Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

I am looking for a DNS registrar that supports strong multi-factor authentication.

  • Does any DNS registrar support multi-factor?

  • Is this a legitimate need?

share|improve this question
It absolutely is a legitimate need! Who can compromise your account at your DNS registrar can steal your domain, trivially divert all your resources that are found via DNS (e.g. mail MXes, web sites), and then change the DNSSEC keys and compromise all the DNSSEC-protected things (e.g. SSHFP, DANE), and more. Once DNSSEC becomes well deployed, the weak link in the authentication chain may well be DNS registrars, moreso than the ultimately trusted DNS root key. – Celada Dec 16 '12 at 4:42 doesen't offer multi factor authentication, but it give you the option to totally disable the password recovery options of your account – Max Dec 20 '12 at 8:37
Legitimate indeed, see this: – olafure Jan 29 '14 at 12:36 – VarunAgw Oct 1 at 12:32

1 Answer 1

I'd say that this could definitely be a legitimate requirement. Control over DNS records for a domain can give a lot of power to an attacker (adding new hosts in a domain for a phishing attack or even redirecting a comapanies home page), so protecting it from attack is important and as with all publicly accessible high-value services, using 2-factor auth is good thing to consider.

As to providers that support it DNSimple is one that does.

share|improve this answer

protected by Community Nov 21 at 12:30

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.