Docs/Theft Guard

Theft Guard

Theft Guard watches for unauthorized changes on protected domains. Manage it under Domains, then Theft Guard, or toggle Theft Guard on a domain card.

Domain Theft Guard page with protected domains, active alerts and a security status card for each domain
Theft Guard: protected domains, active alerts and per-domain status.
Aepto on YouTube

Enable protection

  1. Under Domains -> All Domains, turn the Theft Guard switch on for a domain and confirm Enable Domain Theft Guard, or open Domains -> Theft Guard and enable domains from that screen.
  2. Click Configure Notification Contacts (or go to Domains -> Contacts) and assign contacts for Theft Guard alerts. Contacts must verify their email.
  3. Optional: click Run Manual Check to scan immediately. Otherwise wait for scheduled checks.
  4. Review Domain Security Status, protected domain counts, and active alerts.

Handle alerts

  1. Open an alert from the Theft Guard page or View All Alerts.
  2. If the change was expected (you moved registrar or DNS), click Update Baseline -> confirm so future checks use the new baseline.
  3. If the alert is closed or handled, click Mark as Resolved, or Resolve All Alerts when appropriate.
  4. Use Export Report when you need a downloadable summary.

Refresh Baselines refreshes stored baselines without resolving alerts. DNS change history is also linked from this area when you need record-level detail.

FAQ

What does Theft Guard watch for?

Unauthorized or unexpected changes on protected domains—registrar moves, nameserver shifts, and related security signals compared to stored baselines.

I moved DNS on purpose—why did I get an alert?

Expected changes still differ from the old baseline. Open the alert and click Update Baseline so future checks treat the new state as normal.

What is the difference between Update Baseline and Refresh Baselines?

Update Baseline on an alert acknowledges a specific change you approved. Refresh Baselines on the Theft Guard page refreshes stored baselines broadly without resolving open alerts.

Do Theft Guard contacts need verified email?

Yes. Assign contacts under Configure Notification Contacts or Domains → Contacts with the Theft Guard notification type—they must complete verification before mail sends.

Can I run a check immediately?

Click Run Manual Check on Domains → Theft Guard, or use Run Theft Guard from a domain’s menu on All Domains.

Where do I see DNS record detail?

Use linked DNS change history from Theft Guard when you need record-level context, or open DNS monitoring for full history and email modes.

More answers: FAQ hub.