Keep your website domain name protected
Setting up a website for your business has become a quick and simple process. It’s so simple it can be easy to overlook the importance of knowing how to make sure it has the right security in place so cybercriminals can’t exploit or take over your website.
It can sometimes sound complex but a big part of it is making sure you keep your details and records up to date. An issue we see is unsecured domain names or domain name systems.
Your domain name is the address people use in their browser to look up your website, for example ownyouronline.govt.nz. By visiting/browsing your domain name, people’s device will query the domain name system (DNS) to turn it into the right IP address in the background so people can find your website. It is easier to remember a domain name to browse a website than an IP address.
If your domain name does not have protections in place, online attackers could take over your domain name. For example, you need to register you domain name. You typically do this for a certain period of time, generally a year or two. You need to renew it as you continue to need it. If your domain name registration expires, someone else could register it and start using it. You then have lost control of the domain.
A cybercriminal using your domain name could target your customers which can have a severe impact on your business's reputation. For example, they could use your domain name to impersonate your business and scam customers. It’s a good idea to set yourself timely reminders or set up automatic renewals before domain name registration expire.
It's also important to keep your DNS records up to date. DNS records are essentially the instructions attached to your domain name that sends people to the right place when they put in your web address. If your DNS records are not updated, they may still be pointing your domain name to an IP address or service provider that you no longer use.
For example, when you started your business, you may have been using a certain web host but have since moved to a different one. Updating your records and deleting old records including unused domains or sub domains allows customers to go to your new web host instead of the old one which you no longer have control over. It also ensures no one else can used the old records.
Another simple way to help protect your website is to create strong, unique passwords and turn on two-factor authentication for all accounts associated with your domain including your website, email, registrar, web hosting platform and nameserver provider.
Check out our guide for more tips on how to protect your website.