Two-factor authentication adds a second requirement to signing in, helping protect the domain account if its password is exposed. Set it up through the account’s security controls and keep a secure recovery plan so a lost device does not lock you out of an important domain.
Before you begin
- Use a unique password and supported second factor.
- Save recovery information securely.
- Protect the contact email account too.
Protect the account that controls the address
A domain account can control nameservers and other settings that affect a website or email service. Treat it as an important business account, even if the annual renewal cost is small. Use a unique password and the strongest supported sign-in method that fits your setup.
NameUK provides authenticator-based account protection. Complete the setup and confirmation yourself using the security page, and test a fresh sign-in. Do not send passwords, authenticator setup secrets or one-time codes in ordinary support messages.
Plan recovery while access still works
Save the recovery information supplied during setup in an appropriate secure place. Decide how an authorised person can recover access if a phone is lost or replaced. Storing the only recovery copy on the same lost device defeats that plan.
For a business, document who is responsible without publishing secrets in a shared domain inventory. Use the provider’s verified recovery route when needed. Do not assume a colleague can bypass identity checks because they know the domain name.
Secure the surrounding accounts too
The registrar account is one part of the domain’s control chain.
- Protect the contact email account that receives resets and notices.
- Protect an external DNS host if it manages authoritative records.
- Review website and email administration access.
- Remove obsolete supplier or employee access through supported controls.
- Recheck recovery arrangements after a device or staff change.
Keep security and renewal routines together
A well-secured account still needs accurate contact information and timely renewal. An affordable domain can be operationally important because customers use it in email, bookmarks and account recovery. Record the expiry date and budget owner alongside the security responsibility.
If a sign-in request or renewal message is unexpected, open the known site directly and verify it. A second factor is useful protection, but it does not replace careful review of the action you are authorising.
Prepared with AI-assisted drafting and illustration, then checked against the linked sources and NameUK’s current service. The artwork is conceptual; setup values must come from your own provider.
Further readingNCSC: turn on two-step verification ↗NCSC: phishing scams ↗NameUK registration and renewal prices ↗Extension rules and provider processes can change. Check the current registrar instructions before a registration, transfer or renewal.
Low-cost registration. Affordable UK renewals.
Register .co.uk for £9.99 for one year, with annual renewal currently £9.99. Or choose a new three-year .co.uk registration for £25.99. Check the selected name and term before payment. Future renewal prices can change.