<h2>Introduction</h2>This policy provides guidance for Trustname customers to protect their domain names, DNS records, and associated services. By following these best practices and utilizing our built-in tools, you can minimize the risk of domain hijacking, email spoofing, and unauthorized access.<hr><h2>1. Secure Account Management</h2>1.1 Multi-Factor Authentication (MFA)Enable MFA for your Trustname account to add a second layer of login protection.Action: Go to Account Settings → Security to enable.1.2 Strong PasswordsUse passwords with at least 12 characters, including upper and lowercase letters, numbers, and symbols. Avoid reusing passwords from other services.1.3 Account LockoutAccounts are automatically locked after repeated failed login attempts to protect against brute-force attacks. You will receive instructions for secure account recovery.<hr><h2>2. Domain Registration Controls</h2>2.1 Registration VerificationTrustname verifies new domain registrations via email to prove ownership. In some cases, phone verification may be required for added assurance.2.2 WHOIS PrivacyActivate WHOIS privacy (where supported) to protect your personal details from being publicly exposed in the domain registration database.2.3 Domain LockingEnable registrar and registry locks to prevent unauthorised changes, updates, or transfers.Action: Go to My Domains → Security → Enable Locking Options<hr><h2>3. DNS Security</h2>3.1 DNSSEC (Domain Name System Security Extensions)Enable DNSSEC to ensure the authenticity and integrity of your DNS data and prevent DNS spoofing.Action: Activate DNSSEC from your domain management panel.3.2 DMARC, SPF, and DKIMProtect your domain against email spoofing by configuring SPF, DKIM, and DMARC records. These standards verify that email from your domain is legitimate.Action: Use the Email Security Wizard to set them up.3.3 CAA (Certification Authority Authorization) RecordsAdd CAA records to your DNS to specify which Certificate Authorities (CAs) are permitted to issue SSL certificates for your domain.3.4 SSL Certificates and HTTPS ConfigurationUsing HTTPS protects your website visitors and improves trust. Obtain an <a href="https://trustname.com/ssl-certificates" rel="noreferrer" target="_blank">SSL certificate</a> and configure HTTPS to:<ul><li>Encrypt traffic between your users and your server</li><li>Improve SEO and browser security compliance</li><li>Prevent data interception and tampering</li></ul>How to Implement:<ul><li>Use a free SSL certificate (e.g., Let’s Encrypt) or purchase a premium certificate from a trusted CA</li><li>Install the certificate on your hosting server</li><li>Ensure HTTP redirects to HTTPS are properly configured</li><li>Use HSTS headers where appropriate</li></ul>Trustname provides SSL purchasing options and DNS management support for CAA and HTTPS-related settings.<hr><h2>4. Monitoring and Reporting</h2>4.1 Suspicious Activity MonitoringMonitor your domains and account activity for unauthorised logins or changes. Trustname provides audit logs and alerts for sensitive actions.4.2 Abuse ReportingReport any suspected abuse, phishing, or malicious activity using our dedicated abuse channel.Contact: <a href="mailto:abuse@trustname.com" rel="noopener">abuse@trustname.com</a> or <a href="https://trustname.com/help/report-abuse" rel="noopener noreferrer" target="_blank">Submit Abuse Report</a> (preferred)4.3 Monitoring for Domain HijackingWe notify customers of critical changes (e.g., contact or nameserver updates) to detect potential hijacks. Use registrar locks and validate alerts immediately.<hr><h2>5. Security Training and Awareness</h2>5.1 Customer EducationReview our Help Center for practical security guides, DNS setup tutorials, and email protection advice.5.2 Internal TrainingTrustname’s staff receive ongoing security training and follow industry protocols to manage registrar systems securely.<hr><h2>6. ICANN and Registry Compliance</h2>6.1 Registrar AccreditationTrustname adheres to ICANN’s Registrar Accreditation Agreement (RAA) and its obligations for WHOIS accuracy, data escrow, and domain lifecycle processes.6.2 Registry Policy ComplianceWe ensure compliance with the policies of each TLD registry, including support for DNSSEC, Registry Lock, and abuse response mechanisms.<hr><h2>Summary of Recommendations</h2><table><thead><tr><th data-col-size="sm">Security Feature</th><th data-col-size="md">Recommended User Action</th></tr></thead><tbody><tr><td>Multi-Factor Authentication</td><td dir="ltr">Enable 2FA from Account Settings</td></tr><tr><td>Strong Passwords</td><td>Use secure, unique passwords</td></tr><tr><td>Account Lockout</td><td>Respond quickly to lockout notices</td></tr><tr><td>Registration Verification</td><td>Confirm ownership via email or phone</td></tr><tr><td>WHOIS Privacy</td><td>Enable for all eligible domains</td></tr><tr><td>Domain Locking</td><td>Activate to prevent unauthorised transfers</td></tr><tr><td>DNSSEC</td><td>Enable DNSSEC to secure DNS records</td></tr><tr><td>SPF/DKIM/DMARC</td><td>Add to protect your email communications</td></tr><tr><td>CAA Records</td><td>Specify trusted Certificate Authorities</td></tr><tr><td>SSL / HTTPS</td><td>Install an <a href="https://trustname.com/ssl-certificates" rel="noreferrer" target="_blank">SSL certificate</a> and configure HTTPS</td></tr><tr><td>Suspicious Activity Monitoring</td><td>Review DNS/account logs and respond to alerts</td></tr><tr><td>Abuse Reporting</td><td><a href="https://trustname.com/help/report-abuse" rel="noreferrer" target="_blank">Submit Abuse Report</a> for threats or abuse</td></tr><tr><td>Hijacking Detection</td><td>Follow up on change alerts and enable domain locks</td></tr><tr><td>Security Education</td><td>Use Help Center resources and guides</td></tr></tbody></table>

 Introduction  This policy provides guidance for Trustname customers to protect their domain names, DNS records, and associated services. By following these best practices and utilizing our built-in tools, you can minimize the risk of domain hijacking, email spoofing, and unauthorized access.   1. Secure Account Management  1.1 Multi-Factor Authentication (MFA)  Enable MFA for your Trustname account to add a second layer of login protection.  Action: Go to Account Settings → Security to enable.  1.2 Strong Passwords  Use passwords with at least 12 characters, including upper and lowercase letters, numbers, and symbols. Avoid reusing passwords from other services.  1.3 Account Lockout  Accounts are automatically locked after repeated failed login attempts to protect against brute-force attacks. You will receive instructions for secure account recovery.   2. Domain Registration Controls  2.1 Registration Verification  Trustname verifies new domain registrations via email to prove ownership. In some cases, phone verification may be required for added assurance.  2.2 WHOIS Privacy  Activate WHOIS privacy (where supported) to protect your personal details from being publicly exposed in the domain registration database.  2.3 Domain Locking  Enable registrar and registry locks to prevent unauthorised changes, updates, or transfers.  Action: Go to My Domains → Security → Enable Locking Options   3. DNS Security  3.1 DNSSEC (Domain Name System Security Extensions)  Enable DNSSEC to ensure the authenticity and integrity of your DNS data and prevent DNS spoofing.  Action: Activate DNSSEC from your domain management panel.  3.2 DMARC, SPF, and DKIM  Protect your domain against email spoofing by configuring SPF, DKIM, and DMARC records. These standards verify that email from your domain is legitimate.  Action: Use the Email Security Wizard to set them up.  3.3 CAA (Certification Authority Authorization) Records  Add CAA records to your DNS to specify which Certificate Authorities (CAs) are permitted to issue SSL certificates for your domain.  3.4 SSL Certificates and HTTPS Configuration  Using HTTPS protects your website visitors and improves trust. Obtain an SSL certificate and configure HTTPS to:    Encrypt traffic between your users and your server    Improve SEO and browser security compliance    Prevent data interception and tampering    How to Implement:    Use a free SSL certificate (e.g., Let’s Encrypt) or purchase a premium certificate from a trusted CA    Install the certificate on your hosting server    Ensure HTTP redirects to HTTPS are properly configured    Use HSTS headers where appropriate    Trustname provides SSL purchasing options and DNS management support for CAA and HTTPS-related settings.   4. Monitoring and Reporting  4.1 Suspicious Activity Monitoring  Monitor your domains and account activity for unauthorised logins or changes. Trustname provides audit logs and alerts for sensitive actions.  4.2 Abuse Reporting  Report any suspected abuse, phishing, or malicious activity using our dedicated abuse channel.  Contact: abuse@trustname.com or Submit Abuse Report (preferred)  4.3 Monitoring for Domain Hijacking  We notify customers of critical changes (e.g., contact or nameserver updates) to detect potential hijacks. Use registrar locks and validate alerts immediately.   5. Security Training and Awareness  5.1 Customer Education  Review our Help Center for practical security guides, DNS setup tutorials, and email protection advice.  5.2 Internal Training  Trustname’s staff receive ongoing security training and follow industry protocols to manage registrar systems securely.   6. ICANN and Registry Compliance  6.1 Registrar Accreditation  Trustname adheres to ICANN’s Registrar Accreditation Agreement (RAA) and its obligations for WHOIS accuracy, data escrow, and domain lifecycle processes.  6.2 Registry Policy Compliance  We ensure compliance with the policies of each TLD registry, including support for DNSSEC, Registry Lock, and abuse response mechanisms.   Summary of Recommendations Security FeatureRecommended User Action Multi-Factor Authentication  Enable 2FA from Account Settings  Strong Passwords  Use secure, unique passwords  Account Lockout  Respond quickly to lockout notices  Registration Verification  Confirm ownership via email or phone  WHOIS Privacy  Enable for all eligible domains  Domain Locking  Activate to prevent unauthorised transfers  DNSSEC  Enable DNSSEC to secure DNS records  SPF/DKIM/DMARC  Add to protect your email communications  CAA Records  Specify trusted Certificate Authorities  SSL / HTTPS  Install an SSL certificate and configure HTTPS  Suspicious Activity Monitoring  Review DNS/account logs and respond to alerts  Abuse Reporting  Submit Abuse Report for threats or abuse  Hijacking Detection  Follow up on change alerts and enable domain locks  Security Education  Use Help Center resources and guides 

Security Policy & Best Practices for Domain Name Owners