Domain security
This guide explains how to protect a domain from unauthorised transfers and from losing control of it, and which domain security features to check for.
Before you begin
- A signed-in Client Area account.
- Access to your domain's contact email address, which receives important notices.
Steps
- Keep your contact email current. Registry and renewal notices are sent to it. See Update contact details.
- Turn on account protection. Use a strong password and two-factor authentication where it is offered. See Account security.
- Check the transfer lock, if the domain offers one. A lock blocks transfers unless you unlock the domain first. Keep the lock on unless you plan a transfer.
- Check privacy protection, if it is offered. It hides your personal contact details from public lookups. Read what it covers before you choose it.
- Keep the authorisation code private. Share it only with the registrar you are transferring to, and only when you start a transfer.
- Renew before the expiry date. An expired domain can be lost. See Renew a domain.
Expected result
Your domain is locked against unwanted transfers, your contact email is current and the expiry date is in your diary.
If something goes wrong
- You receive a transfer request you did not start. Do not confirm it. Change your Client Area password and contact support.
- You cannot find the lock option. It may not be offered for your domain extension. Ask support.
- You shared an authorisation code with someone you do not trust. Contact support and ask about the next steps.
Related articles
Last reviewed
2026-10-27