation menu
3. Select Two Factor Authentication
4. Select Enable
5. Use your authentication app to scan the QR code
6. Save your recovery information
7. Enter the code from your app, and select Confirm

Setup Notes

1Password has a two-factor authentication setup guide. LastPass has a two-factor authentication setup guide. Please note: setting this up requires logging in to LastPass through their website, not the desktop app.

If you want to use a YubiKey, please visit their support page for instructions.

If You Lose or Replace Your Phone

Depending on the app you use, you might be able to access codes on a new phone, or you might need to use your QR code or recovery key to set it up on the new phone. If you app does not have codes for us, we cannot provide a code or key. Those can only be obtained during the set up. If you don’t have recovery information, we will need to turn off two-factor authentication if you want to log in.

If you know you are going to replace your phone, you can export settings from Google Authenticator and then set them up on the new phone. Please visit our page about Exporting Authenticator Setups.

Disabling Two-Factor Authentication

If you can log in, you can disable it from Preferences. If you cannot login, please contact us. We will need to verify your identity before we can turn off two-factor authentication.

If you do not remember your account name or password, you can enter your domain in our password reset form. This will send an email to the Account Contact email address. The email will include the account name and a single-use link to set a new password.

To keep your account secure, we can only send the password reset email to the Account Contact email address.

After you set a new password, you can follow these steps to change the password:

1. Log into the Domain Name Management System
2. Select Preferences from the drop-down navigation menu
3. Enter the current password, new password, and confirm the new password
4. Click Update Password
   

If the Account Contact Email Address Does Not Work

If you don’t remember your password and the Account Contact email address will not work, we will need to verify your identify before we can send the login information to another email address.

Depending on the circumstances, we may require documentation and/or phone verification in order to change the Account Contact email address. Please contact us for more information.