Registry lock for protection against domain hijacking

What is registry lock?

Registry lock is a lock at registry level. It complements the standard protection at your domain provider by stopping unauthorised changes to items such as name servers, contact details or transfers until additional verification has taken place.

The changes covered and the unlocking process vary between top level domains.

Why does it protect against domain hijacking?

During a domain hijacking attempt, an attacker may try to change name servers or transfer the domain to take over web traffic and email. An additional registry lock means a compromised provider login may not be enough to complete the change.

This is particularly valuable for domains used for customer login, payments, central email or other critical services.

Registry lock for .se, .com and other extensions

For .se, the Swedish Internet Foundation describes protection against actions including redelegation, deregistration, holder changes and registrar changes. For .com, Verisign uses registry level statuses to prevent deletion, transfer and updates. Ordering and administration still vary between extensions and registrars.

• Review of your most critical domains
• Check of support at each registry
• Documented process for authorised changes

Protection without losing control

You decide which people may request changes and how verification should work. We help document the routine so planned changes can still be completed in a controlled way.