How do I protect my account and domains from unauthorized takeover?

Domain hijacking — when someone gains control of a domain without the holder's consent — is rare, but can have serious consequences (losing your site, your email, or even having the domain resold by the attacker).

A few simple measures significantly reduce this risk:

• use a unique, strong password for your EUReg customer account, different from passwords used on other sites;
• never reply with login details to emails claiming to be from EUReg, RoTLD, or EURid (see Watch out for fake renewal invoices and I received an email about confirming the domain holder's details);
• keep the email address linked to your account up to date — it's your main recovery channel if you forget your password (see I forgot my account password);
• watch out for unexpected emails about domain transfers or ownership changes you didn't start — a legitimate transfer always requires your explicit confirmation;
• for domains critical to your business, periodically check in your customer account that the holder's details and nameservers are the ones you expect.

If you suspect your account access has been compromised, contact us immediately through the EUReg support section.