1. What is Two-Factor Authentication (2FA)?

Two-factor authentication (2FA) adds an extra layer of protection to your account. It requires you to verify your identity through two steps:

1. Your regular password.
2. A secondary verification code sent either to your email or generated through an authenticator app (like Google Authenticator).

2. What are my 2FA options at OnlyDomains?

We offer two options for 2FA:

• Authenticator App 2FA: You’ll receive a time-based code via an authenticator app, which provides added security. (recommended)
• Email-based 2FA: A one-time code will be sent to your registered email address every time you log in.

You can enable one or both methods.

3. How do I set up 2FA?

To set up 2FA on your OnlyDomains account:

• Log in to your account
• Go to Account Settings under the Account Details area on the left hand side.
• Choose either Authenticator App or Email-based 2FA

• Follow the on-screen instructions to complete the setup.
• If you set up the Authenticator option, ensure you save the backup key (as shown below) during the set-up process

You can return to the page later if you'd like to set up the second option as well.

4. What if I lose access to my 2FA device?

If you lose access to the device that generates your 2FA codes (e.g., your phone), don’t worry! Here’s what to do:

1. Use your backup key: When you set up 2FA, you were given a backup key. This key can be used to regain access to your account if you can’t use your 2FA device.
2. Email-based 2FA: If you set up both the 2FA Authenticator App and the Email-based 2FA, you will be able to still use the Email-based 2FA option to access the account.
3. Contact Support: If you don’t have your backup key or need additional assistance, reach out to our support team, and they will help you recover access to your account.

5. Can I disable 2FA if I lose access to my account?

If you lose access to your 2FA device, we can assist you with disabling 2FA to regain access to your account. This is a manual process and documents may be required.  Please contact our support team for help.

6. Who can I contact if I need help with 2FA or security features?

If you need assistance setting up 2FA, or any other security feature, our support team is here to help. Feel free to reach out to us via [support contact details].

7. What other security options are available at OnlyDomains?

In addition to enabling two-factor authentication (2FA), we recommend implementing the following security measures to further protect your account:

• Use Strong Passwords: Make sure your password is unique, complex, and difficult to guess. A password manager can help generate and securely store strong passwords.
• IP Whitelisting: For added protection, we offer IP Whitelisting, which restricts account access to specific, pre-approved IP addresses. This feature is ideal if you connect from the same static IP address. However, if you use a dynamically-assigned IP address (common for most home internet users) or require access while traveling, IP Whitelisting may not be suitable, as your IP can change.

If you have any questions or need assistance enabling IP Whitelisting, please feel free to contact our support team.

8. What is Registry Lock, and how does it help secure my domain?

Registry Lock is a service that prevents unauthorised changes to your domain settings, such as transferring your domain to another registrar without your consent. This is a paid service available for certain domain extensions, such as .com.

When Registry Lock is enabled:

• Any changes, including transfers or DNS settings, require manual authorization from you, adding an extra layer of security to ensure no one can hijack your domain.

To check if Registry Lock can be enabled on your registered domains, follow these steps:

• Go to the domain menu on the left-hand side of your dashboard.
• Navigate to Domains > My Domains.
• In this section, you will see your registered domains and the features supported for each domain. A padlock icon indicates Domain Lock.

• If the lock service is available for a domain, you can order it from this area. If the padlock icon is greyed out, the service is not offered for that specific domain extension.

Please contact us if you have any questions about the Registry Lock service.