What Domain hijacking means
A hijacked domain can send your visitors and email to criminals. Protect the registrar account with MFA, keep contact emails current, and enable registrar lock. Make sure the domain is in an account your business owns.
Why it matters for your website
If someone takes over your domain, they control your website and email, and can intercept customer messages or password resets. Getting it back can take a long time and require legal or registrar help. A few simple account protections prevent most cases.
Example
A former employee's reused password lets an attacker log into a bakery's registrar account. They point the domain at a scam page until the owner proves ownership and regains control.
Tips
- Turn on two-factor login for your registrar account.
- Enable registrar or transfer lock on every domain you own.
- Keep the registrar contact email on a separate, secured address you check often.
Common mistakes
- Registering the domain in a vendor's or employee's personal account instead of the business's.
- Ignoring registrar emails about contact changes or transfer requests.
Questions about Domain hijacking
What is Domain hijacking?
When an attacker takes control of a domain, often through a compromised registrar account, and redirects the site or email.
How do I get my domain back if it was hijacked?
Contact your registrar right away with proof of ownership, such as invoices and account history. If it was transferred, the registrars and dispute processes may need to get involved.
What is a registrar lock?
It is a setting that blocks transfers to another registrar until you turn it off, which stops many unauthorized transfers.
