Account
Use 2FA
Protect the registrar account, the email that recovers it, and every authorized admin.
Services
Make a domain harder to lose and easier to recover.
This is practical guidance, not a claim that any registrar setting is already active. Confirm each control inside the account that actually owns the domain.
Transfer
Keep locks on
Use registrar and transfer locks where the current registrar supports them.
DNS
Consider DNSSEC
Evaluate DNSSEC support and operational ownership before enabling a chain of trust.
Renewal
Protect the term
Maintain accurate renewal contacts and calendar reminders; do not assume auto-renew is active.
Changes
Watch for surprises
Unexpected verification emails, contact changes, DNS edits, or lock removals deserve immediate review.
Recovery
Document ownership
Keep registrar access, invoices, registrant details, and recovery contacts organized and current.
People
Limit permissions
Use named access and remove former staff or vendor access promptly.
If something changes
Pause, preserve evidence, and use the real owner account.
PLM can help scope support, but a public page cannot verify ownership or make a registrar change.