Domain Guard is an optional security extension for IONOS packages.
What threats are domains exposed to?
Unauthorised access to data or the manipulation of data in connection with a domain registration can have considerable consequences. For example, a temporary loss of control over a domain may lead to a change in the DNS-configuration ("domain hijacking") and redirect Internet traffic to other (possibly) malicious targets.
In addition, unauthorised access to administrative domain functions can be used to change owner data and thus take over the domain illegally.
How you can prevent a possible loss of control over your domain with Domain Guard
Prevent Unwanted Changes
When enabling Domain Guard for a domain, important administrative actions and settings for that domain can only be changed by people who have access to an email address you specify. This prevents third parties from taking over your domains or making changes without your consent, even if they have gained access to your IONOS account.
If Domain Guard is active, the following user actions are locked:
- Changing the domain contact (owner change)
- Changing the name servers
- Changing Domain Privacy Settings
- Changing the DNSSEC Settings
- Deactivation of the transfer lock
- Deactivation of automatic domain renewal
In addition, when Domain Guard is activated, you reduce the risk of losing a domain unintentionally since the domain cannot expire accidentally and therefore be deleted from the registry.
DNSSEC Ensures That Your DNS Settings Cannot Be Changed
With the optional DNS security extension DNSSEC, you can also protect your DNS settings from manipulation. For this purpose, they are provided with a digital signature in order to guarantee the authenticity of the data in DNS queries.
For example, DNSSEC helps to ensure that the officially stored IP address is returned for a requested domain name. So-called cache poisoning attacks and DNS spoofing, with which your visitors can be redirected to foreign (possibly) malicious targets, are made much more difficult.
An example: If you enter the domain of your online banking portal into the browser, DNSSEC can ensure that the computer connects to the web server of the online banking portal with the IP address stored and published by the bank. It is no longer possible for third parties to infiltrate a false IP address, which could then hide an imitation of the online banking portal.
Simple Proof of Domain Ownership
Due to the current data protection regulation, the registration data of a domain can no longer be determined completely by WHOIS queries.
Sometimes, however, it may be necessary to provide third parties - such as banks or authorities - with proof of domain ownership. If your contract has a Domain Guard subscription, you can download a document with the registration data of your domain in a PDF file from your IONOS account at any time and free of charge.
How to Use Domain Guard
Since Domain Guard is a paid, additional feature, you must first add Domain Guard to your package. Afterwards you can use it with all domains in your package.
The following step-by-step instructions show you how to use the different functions of Domain Guard: