An unauthorized transfer
Someone gets into the registrar account, unlocks the domain and starts a transfer. A registrar lock stops the request at the door; an alert tells you it was attempted.
Domain Protection
Your domain is the one asset you cannot re-download.
A website can be rebuilt from a backup. A mailbox can be recreated. A domain that is transferred out from under you is gone unless you can prove ownership and win it back. Domain Protection watches the domain itself, not just the site sitting on it.
Priced per domain, per year — add it at checkout or from My Products. No hosting plan required. Existing domains can be protected too.
-
Change alertsAn email when a high-impact setting moves.
-
Transfer lockUnauthorized moves are refused, not reversed later.
-
180-day activity logEvery recorded change, with a date and a user.
-
Expiry recoveryUltimate adds a 90-day window after a billing failure.
How domains are lost
Four failures. None of them look like a hack.
Most lost domains are not taken by a sophisticated attack. They are lost through a stale card, a shared login, an unchecked email address or a change nobody noticed until the site went dark.
A silent DNS change
The domain still resolves, so nothing looks broken. But the nameservers now point somewhere else, and email or traffic is being copied before you notice.
A card that quietly expired
The renewal email went to an address nobody reads any more. The domain lapses, the site disappears and the name goes to auction while everyone assumes someone else handled it.
A login that was shared
A former contractor, an agency or a family member still has the password. Nothing is stolen; the access was simply never removed, and one day it is used.
Two levels, one purpose
Protect the name, not just the website.
Both plans keep the domain locked and tell you when something important changes. Ultimate adds the recovery window most people only think about after they need it.
Full Domain Protection
The everyday guardrail for a domain you depend on.
- Email alerts when a high-impact change is made
- Protection against accidental or unauthorized transfers
- Activity log covering the last 180 days
- One-time password or two-factor approval for sensitive changes
- Auto-renew switched on when the plan is added
Ultimate Domain Protection
Everything in Full, plus a way back from an unexpected expiry.
- Everything included in Full Domain Protection
- Renew within 90 days if a billing problem caused the expiry
- No extra recovery fee for an unexpectedly expired domain
- The renewal itself is still payable at the normal rate
- Best fit for a domain carrying email, a store or a brand
Pricing is shown per domain in the cart before you pay. Some extensions restrict individual features; the cart lists what is available for the name you are buying. Domain Protection is separate from hosting security and does not replace it.
The activity log
If it changed, there is a line for it.
The log is the part people underestimate. When a domain breaks, the question is never “did something change?” — it is “what changed, when, and who did it?” The last 180 days answer that.
| Recorded action | Why it matters |
|---|---|
| DNS record added, edited or deleted | A single record can redirect mail or take a service offline. |
| Nameservers changed | The whole domain now points at a different provider. |
| Domain forwarding changed | Visitors can be sent somewhere you did not choose. |
| Contact details edited | The recovery address is the first thing an attacker changes. |
| Domain locked or unlocked | Unlocking is the step before a transfer. |
| Privacy level changed | Hiding or exposing registrant details has consequences. |
| Auto-renew switched on or off | This is how a domain is allowed to expire by accident. |
| Transfer started, accepted or sent away | The final step in losing control of the name. |
| Domain deleted | The one action with no undo after the grace period. |
The log is read-only evidence. It records the change; it does not reverse it. Recovery is a separate support process, which is why the alert matters more than the log.
What the alert actually does
It gives you the one thing recovery cannot: time. A transfer takes days. A DNS change propagates in minutes. The earlier you know, the more of the damage is still reversible.
- Sent to the account email — keep that address current and monitored.
- Approval can require 2FA — a stolen password alone is not enough.
- Logged even if approved — a legitimate change still leaves a record.
In plain English
What this is, and what it is not.
It is not Domain Privacy
Domain Privacy replaces the registrant name, address, phone and email shown in public WHOIS with substitute details. It protects your identity from being harvested. Domain Protection protects the domain from being moved, altered or lost. They solve different problems, and on eligible extensions you can — and should — use both.
It is not website security
A firewall, malware scan or SSL certificate protects the site and its visitors. Domain Protection protects the registration record. A compromised WordPress install does not become safe because the domain is locked, and a locked domain does not stop a plugin vulnerability.
It is not a backup
The activity log records changes; it does not restore your site, mailbox or DNS zone. Keep a separate backup of anything you could not reconstruct from memory.
Not every extension can use every feature
Some registries restrict transfer protection, renewal protection or privacy, and the rules differ by extension. Country-code domains are the usual examples. The cart shows what is available for the name you are buying before you pay, and support can confirm it for a domain you already own.
It does not replace account security
A unique password, two-factor authentication on the registrar account and a monitored recovery email are still the foundation. Domain Protection adds a layer on top of those habits; it does not excuse skipping them.
Questions
Before you add it.
Is Domain Protection the same as Domain Privacy?
No. Domain Privacy replaces the registrant contact details shown in public WHOIS with substitute details. Domain Protection guards the domain itself: it alerts on high-impact changes, keeps the transfer lock in place and records those changes in an activity log. Privacy hides who you are; protection stops someone else taking control.
Does it replace two-factor authentication?
No. Domain Protection can require a one-time password or two-factor code before a high-impact change is approved, but the account login still needs its own strong password and two-factor authentication. Use both.
What counts as a high-impact change?
Changes that could take the domain away from you or break the service attached to it: nameserver changes, DNS record edits, domain forwarding changes, contact detail edits, locking or unlocking the domain, privacy level changes, and transfers in or out.
Can every extension use every feature?
No. Some registries restrict transfer protection, renewal protection or privacy, and the restrictions differ by extension. The cart shows what is available for the name you are buying before you pay.
What happens if a card fails and the domain expires?
On Ultimate Domain Protection, a domain that expired because of a billing problem can be renewed within 90 days, and recovery of an unexpectedly expired domain does not carry an extra recovery fee. The renewal itself still has to be paid.
Can I add it to a domain I already own?
Yes. Add Domain Protection from My Products, or call us and we will apply it to the domains you choose. Auto-renew is switched on when the plan is added, so the protection and the registration renew together.
One less way to lose the business
Protect the name before you need the log.
Search for a new domain, or call us with the ones you already own. We will tell you which protection features your extensions actually support rather than selling you a feature the registry will refuse.
Call us, 24/7
(480) 624-2500
Sales and technical support, day or night — the number is answered around the clock.