http://www.makeuseof.com/tag/4-steps-secured-hosting-domain-account/
1. Private Domain Registration.
Private domain registration is your first wall of defense against domain hijacking. The problem with the early days of domain registration is that you had your private contact information tied to the Whois record – meaning anyone that searched for the registration records of your URL could identify where you lived, your phone number and your email address. With your email address, hackers may start to send phishing emails with the hopes that you’re gullible enough to bite.
2. Passwords
* Never use the same password for your host account as you used for your domain registration.
* Never use the same password for domain registration as you use for your email account.
* Use a unique, strong password on all three systems – just make sure they are all different.
By avoiding the same password on different accounts, you significantly reduce the risk that if one account is ever hacked, the hacker will not have access to your other systems.
3. Check folders within your public_html folder to ensure that they are either 755 or 644 for www readability. You should not find any folders that are set with 777 for permissions.
4. Check out the security tools that your web host offers.
5. Finally, go into your admin panel for your MySQL databases and double check all of the passwords there too. They shouldn’t match any of your other passwords, and they should be ultra-strong passwords, just like all of your others.
IMPORTANT: the ultimate security in protecting your domain from being hijacked comes from the private domain registration service. For a small additional fee, you’ll have tremendous peace of mind knowing that scammers, spammers and other criminals can’t see or even hope to access your personal information. Beyond that tool, make sure to lock down your hosting and email accounts as well, and you’ll enjoy years of trouble-free website ownership.
