Domain security

.box domains offer users exceptional control over their domain security. However, this also means users are responsible for their own security.

Below is an overview of best practices for securing your .box domain, as well as steps to take if you've lost access to your domain.

Securing Your .box Domain

Your .box domain is stored in your wallet as an NFT. Keeping it secure requires careful management of your private key and wallet access. Here are some industry best practices to protect your .box domain:

• Never share your private key or seed phrase. This is the single most important rule of wallet security. If someone gains access to your private key, they can take control of your domain.

• Use a hardware (cold) wallet for high-value domains. Hardware wallets like Ledger or Trezor provide an extra layer of security by keeping your private key offline.

• Store your seed phrase securely. Write it down and keep it in a safe location. Written paper notes, or better yet, metal plate engravings, are recommended. Never store it in cloud storage, email, or on a device connected to the internet.

• Beware of phishing attacks. Scammers may send fake emails or messages pretending to be from my.box or other trusted platforms, attempting to trick you into revealing your private key. Always verify website URLs before entering any sensitive information.

• Monitor your domain and wallet regularly. If you notice unauthorized activity, act quickly to secure your assets.

Recovering a Lost or Stolen .box Domain

If you have lost your .box domain, it may be recoverable. Executing domain recoveries is a labor-intensive activity that involves some risk for us at My.box and therefore, the fee for domain recovery is $240 USD per domain. ($120 USD is for the domain name renewal, with a facilitation fee of $120 USD).

To request domain recovery, email us at [e-mail].

My.box reserves the right to decline recovery requests at our sole discretion. Submitting a request does not guarantee recovery, and all recoveries are subject to verification and security review.