Security

Account and domain security

Features that are on, or ready to turn on, for every customer.

• Domain transfer lock is on after registration.
• Passwords are stored as a slow hash, not as plain text.
• Sessions use an httpOnly cookie.
• Two-factor sign-in can be required before a transfer or a nameserver change. Ask support to enforce it on the account.
• Privacy protection is optional and is explained before you pay.
• Registrant data for an active domain is kept because the registrar requires it. It is not sold.
• Abuse reports go to [email protected] and can suspend a service the same day.

We will not ask for your password by email. A real Reginova message about a transfer or an expiry comes from the address on the account.