Sign-in security
Password and a second step. We write about every sign-in from a new device.
Second sign-in step
Loading…
We don’t use SMS for sign-in — only for notifications: a phone number is easy to hijack.
Email and password
After changing your password or email, domain transfers are unavailable for 72 hours: no transfer code is issued meanwhile. That way nobody can take a domain right after a break-in.
Sessions
Loading…
A session lives for a limited time: we close inactive ones ourselves.
If you lose access
Confirm by email: we reset the second step after 24 hours, notifying all your contacts.
An ID document and account history; 72 hours of waiting, confirmed by a second person.
A request on letterhead, a state register check, 72 hours and two operators.
We never verify identity by phone. When in doubt, we refuse — even if you really are the owner: better to wait than to lose the domain.
How to recover access