A hijacked or expired domain takes everything attached to it down. These settings help reduce that risk, all under the domain’s tabs in Domains.
WHOIS privacy
Registration normally publishes your contact details in the public WHOIS database. Privacy protection replaces them with proxy details — less spam, less phishing. It’s included free with every registration and transfer, on by default; toggle it on the domain’s Security tab. Details: WHOIS privacy.
Transfer lock
Blocks transfers until you explicitly disable it. Keep it on for every domain you’re not actively moving — disabling it is step one of a legitimate transfer, and of a hijack.
DNSSEC
DNSSEC lets resolvers detect spoofed DNS answers. Your DNS host must sign the zone first. For domains registered through SetCloud, the Security tab accepts DNSKEY values supplied by your DNS host: flags, protocol (3), algorithm, and public key. DS digest records are not accepted by this form. Publishing a key does not turn on zone signing. For a domain registered elsewhere, manage DNSSEC with that registrar.
Auto-renewal
Renewal tab → toggle auto-renewal. The platform attempts renewal before expiration. Keep sufficient credits and a current payment method, and check renewal notices and status; a failed renewal can still lead to expiry.
If a domain expires anyway
Expiry, renewal grace, redemption, and release dates vary by extension and registrar status. There is no universal 30- or 60-day recovery window. Check the domain’s displayed expiry date and renewal status before it expires. If it has expired, contact support promptly to confirm whether renewal or paid restoration is still possible; recovery is not guaranteed.
The checklist
- WHOIS privacy: on (included free — nothing to configure beyond leaving the default)
- Transfer lock: on
- Auto-renewal: on for anything you care about
- Account: strong password plus 2FA
- Contact email: current, so renewal notices reach you