Should Offer 2FA

Yesterday morning, I wrote about the need for GoDaddy to add 2 factor authentication (2FA) at Afternic to enhance account security. While we are discussing account security, I also think it is important for to offer its customers a form of 2FA for account logins.

The potential security issues at and Afternic are different, but the ramifications are serious on both platforms. If someone would gain access to my account via the password, they would have access to all of my domain name sales and acquisitions that have been transacted via Similarly, if someone gains access to a domain broker’s account, they would have access to client domain name sales data.

If someone gained access to an customer account, they could see current bank account information and could also change bank account information. I do not believe this is a major threat, though, for two reasons. For one,  the account holder would be notified of the update via email and would be able to contact support or log in to remove that bank account information immediately or before the next transaction if done fraudulently. In addition, if a new bank account is added as a default, the person who made the change would be easier to identify.

In theory, a hacker who has stolen a domain name and has account access at could also facilitate transactions to create a paper trail of legitimacy for those stolen domain names. This is a bit far fetched and would be pretty unlikely from my perspective.

Domain name sales data is quite valuable, especially when it involves third parties who have not authorized the release of this data. I think should add a form of 2 factor authentication, allowing its customers to add a layer of login security for their accounts. The threat may be limited to data, but domain name sales data is valuable, especially when it spans many years. One scary thing is that if someone did gain unauthorized access to an account, perhaps a reused or easy password, the account owner would likely have no idea if no changes were made or transactions were started.

Obviously, people should use unique and complex passwords at each website where they have an account. Unfortunately, many people still reuse passwords at different websites or they have easy to guess passwords. I think 2 factor authentication can help reduce this risk, and I would like to see start offering 2FA.

Elliot Silver
Elliot Silver
About The Author: Elliot Silver is an Internet entrepreneur and publisher of Elliot is also the founder and President of Top Notch Domains, LLC, a company that has closed eight figures in deals. Please read the Terms of Use page for additional information about the publisher, website comment policy, disclosures, and conflicts of interest. Reach out to Elliot: Twitter | Facebook | LinkedIn


  1. All it takes is one hack and their reputation goes down the drain.

    Magna cum laude
    Graduate of Domain King Academy

    MBA-My Big Ass(all of you have one)
    PHD-people having dickheads

Leave a Reply

Recent Posts Announces 2023 Master of Domains

During the NamesCon conference today, announced its Master of Domains winners. The annual award celebrates "the highest grossing domain name brokers for deals...

How to Buy a Domain Name That is Owned by Someone

For a domain investor, buying a domain name is second nature. Investors hand register domain names, purchase domain names via expiry and private auctions,...

My 2023 Domain Industry PMC Jersey

For a number of years, I have created a domain industry Pan-Mass Challenge jersey to raise funds for Dana-Farber Cancer Institute. Many domain industry... Profitably Resold for 8 Figures

In March of this year, I reported on the sale of The domain name was acquired by HubSpot Co-Founder Dharmesh Shah for more...

First Look at my 2023 Domain Industry PMC Jersey

This August, I will be riding in my 10th Pan-Mass Challenge ride to raise funds for Dana-Farber Cancer Institute. I will be riding...