Secure the registrar
Use a unique password, two-factor authentication and company-controlled recovery methods.
Lock and monitor
Keep transfer lock enabled, protect the authorization code, limit DNS administrators and retain a zone backup.
Verify renewals
Open the registrar from a saved bookmark instead of urgent email links, and review ownership and recovery access twice a year.
