Reprint from: Domainsatcost.ca

Domainsatcost.ca know your assets are valuable to you, and we want you to know that your domain portfolio security is very important to us as well. 

In recent weeks the number of domain name hijackings and malicious acts on domain accounts has been on the steady rise. Here are some easy DOs and DON'Ts to ensure no one messes with your valuable domain name investments:

SECURITY DON'Ts...

1. DON'T SAVE PASSWORDS
Never save your passwords in files, programs or web browsers.

2. DON'T MASK THE OWNER
If you are using a privacy service, ensure it does not mask the registrant (owner) of the domain. If your name is taken from you and the registrant was masked, this can cause problems when trying to prove ownership and recover the domain.

3. DON'T USE FREE EMAIL
Never use a free email address such as Yahoo, Hotmail, or Gmail on your account or listed in your WHOIS data. These addresses can easily be hacked and your account compromised.

4. DON'T KEEP EMAILS FROM YOUR REGISTRAR
Never leave any emails from your registrar in your email account, especially emails containing your login information. These emails should be forwarded to an email address that does not appear in the WHOIS and is not listed on your account. Make sure you delete your sent folder after forwarding the emails.

5. DON'T RESPOND TO QUESTIONABLE EMAILS
Never respond to suspicious emails or click on suspicious links. If you receive a questionable email that looks like it is from your registrar, contact them to confirm the source before responding to the email.

6. NEVER LET SOMEONE ELSE REGISTER YOUR DOMAINS
Always register your own domains.. Do not let a web designer or hosting company register your domains for you. Never give ownership or control of your domains to anyone.

SECURITY DOs...

 1. DO GET INFORMED
Choose your registrar wisely. Before choosing a registrar, find out about their security processes and what their control panels offer in the way of security options.

2. DO INTRODUCE YOURSELF
Make sure your registrar knows your business model. If you don't frequently transfer or sell domains, this information can help them identify suspicious activity in your account. Also, dealing consistently with the same account representative helps ensure they know you and your business.

3. DO KEEP YOUR INFO UP-TO-DATE
Always ensure your account information and WHOIS information is up-to-date.

4. DO LOCK UP
Keep your domains on registrar lock and auto-renew, if offered by your registrar.

5. DO KEEP RECORDS
Maintain your own records outside of your registrar systems. Record all the domains you own, when they were registered, and where they were being managed. This information will prove useful if you need to prove ownership and recover your domains.

6. DO HELP YOUR REGISTAR HELP YOU
Provide your registrar with a copy of your company letterhead to keep on file. Many hijackings are attempted by sending forged faxes on fake letterhead. Having a reference point can help your registrar protect your account.

7. DO USE YOUR RESOURCES
Use all the security tools your registrar has made available to you. If you have the ability to prevent domains from being unlocked online, and to prevent automated authorization code retrieval, use these functionalities.

Most importantly, at the first sign of a possible problem, contact your registrar IMMEDIATELY.