Your digital identity is the collection of names, accounts and addresses that represent you online. Your domain and the email built on it often sit at the centre, because they are used to sign in to, and reset, almost everything else.
Secure the accounts that control everything
- Use a unique, long password for your registrar, email and hosting accounts. A password manager makes this practical.
- Turn on two-factor authentication wherever it is offered, preferably with an authenticator app or security key rather than text messages.
- Keep the recovery email and phone number on each account current.
Lock your domain
Most registrars offer a transfer lock that prevents the domain from being moved to another registrar without your approval. Leave it on unless you are deliberately transferring.
Protect your email
Set up SPF, DKIM and DMARC records, as described in our professional email guide. They make it much harder for someone to send messages that pretend to come from you.
Watch for phishing
Be cautious about messages claiming your domain is about to expire or be “listed” somewhere, especially if they ask you to pay through a link. Sign in to your registrar directly, rather than through the link, to check.
Claim your name consistently
Use the same name, or a close variant, for your domain, email and main social profiles. Consistency helps people recognise the real you and makes impersonation easier to spot. Registering obvious alternative domains can prevent confusion.
Keep your own copy
Platforms can close accounts or change their rules. Keep copies of your important content, and link your profiles back to your own domain so it remains the stable centre of your presence.
Mind what is public
Registration data for many domains is redacted by default, but not for every extension. Ask your registrar what is shown publicly, and use privacy services where they are available.