Usernames and Passwords
Hover uses very high, industry-standard encryption for all stored passwords. Your account password can't be viewed by anyone in Hover and no one at Hover will ever ask you for your password via email or on the phone. If you forget your password, you can reset it via a special login token sent to the email address on the account.
Hover offers an additional level of account security called Two-Step signin (also known as two-factor authorization).
When Two-Step Signin is activated on your account, you'll need to provide an additional 6-digit code in addition to your username and password to signin to your account. You can choose to receive the code via a text message sent to your mobile phone, or you can use a special app on your smartphone that generates the special codes as required. For more information, check out our Enable Two-Step Signin article.
You can view most account events in the Activity Feed in the Hover dashboard. You see purchases, renewals, and other events including the time and date when the activity took place. We add new event types from time to time to provide further information about activity in your Hover account. When logged into your account, check out the Activity section to see this in action.
Hover's "Log Signin Activity" feature optionally adds an event into your account Activity feed with the time and Internet address every time your account is accessed. This allows you to see a log of any account access and provides peace of mind in the event you think someone other than an authorized person may have signed into your account. You can enable signin logging on the Settings page of your Hover account.
Hover provides WHOIS Privacy on all domains that support it at no extra cost. WHOIS Privacy replaces your contact information with ours so that when someone does a WHOIS check on your domain name, they aren't provided with your contact information, or email address.
We believe that you shouldn't have to pay extra to keep your information private. WHOIS Privacy is enabled by default (where supported) and can be enabled or disabled in your Hover account. Make sure WHOIS Privacy is enable on your domains.
Hover supports locking of all domains that support it. Transfer lock prevents a domain from being transferred to another registrar. The only way to remove the transfer lock and allow the domain to be transferred is by turning off the transfer lock in your Hover account. We suggest that you keep transfer lock on your domains at all times (where supported). Check the Transfer Lock of your domains.
Our support staff is trained to ensure that any support interactions are from the account holder, or another authorized person. While that will occasionally mean a support agent will ask for additional proof of account ownership, it's our practice to always err on the side of caution when it comes to providing access to accounts, or making changes to domains in your account.
PIN validation is sometimes used to provide additional verification by Hover Support staff when interacting with you over the phone. A PIN code is sent to the email address on the account and Support requires that you provide the PIN code to perform certain tasks related to your account via phone.
In the event that we detect an unauthorized attempt to access your account (a number of signin attempts with the wrong password, for example), we'll lock your account to block further attempts. Support also has the ability to lock accounts if they detect unusual activity. Only the verified account holder can unlock a locked account.
Want to Know More?
Learn more about best practices and how you can protect all of your online accounts, including your Hover account.