Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

I am looking for a DNS registrar that supports strong multi-factor authentication.

  • Does any DNS registrar support multi-factor?

  • Is this a legitimate need?

share|improve this question
It absolutely is a legitimate need! Who can compromise your account at your DNS registrar can steal your domain, trivially divert all your resources that are found via DNS (e.g. mail MXes, web sites), and then change the DNSSEC keys and compromise all the DNSSEC-protected things (e.g. SSHFP, DANE), and more. Once DNSSEC becomes well deployed, the weak link in the authentication chain may well be DNS registrars, moreso than the ultimately trusted DNS root key. –  Celada Dec 16 '12 at 4:42 doesen't offer multi factor authentication, but it give you the option to totally disable the password recovery options of your account –  Max Dec 20 '12 at 8:37
Legitimate indeed, see this: –  olafure Jan 29 '14 at 12:36 –  VarunAgw Oct 1 at 12:32

3 Answers 3

I'd say that this could definitely be a legitimate requirement. Control over DNS records for a domain can give a lot of power to an attacker (adding new hosts in a domain for a phishing attack or even redirecting a comapanies home page), so protecting it from attack is important and as with all publicly accessible high-value services, using 2-factor auth is good thing to consider.

As to providers that support it DNSimple is one that does.

share|improve this answer

I just did a similar search across some name registrars and it seems that and GoDaddy both support 2FA, the former using the Verisign/Symantec VIP and the latter using SMS for US numbers only.

share|improve this answer

NameSilo also offers 2FA as well as DNS services.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.