A domain connects your website and business email. Treat registrar access as part of your working infrastructure. Assign responsibility for renewal, recovery and DNS changes before launch. ACCOUNT ACCESS Use a separate strong password and multi-factor authentication where supported. Keep recovery codes in a controlled location. Team members should use individual accounts with suitable permissions rather than sharing a password in chat. RENEWAL AND CHANGES Record the expiry date, an accountable owner and a backup contact. Before editing DNS, preserve the current configuration and identify the records needed by email and the website. Registrar security does not replace application security. EMAIL AND TRANSFER Do not pay an unfamiliar renewal notice merely because it sounds urgent. Verify it through your known registrar account. Confirm transfer requirements before a transaction. ICANN recommends MFA and protecting registration account information. Source: https://www.icann.org/en/blogs/details/do-you-have-a-domain-name-heres-what-you-need-to-know-30-4-2020-en