Account Security

ZoneEdit now provides multiple methods to protecting your user account and everything within it.

For maximum security, we recommend users enable a combination of the security features we currently provide:

• 2-Factor Authentication
• Access Control List
• Failed Login Attempts
• Country Based Login Restrictions
• Activity Notifications

2-Factor Authentication
This feature requires that the user log in twice with the second login being an ‘authentication token’ that gets delivered to you either via Google Authenticator, SMS, or email. This is especially useful for users who like to use traditionally weak passwords.

You can get Google Authenticator for Android HERE.
You can get Google Authenticator for iOS HERE.

Please note that if you get locked out of your ZoneEdit account due to the 2nd Factor being lost, compromised, or unavailable, then the only way to get access is by contacting our support staff and providing the answers to your security questions.

Access Control List
It is possible to limit logins to your ZoneEdit account so that logins will only be accepted from network locations specified by you. This vastly improves security in the case where your account username and password are compromised, a third party may not be able log into your account and assume control of your domains if you have an Access Control List specified limiting logins.

Improperly formed Access Control Lists can result in locking yourself out of your ZoneEdit account. You should always test your ACLs using the TEST WITH CURRENT IP ADDRESS utility before committing them. If you are not sure how to proceed or do not fully understand the scope of this tutorial, you should contact support before enabling an ACL.

Remember, ACLs do not replace other security considerations, they enhance them. It is still your responsibility to secure your username and password as well as to select secure answers to your secret questions.

Country Based Login Restrictions
Login restrictions provide an additional layer of security for users by limiting which countries (as reported by GeoIP) a login request can originate from. Login restrictions will prevent access from any country not provided in the list below. This follows the filtering already available in your accounts ACL restrictions.

Geolocation is the identification of the real-world geographic location of an Internet-connected device (computer, phone, etc.). IP address geolocation data can include information such as country, region, latitude, longitude, and a variety of other data. ZoneEdit uses this technology to determine the originating country of the IP address attempting to log into the account, and restrict access based on your configuration.

Activity Notifications
This section allows for notification customization. You can get notified if:

• Someone makes a successful logins
• A domain within your account gets unlocked for transfer
• Updates are made to the ownership information of a domain name
• The nameserver for a domain is changed to another provider
• Any updates to the DNS settings of a domain is made
• This section also allows you to choose the delivery method of the notification.