Your domain name is more than just a web address. It's how customers find your website, how they email you, and how they recognise your brand. It's your digital identity — and for many businesses, it's the single most critical asset they own online.
But what happens when something goes wrong? A forgotten renewal, an unauthorised change, a security breach, or an email spoofing attack can disrupt your business in ways you never expected.
The good news? GoDaddy protects your domain from the moment you register it – from free WHOIS domain privacy, to DMARC and DNS security, plus more. And if you want complete visibility and control, Domain Ownership Protection (DOP) transforms your Activity Log into a command centre for greater peace of mind.
Let's break down the exact features you get with your domain — for free — and what DOP adds on top.
What security features do you get free with your GoDaddy domain?
When you register a domain with GoDaddy, here are the free foundational security features that you’ll receive right away at no extra cost:
Free domain WHOIS privacy (where available)
What it is: When you register a domain, your contact information (name, address, phone number) becomes part of the public WHOIS database. Domain privacy replaces your personal details with proxy information.
What GoDaddy does: For eligible domains, we include free domain privacy, keeping your personal information hidden and reducing spam, scams, and unwanted solicitations.
Free domain transfer lock (registrar lock)
What it is: A domain transfer lock prevents anyone from moving your domain to another registrar without your explicit approval.
What GoDaddy does: Every domain you register comes with transfer lock enabled by default. This protects against:
- Unauthorised transfers if someone gains access to your account
- Social engineering attacks where bad actors try to trick registrars into releasing your domain
- Accidental transfers due to phishing or compromised credentials
You don't need to buy anything extra. The domain transfer lock is automatically applied from the moment you register.
Free email impersonation protection (DMARC)
What it is: DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that helps prevent scammers from sending emails that appear to come from your domain.
What GoDaddy does: We automatically add a DMARC record to your DNS settings with a quarantine policy. This means:
- Email providers (Gmail, Outlook, Yahoo, etc.) can verify that emails claiming to be from your domain are legitimate
- Suspicious emails that fail authentication are automatically quarantined — not delivered to your customers' inboxes
- You get baseline protection against email spoofing and phishing from day one
Free domain hijack protection (DNSSEC)
What it is: DNSSEC (Domain Name System Security Extensions) adds a layer of verification to your domain’s DNS records so visitors are directed to the real destination associated with your domain — not a fake site created by an attacker.
What GoDaddy does: We make DNSSEC available for eligible domains so you can add extra protection against DNS hijacking and spoofing. Once enabled, DNS responses can be validated to help ensure customers reach your legitimate website and services.
Free two-factor authentication (2FA) security
What it is: Two-Factor Authentication (2FA), also called 2-Step Verification, adds an extra layer of security to your GoDaddy account by requiring a second form of verification in addition to your password.
What GoDaddy does: We support 2FA options such as one-time codes sent to your phone, email, or authenticator app, based on the login scenario. Even if someone gets your password, they still can’t access your account without that second verification step.
Free SSL/HTTPS – when connected to eligible GoDaddy Website Hosting1
What it is: SSL (Secure Sockets Layer) enables HTTPS, which encrypts the connection between your website and your visitors. This helps protect sensitive information and shows customers that your site is encrypted.
What GoDaddy does: When your domain is connected to eligible GoDaddy Website Hosting products, SSL/HTTPS is included to help encrypt your site traffic and build trust with visitors without requiring separate setup.
Why consider Domain Ownership Protection?
If all these great things mentioned above are already free, why would you need anything more?
Because protection and visibility are two different things.
The free features included with your domain work in the background. Domain Ownership Protection adds enhanced security features to the free ones that you already have. These enhanced features include a domain security control centre with real-time alerts to your phone and a monitoring service that watches over your domain.
Here's what changes when you add DOP:
| Feature | Free with domain | With Domain Ownership Protection (DOP) |
|---|---|---|
| DMARC DNS record | ✅ Auto-configured | ✅ Plus see which servers are sending email as you, mark them safe, or block them with one click |
| High-risk action protection | ❌ | ✅ 2SV verification required for transfers, DNS changes, contact updates |
| Transfer lock | ✅ Enabled by default | ✅ Plus 2-step verification required before ANY high-risk action |
| 90-day renewal grace period | ❌ | ✅ (Ultimate plan only) Extra protection against accidental expiration. If your payment method expires before your next renewal, we’ll hold onto your domain for 90-days so no one else can get it before you to fix the issue. |
| Email and website health insights | ❌ | ✅ See what's linked to your domain and what needs attention |
| DNSSEC enablement | ✅ Available on configuration | ✅ Easy one-click activation from your security control centre |
| Activity Log with insights | Basic free insights only | ✅ Full visibility into all domain activity, security status, and health |
| Real-time alerts | ❌ | ✅ Notifications when critical changes are attempted |
Our free domain features help to protect your domain at a foundational level. DOP gives you the visibility, control, and advanced insights that business-critical domains deserve.
The Activity Log: Your domain's security command centre
The Activity Log is where everything comes together. Think of it as the security camera footage for your domain — showing you everything that's happened, everything that's protected, and everything you need to do next.
When you have Domain Ownership Protection, your Activity Log provides you with an eagle-eye view of your domain’s current status.
Here's what you'll find:
1. High-risk action summary
Every time someone attempts a critical action on your domain — such as changing nameservers, initiating a transfer, updating contact information — it's logged here.
You can see:
- What action was attempted
- When it happened
- Who initiated the request
Why it matters: With DOP, high-risk actions require your verification via a one-time code. If someone tries to hijack your domain or make unauthorised changes, you'll know immediately — and DOP will have already blocked it until you approve.
2. Email security insights (DMARC deep dive)
Remember that free DMARC protection we mentioned? With DOP, you can actually see it working.
Your Activity Log shows:
- Which email servers are sending messages using your domain
- Which servers are verified vs. unverified or suspicious
- One-click options to mark servers as safe or block them
- Protection status, so you know your customers aren’t being phished
Why it matters: Email spoofing can damage your reputation and trick your customers into giving up sensitive information. DMARC insights let you take control — not just trust that protection is happening in the background.
3. DNSSEC status and one-click activation
Domain Name System Security Extensions (DNSSEC) adds digital signatures to your DNS data. It ensures that when someone types your domain name, they're directed to your actual website, instead of a fake version set up by hackers.
Your Activity Log shows your DNSSEC status and lets you enable it with one click — and it’s completely free for DOP customers.
Why it matters: Without DNSSEC, attackers can redirect your visitors to malicious sites through DNS hijacking. Enabling DNSSEC protects your visitors and your reputation — and with DOP, it takes just seconds.
4. Domain Health Overview
Your domain doesn't exist in isolation. It's connected to your website, your email, your SSL certificate, and potentially dozens of other services. But these products often have different renewal dates, creating confusion and risk.
The Activity Log provides a Domain Health Overview that shows:
- Which products are linked to your domain (website, email, SSL, etc)
- Which are active, expiring soon, or already expired
- What action you need to take to keep everything running
Why it matters: Many business owners assume renewing their domain automatically renews their email or website hosting. It doesn't. Our health overview ensures you never have a surprise expiration that takes your business offline.
5. Organisation details and account recovery
If your domain is tied to a business, having accurate organisation details on file is essential for account recovery and legal protection.
Your Activity Log prompts you to:
- Add or update your organisation details
- Ensure your account recovery information is current
- Verify that the right people have access
Why it matters: If you ever lose access to your account or need to prove ownership, having complete and accurate details on file makes recovery faster and easier.
How the Activity Log keeps you informed
We know you're busy running your business. You don't have time to constantly check on your domain. Here’s how we've designed the Activity Log to work for you:
Proactive alerts
When something needs your attention — an expiring product, a blocked high-risk action, or a potential security issue — we'll let you know.
You can even receive push notifications through the GoDaddy mobile app so you're always in the loop, wherever you are.
Clear, actionable insights
We don't just show you data, we tell you what to do about it. Every insight in your Activity Log comes with a clear next step:
- Enable DNSSEC → One-click activation
- Verify this email server → Mark safe or block
- Renew your email → Direct link to renewal
- Add organization details → Simple form to complete
Everything in one place
No more jumping between different dashboards or hunting for settings. Your Activity Log brings together:
- Domain security
- Email protection
- DNS management
- Renewal status
- Account health
All in a single, unified view.
Who should use Domain Ownership Protection?
Every GoDaddy domain already comes with foundational security features. But DOP is designed for anyone who depends on their domain for their livelihood and wants complete visibility and control:
- Small business owners who can't afford website or email downtime
- Ecommerce sellers whose domain is their storefront
- Professionals and consultants who rely on their domain for credibility
- Content creators building a brand around their domain name
- Growing businesses with multiple team members accessing the domain
- Anyone who wants peace of mind, knowing they can see and control everything happening with their domain
How to get Domain Ownership Protection for your GoDaddy Domain
It’s easy to add Full Domain Protection to your GoDaddy domain in two ways:
- For New domain purchases, you can add Full Domain Protection during checkout.
- For an existing domain that you own:
- Log in to your GoDaddy account.
- Navigate to your Domain Portfolio management dashboard.
- If you have multiple domains, select the domain you want to add Domain Ownership Protection to.
- If you don’t see a notification right away to add Domain Ownership Protection, navigate to “Activity Log” at the top of the page, where you will find options to add it.
Have questions about Domain Ownership Protection? Visit our Help Center or contact our award-winning support team 24/7.
1- SSL protection is included free for domains connected to GoDaddy websites or as part of eligible hosting plans. Excludes Web Hosting Starter plans. Web Hosting Starter is available only in select markets. Web Hosting Economy includes free SSL for the first year only. If your domain points elsewhere, you can either purchase a standalone SSL from GoDaddy or contact your website host to obtain an SSL certificate.
