Authenticator app 2FA for domain registrars
A hijacked registrar account can move your domain and take your website and email with it. The registrars below let you add an authenticator app. Each guide covers where the setting is and how that registrar handles a lost phone.
Domain registrars · 53
101domain101domain 2FA works only with an authenticator app. Where to turn it on, the backup codes, and the ID check if you're locked out of your domains.
123 Reg123 Reg needs two settings for a code at every sign-in: an authenticator app as a verification method, then the 2-Step Verification toggle. Plus recovery.
20iAdd an authenticator app to My20i: where Security Details is, why 20i wants two devices, how to swap phones, and who to call if you are locked out.
Above.comAbove.com's Two Step Authentication guards DNS changes, domain pushes and EPP requests. How to set it up with an app, save backup codes and turn it off.- AézaAéza takes any RFC 6238 authenticator app, not only Google Authenticator. Where the setting is, how its backup codes work, and the Telegram option.
BegetBeget offers 2FA by email, paid SMS or a free authenticator app. Where TOTP is in the control panel, the 10 recovery codes, and what to do if you lose it.
ClouDNSClouDNS wants your contact details before 2FA and gives one Recovery Key, not backup codes. Set up an authenticator app, sign in, and recover a lost phone.- CombellProtect your Combell control panel with an authenticator app: where the setting is, the 15-day trusted browser option, and why backup codes are missing.
- ConstellixConstellix 2FA is turned on per user in Manage Profile and gives you one emergency key, not a list of codes. Setup, admin rules, and what to keep safe.
- DirectnicDirectnic's 2FA sits under Security Settings, and its help lists no backup codes: a lost phone means calling support. Setup, sign-in and recovery steps.
DNSimpleDNSimple gives you a single recovery code, and support can't turn off 2FA without it. Set up an authenticator app and keep that code where you can find it.
DomeneshopDomeneshop has no backup codes: its master key is your safety net. Where Login Security is, how to add TOTP, and how to view the key again later.- DreamHostDreamHost's help names only Google Authenticator, but any time-based app works. Where the setting is, which type to choose, backup codes and recovery.
DynadotDynadot asks for your authenticator code at sign-in and again each time you unlock the account. Setup steps, backup codes and the Lost Cellphone route.
DynuDynu 2FA protects Control Panel sign-ins but leaves your DDNS IP updates alone. Set it up with an authenticator app, save backup codes, and recover access.
easyDNSeasyDNS names its app option Google Authenticator, but any authenticator app works. Where the setting is, how it ties into ACLs, and the slow way back in.- EnomSet up Enom's Two-Step Verification with an authenticator app. The backup codes are the only documented way back in if you lose your phone, so save them.
EpikEpik puts its authenticator app option under Account > View Profile > Security. The steps, what Epik's help leaves out, and who to contact if locked out.- EuroDNSEuroDNS emails sign-in codes by default; an authenticator app replaces them. Where to turn it on, the 10 backup codes, and what EuroDNS leaves out.
- FasthostsFasthosts sets up 2FA per user, under My User or Manage users in the Control Panel. The steps, what we couldn't confirm, and what to do if locked out.
GandiGandi already emails you a code at every sign-in. Swap it for an authenticator app: where TOTP is, recovery codes, and the ID check if you're locked out.
GoDaddyGoDaddy splits 2FA in two: add an authenticator app as a verification method, then turn on 2-Step Verification. Plus backups and account recovery.
HiDriveHiDrive needs a confirmed email before 2FA, and WebDAV or rsync logins then need the code after your password. Setup, German labels, recovery.
HoverHover always asks for a second step at sign-in. Swap its email codes for an authenticator app, keep the single 16-digit recovery code, and get back in.- Hurricane ElectricHurricane Electric's free IPv6 account works with authenticator apps, but lose the codes and HE says there's no way back in. Setup, backup codes, recovery.
- IBM NS1 ConnectSet up NS1 Connect two-factor login with an authenticator app. It has no backup codes, so an account admin resets lost keys. IBMid and SSO logins differ.
- Internet.bsInternet.bs turns on email codes by default. How to switch your domain account to an authenticator app, what its help leaves out, and how to get back in.
- INWXINWX calls its 2FA Mobile-TAN, and it locks the API too. Where to turn it on, what to do with the key for scripts, and the ID check if you lose your phone.
IONOSIONOS gives you one 16-digit recovery code at setup, and it's the only documented way back in. Setup, saving that code, new phones and lockouts.
Joker.comJoker.com gives you one recovery key that works for a single sign-in, and you type it back before 2FA turns on. Set it up, then know how recovery works.
MonikerMoniker switches on email codes if you never choose a 2FA method. How to pick Standard 2FA with an authenticator app, why Treasury needs it, and recovery.
name.comOn name.com, Two-Step Verification blocks the API until you allow it. Set up an authenticator app, save backup codes and add a backup phone number.
NamecheapNamecheap allows one 2FA method at a time. Set up an authenticator app, keep your backup codes, and learn what a new QR code resets when you change phones.
Names.co.ukNames.co.uk shows its secret key only once and offers no backup codes. Turn on 2FA for the Online Control Panel and know the phone route if you lose it.- NameSiloNameSilo's 2FA is on the Account Maintenance page and its help mentions no backup codes, so save the key. Setup, Verify this computer, and the 2FA reset.
NetimProtect your Netim Direct domain account with an authenticator app: where the setting is, the one-time backup codes, and adding a second device.- No-IPTurning on No-IP 2FA is the only way to stop its email sign-in codes. Set up an authenticator app, keep the ten recovery codes, and plan for a lost phone.
- Nominet2FA is mandatory for registrars in Nominet Online Services. How to add an authenticator app, add or replace a device, and what to do after a lockout.
OpenproviderOpenprovider makes 2FA mandatory for control panel users. Where to turn it on, the backup codes it shows only once, and the ID check if you lose access.
OpenSRSAdd an authenticator app to your OpenSRS reseller login. Note that a recovery code turns 2FA off, and turning it off resets your password.- Pair DomainsPair Domains can't recover your 2FA key for you. Set up an authenticator app, save the recovery details it shows once, and see what to do if you lose them.
PorkbunTurn on Porkbun's app-based 2FA: where the switch is, the backup codes, why Authorized Users need it, and how recovery by email and phone code works.- Rebel.comRebel.com 2FA is mandatory and starts on text codes. How to switch to an authenticator app under Security, and why to keep a copy of the setup key.
RebrandlyRebrandly 2FA uses an authenticator app plus one-time backup codes, and it documents no recovery route without them. Setup, sign-in and what to save first.
Register365Register365 shows its setup key only once and mentions no backup codes. Turn on 2FA for the Control Panel, handle the country lock, and get back in.
Registro.brRegistro.br calls its 2FA the Token. Set it up with an authenticator app, keep the 10 recovery codes, and see why a password reset then works differently.
RucenterRucenter's help names only Yandex Key, but its 2FA uses a standard QR code and setup key. Where the setting is, what to type, and how recovery works.- Senko DigitalSenko Digital has two logins, the Client Area and the game panel, and each has its own 2FA. How to set up an authenticator app on both, and what to save.
SpaceshipSpaceship keeps 2FA in the Security Center app of your Launchpad. Set up an authenticator app, save the backup codes, and know what isn't documented.
Synergy WholesaleSynergy Wholesale turns on 2FA with email codes for every account. How to switch to an authenticator app, add a backup method, and get help if locked out.
united-domainsunited-domains asks for a callback phone number when you add an authenticator app. German labels, 9 backup codes, domain-action 2FA and lockout help.- WebcentralTurn on 2FA for the Webcentral Hosting Panel with an authenticator app. Its help lists no backup codes, so a lost phone means 2FA Removal with photo ID.
- Whois.comWhois.com documents an authenticator app for reseller accounts, while its customer help describes phone codes. Where to turn it on, backup codes, recovery.
Before you start
Other types of service
- Banks and credit unions14
- Investing and brokerage25
- Crypto exchanges and wallets78
- Payments, accounting and insurance76
- Developer tools107
- Hosting and cloud103
- Email30
- Messaging and social39
- Security, identity and VPN57
- Cloud storage and backup26
- Gaming and betting51
- Entertainment and creative tools26
- Marketing and sales74
- Productivity and remote work61
- Business tools and other services74
- Shopping and tickets23
- Phone, internet and utilities10
- Travel and transport13
- Universities and education32
- Government17
- Health15
- Smart home and devices19