I am looking for a DNS registrar that supports strong multi-factor authentication.

  • Does any DNS registrar support multi-factor?

  • Is this a legitimate need?

  • 5
    It absolutely is a legitimate need! Who can compromise your account at your DNS registrar can steal your domain, trivially divert all your resources that are found via DNS (e.g. mail MXes, web sites), and then change the DNSSEC keys and compromise all the DNSSEC-protected things (e.g. SSHFP, DANE), and more. Once DNSSEC becomes well deployed, the weak link in the authentication chain may well be DNS registrars, moreso than the ultimately trusted DNS root key. – Celada Dec 16 '12 at 4:42
  • Namecheap.com doesen't offer multi factor authentication, but it give you the option to totally disable the password recovery options of your account – Max Dec 20 '12 at 8:37
  • Legitimate indeed, see this: medium.com/p/24eb09e026dd – olafure Jan 29 '14 at 12:36
  • twofactorauth.org/#domains – VarunAgw Oct 1 '15 at 12:32

I'd say that this could definitely be a legitimate requirement. Control over DNS records for a domain can give a lot of power to an attacker (adding new hosts in a domain for a phishing attack or even redirecting a comapanies home page), so protecting it from attack is important and as with all publicly accessible high-value services, using 2-factor auth is good thing to consider.

As to providers that support it DNSimple is one that does.

protected by Community Nov 21 '15 at 12:30

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.