.edu Frequently Asked Questions

In an effort to answer your questions about the .edu domain, we have developed this FAQ section. If you still have a question, please contact us.

General

General FAQs

What is the .edu domain?

The .edu domain is one of the seven original top-level subdivisions of the Internet Domain Name System (DNS). The .edu domain is intended for accredited U.S. postsecondary institutions. It is managed under the authority of the United States Department of Commerce.

How does an institution apply for a name in the .edu domain?

Eligible institutions may apply for a name in the .edu domain by follow the procedures on the Request a New Domain page. Eligibility criteria are available on the eligibility page.

NOTE: If you already have a .edu domain name and wish to apply for a second one, please log into your registrant account and submit an application using the menu option for second domain name registration. DO NOT submit an application via the "Request a New Domain" page - since you already have a registrant account, the second domain name you register must be associated with that account.

What is the role of the U.S. Department of Commerce and iCANN have in the management of the .edu domain?

The Department of Commerce retains final authority over the membership and operations of the .edu domain. EDUCAUSE administers the .edu domain under a cooperative agreement with Commerce that requires the approval of both parties in order for substantive changes in domain policies and procedures to take effect. Please see the .edu policy page for more information.

As specified in the .edu Cooperative Agreement, the .edu Policy Board reviews domain policies and recommends changes as needed to Commerce for approval. Please contact EDUCAUSE ([email protected]) if you have suggestions.

Unlike top-level domains that are subject to ICANN governance, administration of the .edu domain falls solely under the oversight of the U.S. Department of Commerce. The domain's policies derive from the .edu Cooperative Agreement between Commerce and EDUCAUSE, as amended.

I understand that some ICANN rules may make it easier for someone to "hijack" my .edu domain name. Is this true?

No. The ICANN transfer policy does not affect the .edu domain. The Internet Corporation for Assigned Names and Numbers (ICANN) implemented its transfer policy to make it easier for a domain name holder to transfer its domain name from one internet registrar to another. In the case of .edu names, though, there is only one registrar, EDUCAUSE, and the .edu domain is not subject to ICANN regulations.

The policies and procedures of the .edu domain prevent unauthorized updates to .edu registrations.

Eligibility requirements

Eligibility for the .edu Domain FAQs

What are the eligibility requirements for obtaining a name in the .edu domain?

Eligibility for a .edu domain name is limited to U.S. postsecondary institutions that are institutionally accredited, i.e., the accreditation awarded applies to the entire institution and not just particular programs, by agencies on the U.S. Department of Education’s list of Institutional Accrediting Agencies. (Note that, as of July 2020, the Department of Education no longer distinguishes in its recognition of accrediting agencies between "Regional Institutional Accrediting Agencies" and "National Institutional and Specialized Accrediting Bodies." The Department now categorizes all institutional accreditors that it recognizes for the purposes of institutional participation in Title IV Federal Student Aid programs as "Institutional Accrediting Agencies.")

Note that institutional accreditation is required for .edu eligibility; program accreditation is not sufficient. Not all agencies accredit institutions. Some accredit only institutions, some accredit only programs, and others accredit both institutions and programs. Please make sure that the institution for which you are trying to register a .edu domain name holds institutional accreditation from a U.S. Department of Education-recognized accreditor before submitting an application. The U.S. Department of Education's lists of Institutional Accrediting Agencies and State Agencies are the only official, comprehensive lists of accrediting agencies recognized by the Department of Education.

Are K-12 schools eligible for names in the .edu domain?

No, only appropriately accredited postsecondary institutions are eligible.

Why do some organizations have .edu domain names even though they do not meet the eligibility requirements?

The .edu Cooperative Agreement specifies that all .edu names in existence as of October 29, 2001, are "grandfathered" into the domain, regardless of current or past eligibility requirements. That means the registrants of those domain names retain the right to maintain their registrations even though they do not meet the current eligibility requirements.

Billing

.edu Billing FAQs

Is there a cost to have a name in the .edu domain?

Under the terms of Amendment 11 of the .edu Cooperative Agreement with the U.S. Department of Commerce, EDUCAUSE is authorized to assess a $77.00 per year registration fee to recoup the expenses of managing the domain. Please note that paying the registration fee is just one step of a two-step process. All registrants are also required to accept the EDUCAUSE Customer Service Agreement when they register or renew the registration of a .edu domain name. Registrants can register or renew their registrations for a one-year or three-year term at their discretion.

Do I have to sign an agreement?

Yes, along with payment for your domain, you will be required to agree to and sign the EDUCAUSE Customer Service Agreement.

How and when do I renew my domain?

The billing contact will receive an initial invoice and renewal instructions via email 60 days before the domain expires. Please make sure the contact information is up to date by having the administrative or technical contact log in and update the Whois contact information.

Which credit cards can I use to pay the registration fee for a .edu domain name?

EDUCAUSE accepts the following credit cards for payment of .edu domain name registration fees: Visa, MasterCard, American Express, and Discover Card.

Can we prepay for several years?

EDUCAUSE's agreement with the Department of Commerce allows us to collect payment for either a one-year or three-year term. You can make this selection when you register or renew the registration of your domain name, which includes making the appropriate payment online via a credit card.

Can I change the billing and renewal dates?

EDUCAUSE's agreement with the Department of Commerce does not allow for any change in the initial billing date. Renewal dates are based on the initial domain registration date.

Who is the billing contact?

The billing contact is the individual at your institution who should receive the .edu domain name invoice. You will be asked to name a billing contact when you register your domain name, but you may access your registrant account later to provide one as necessary. The billing contact will not appear in the public Whois information for your .edu domain. To view your billing contact, log in to your account.

How do I change the billing contact?

The administrative or technical contact must log in to the registrant account and update the billing contact information.

Can I purchase additional .edu domains?

EDUCAUSE's agreement with the Department of Commerce allows institutions or organizations that meet the eligibility requirements to register as many as two (2) .edu domain names. The same registration process and requirements apply.

What is the CVV2 number?

For Visa, Mastercard, and Discover Card Holders:
In the signature field on the back of your credit card, there is a three-digit number following some of the digits from your actual credit card number. The CVV2 value is the three-digit number at the end.

For American Express Card Holders:
There is a four-digit number located on the front of your credit card to the right side and above the actual card number. The CVV2 value is that four-digit number.

If I release my domain before it expires, will I receive a refund?

No, EDUCAUSE does not issue refunds or credits for names deleted prior to the end of a paid registration/renewal period. Registrants may change a domain name during a registration/renewal period, however, and the registration fee for the prior name will be applied to cover the new name for the period in question.

I neglected to pay my registration fee on time and my domain name was deleted. Can I get it back?

Per U.S. Department of Commerce guidance, once a registrant loses its .edu domain name consistent with domain policies and procedures, the registrant may reapply for that or any other .EDU name, but only as a new applicant under the current eligibility requirements. If it does not meet the current eligibility requirements, its registration application will be declined. In particular, a previously "grandfathered" registrant that lost its .edu domain name would no longer be grandfathered; it would therefore need to meet the current .edu eligibility requirements to secure a new registration.

How can I view the invoice for my domain name?

You can view your invoices with the billing section of your account.

Log in to your account
Go to the "My Account" area [located in the "Welcome" drop down menu].
In the "Billing" section, click the "Invoice History" link.
All of your invoices will be displayed on the screen; click on any of the invoices to view the details.

Note: You can download any invoice from the invoice details screen, by clicking the download / print icon located on the top right-hand side.

For current holders of .edu names

Current Holders of .edu Domain Names FAQs

My organization already holds a .edu domain name. Can I change it to something else?

Yes. All current holders of .edu domain names will be allowed to change their name to a different name that is available at the time of the request. Names issued must meet the conditions of Amendment 6 of the .edu Cooperative Agreement between EDUCAUSE and the Department of Commerce. In particular, they must reasonably represent the name of the registrant, may not be deployed to identify any organization other than the registrant, and may not be "generic names."

(Please note that, per the terms of the .edu Cooperative Agreement, holders of grandfathered domain names may renew those names regardless of the current .edu eligibility requirements. If a grandfathered domain holder wishes to change to a new name, though, the requested name will need to comply with the Amendment 6 naming requirements—the new name will need to reasonably represent the name of the registrant institution or organization; it may not be deployed for any organization other than the registrant; and it may not be generic.)

If you are changing the domain name due to a change in the registrant (organization) name, the EDUCAUSE Whois Lookup database must first be updated to reflect the new organization name. Log in to your domain and submit a support ticket to request this change.

EDUCAUSE must approve this type of request and might ask for documentation showing that the organization has changed or will change its name officially. Please check the EDUCAUSE Whois Lookup database regularly to verify that this change has been processed. Once the Whois Lookup database has been updated, you may submit a domain name change request.

To submit a domain name change request, log in to your account and click on "Domain Names" in the upper navigation. Click on the "Actions" arrow, select "change domain name", and follow the prompts. This domain request must be approved before it becomes active and ready for use. Your old domain name can remain active for up to six months to assist in the transition to your new domain name. If you find you need more time, EDUCAUSE will automatically grant an additional six-month extension on request. Should you become concerned about your institution or organization’s capacity to complete your domain name transition within this timeframe, please contact EDUCAUSE at [email protected]. EDUCAUSE works with registrants on a case-by-case basis to manage transition process timeframes as necessary to facilitate completion with a minimum of disruption.

EDUCAUSE also asks registrants to use [email protected] to keep the association informed as they near completion of their domain name change so that EDUCAUSE can coordinate with them on the release of their previous domain name. Once the old domain is released and after the redemption period, it will become available for selection on a first-come, first-served basis by an eligible institution.

When I change or release a name, can I transfer the old name to another institution?

No. You do not own the name and therefore may not give, sell, or in any other way transfer it to another institution or organization. When you release a name, it becomes available for any eligible registrant to select on a first-come, first-served basis.

Is there a cost to have a name in the .edu domain?

Under the terms of Amendment 11 of the Cooperative Agreement with the Department of Commerce, EDUCAUSE is authorized to assess an annual $77.00 administration fee to recoup the expenses of managing the domain.

My institution already has a name in the .us domain. Can we still request and use a name in the .edu domain? Do we have to give up our existing name?

Your eligibility for a name in the .edu domain is completely unrelated to any name(s) you might have or acquire in any other top-level domain(s), such as .us, .com, or .org. You are limited to two names in the .edu domain, but you may hold names in other domains without affecting your eligibility for .edu registration.

May I request more than one .edu domain name?

Yes, institutions or organizations eligible to register a .edu domain name may register as many as two (2) .edu domain names. (Please note that the terms of the .edu Cooperative Agreement allow grandfathered registrants to renew the grandfathered domain names they had registered prior to the current eligibility requirements, regardless of number. As a result, a grandfathered registrant may hold more than two .edu domain names.)

Do I have to change the registered host names in my old domain?

Yes. If there are registered host names in your old domain, they must be changed or deleted before you can release your old domain.

What if the information in the Whois Lookup database is wrong?

EDUCAUSE manages the .edu domain under the authority of the U.S. Department of Commerce. Both EDUCAUSE and the Department of Commerce are committed to maintaining the accuracy of the Whois Lookup database, which records the administrative details of each .edu name. We therefore ask all registrants of .edu names to login to their domain account, review their entries, and correct any inaccuracies. See the EDUCAUSE Customer Service Agreement for further information.

How do I update the EDUCAUSE Whois information if it is incorrect?

You will have to submit any registrant information changes, such as a change in the institution’s name, address, or contact information, via a support ticket. EDUCAUSE must review and approve changes to registrant information, and it will require appropriate documentation to support such a decision. For example, a registrant seeking to revise the institutional name in its Whois listing will have to provide documentation establishing that the institution’s name has officially changed.

When is a deleted domain name available again?

Following the deletion of a domain name for any reason, it remains under redemption status for 45 days. After this period, the domain is available for an eligible institution or organization to register.

How long can I retain registration of a .edu name under the "grandfathered domain name" provisions of the Cooperative Agreement?

Institutions and organizations with .edu domains that were registered prior to October 2001 may retain those domains so long as they renew their registrations, which they can do annually or on a multiyear basis, and maintain proper administrative control. See the EDUCAUSE Customer Service Agreement for further information.

Based on Amendment 6 of the .edu Cooperative Agreement, under what circumstances might I be notified that I have violated .edu domain policy?

If you are the registrant of a .edu name and have transferred that name to any other entity, regardless of when the .edu name was assigned to you, you are in violation of domain policy. ("Transferring" includes selling, trading, leasing, assigning, or any other means of transferring.)

Policy requires that a .edu domain name must reasonably represent the name of the registrant, may not be deployed to identify any organization other than the registrant, and may not be a "generic name." (Grandfathered domain names are not required to reasonably align with the institutional or organizational name of the registrant or to be non-generic in nature, but they may not be deployed to identify an organization other than the registrant. Holders of grandfathered domain names may seek to change their registered domain name just like any other .edu domain name holder. The new name they seek to register, however, must then comply with the conditions discussed previously—it must reasonably represent the name of the registrant institution or organization, it may not be deployed to identify any organization other than the registrant, and it may not be generic.)

Institutions that registered .edu domain names under the current, post–October 2001 eligibility requirements must also continue to meet those requirements to renew their registrations. That includes maintaining institutional accreditation from a U.S. Department of Education–recognized accreditor. If EDUCAUSE believes that a registrant institution no longer holds the accreditation necessary for .edu eligibility, EDUCAUSE will contact the registrant to determine where the institution stands in relation to reestablishing appropriate accreditation. If EDUCAUSE determines that the institution does not have the necessary accreditation and cannot or will not work toward restoring it, the association will find that the institution is in violation of domain policy and seek to enforce compliance as discussed below. EDUCAUSE will work with institutions that are no longer eligible for .edu registration to allow for an orderly transition of their web sites to a new domain name outside the .edu domain so long as an institution is working with EDUCAUSE in good faith to migrate out of the .edu top-level domain.

If I am found to be violating .edu domain policy, what will happen?

Under the terms of Amendment 6 of the .edu Cooperative Agreement, effective July 25, 2003: "If EDUCAUSE becomes aware of a violation of these Policies, EDUCAUSE will notify the Registrant in writing and, if the violation is not corrected within 45 days, will remove the registration of the such [sic] .edu name, taking the necessary technical steps to return the name to the pool of available names as soon as practicable." Please see Amendment 11 for a more detailed review of the steps that EDUCAUSE will take to address a violation of .edu domain policy.

For applicants to the .edu domain

New Applicants to the .edu Domain FAQ

How does an institution apply for a name in the .edu domain?

Eligible institutions may apply for a name in the .edu domain by visiting the Request a New Domain section of our website. Eligibility criteria, advice for avoiding duplicate domain name requests, related policies, timelines, and other information are available on the EDUCAUSE .edu domain web site.

May I request more than one .edu domain name?

Yes, institutions or organizations that meet the current eligibility requirements for .edu domain name registration may apply for as many as two (2) names in the .edu domain.

Is there a cost to have a name in the .edu domain?

Under the terms of Amendment 11 of the .edu Cooperative Agreement with the Department of Commerce, EDUCAUSE is authorized to assess an annual $77 registration fee per domain name to recoup the expenses of managing the domain.

Must an institution join EDUCAUSE to apply for or obtain a name in the .edu domain?

No.

My institution has applied for accreditation and we have been assured it will be awarded. Can we apply for a .edu domain?

Your eligibility for a name in the .edu domain will begin as soon as your accreditation is final. Current .edu policy does not recognize pre-accredited status for eligibility.

My institution already has a name in the .us domain. Can we still request and use a name in the .edu domain? Do we have to give up our existing name?

Your eligibility for a name in the .edu domain is completely unrelated to any name(s) you might have or acquire in any other top-level domain(s), such as .us, .com, or .org. You are limited to two (2) names in the .edu domain, but you may hold names in other domains without affecting your eligibility for .edu registration.

When is a deleted domain name available again?

Are there any restrictions on what name I choose or what use I make of that name?

Under the terms of Amendment 6 of the .edu Cooperative Agreement, a .edu domain name must reasonably represent the name of the registrant, may not be deployed to identify any organization other than the registrant, and may not be a "generic name." (A grandfathered name does not have to reasonably represent the name of the grandfathered registrant, and it may be generic in nature.) No .edu registrant may transfer a .edu name to any other entity for any reason. "Transferring" includes selling, trading, leasing, assigning, or any other means of transferring.

If I am found to be violating .edu domain policy, what will happen?

Under the terms of Amendment 6 of the .edu Cooperative Agreement, effective July 25, 2003: "If EDUCAUSE becomes aware of a violation of these Policies, EDUCAUSE will notify the Registrant in writing and, if the violation is not corrected within 45 days, will remove the registration of the such .edu name, taking the necessary technical steps to return the name to the pool of available names as soon as practicable." Please see Amendment 11 of the .edu Cooperative Agreement for a more detailed explanation of the policy enforcement process.

When might I be notified of a policy violation?

Under the terms of Amendment 6 of the .edu Cooperative Agreement, effective July 25, 2003: "Violations will be noted and dealt with regardless of how long such violations were in place prior to notification."

Policy rules and procedures

.edu Policy FAQs

How can the policies governing management of the .edu domain be changed?

As specified in the .edu Cooperative Agreement between EDUCAUSE and the U.S. Department of Commerce, the .edu Policy Board reviews domain policies and recommends changes as needed to the Department of Commerce for approval. Please contact us if you have suggestions for changing domain policies.

For more information about the policy review process, please see the edu Policy Comment Forum. Visiting the forum webpage will allow you to review proposed changes under consideration as well as related public comments.

Who serves on the .edu Policy Board?

The .edu Policy Board reflects the broad range of U.S. higher education institutions. Its members consist of the president of the American Council on Education (ACE), which represents the executive leadership of U.S. higher education institutions; the president of the National Association of College and University Attorneys (NACUA), which is the professional association for general counsels and attorneys serving U.S. higher education; and EDUCAUSE, which represents higher education information technology (IT) leaders and professionals from across U.S. higher education. The EDUCAUSE senior advisor for policy and government relations staffs the policy board and supports its deliberations.

Are there any limitations on the content or use of the .edu domain?

Eligibility for the .edu domain is content-independent. EDUCAUSE neither places nor enforces restrictions on the content or use of the .edu domain. In particular, EDUCAUSE places no limitation on commercial use of the .edu domain. Holders of .edu domain names may, however, be subject to limitations, including commercial-use limitations, by federal, state, or local laws. Consult legal counsel regarding such limitations. Holders of .edu domain names are free to establish policies that limit or otherwise manage the use and content of resources within their own domains as they see fit, subject, again, to applicable laws and regulations.

Under the terms of Amendment 6 of the Cooperative Agreement, a .edu domain name must reasonably represent the name of the registrant, may not be deployed to identify any organization other than the registrant, and may not be a "generic name." (See the “Eligibility requirements” section of the .edu FAQs for more on “grandfathered domain names.” A grandfathered name does not have to represent the name of the registrant and may be generic in nature, but it cannot be deployed to identify an organization other than the registrant.) Amendment 6 also prohibits registrants from transferring a .edu domain name to any other entity. "Transferring" includes selling, trading, leasing, assigning, or any other means of transference.

My Account

Account FAQs

How do I log in to my account?

To log in to your account please follow these instructions:

Click on the "Login" link located in the main site navigation.
Enter your username and password.
Click the login button.

I cannot remember my password. How do I reset it?

Click on the "Forgot your username or password?" link in the "Login" area.
Enter the email address associated with your account. A reset password email will be sent to the email address(es) associated with your account, which could include the Administrative, Billing, and Technical contacts.
Follow the instructions in the email to reset your password.

How do I change my password?

There are two ways to change your password:

Click on the "Forgot your username or password?" link in the "Login" area.
If you are already logged in to your account, you can change your password by clicking the "Change Password" link in the "MY ACCOUNT" area of your account, which is located under the "Welcome" drop-down menu [located on the top right of your account].

How do I reset my password when I am unsure of the contact email(s) for my account, or the contact email(s) are no longer valid?

Please call Customer Support at 1-858-295-4628.

You will need to provide the domain name that is in your account.
You will be asked to submit the following documentation for your organization:
- A signed Letter of Authorization on organization letterhead that states the reason for requesting account access and provides your contact details and username for the account.
- A copy of your government-issued photo ID, such as your driver's license, or your passport.
- Documentation showing your position within the organization, including either your business card or your work ID badge.
Upon verification we will send an email with your username and a temporary password.

How do I add / change email contacts to my account?

You can add three additional email addresses to your account. To add an email address to your account information [such as your billing, administrative, and technical contact email addresses], follow the steps below:

Log in to your account.
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Account" section, click the "Change Address" link.
Add the email addresses in the "Alternative Email 1, 2 and 3" fields.
Click the "Okay" button to save your changes.

Note: Additional addresses will be cc'd on all emails sent to the primary email address.

How do I setup two-factor authentication for my account?

You will need a mobile device in order to setup two-factor authentication. Note: If you have multiple contacts associated with the domain, it is suggested that all users setup two-factor authentication at the same time as all contacts will be required to enter a unique code each time they want to log in to the account. Contacts who do not have it setup will be unable to log in to the account without the unique authorization code. The authentication code is a one-time use code that you must get from the authenticator app you download as part of the two-factor authentication setup.

Follow these steps to setup two-factor authentication:

Log in to your account.
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Security" section, click the "Two-factor Authentication" link.
Follow the detailed instructions on the screen.

I do not have an authentication code and cannot log in to my account?

This means that another user on the account has setup two-factor authentication for the account. Contact the other contacts on the account and ask then for the authentication code. Perform a Whois lookup to see who the other contacts are for your domain name. Enter the authentication code with your username and password to log in to your account. Once you log in, you need to setup two-factor authentication on your own mobile device. For instructions, please view the "How do I setup two-factor authentication for my account?" FAQ.

How can I restrict access to my account / domain name?

You can restrict your account so it can only be accessed from IP addresses that you define. You can specify up to three (3) static IP addresses that may access your account. This works at the account level to let you determine which computers or computer networks are able to access your account.

Log in to your account.
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Security" section, click the "IP Account Lock" link.
Follow the instructions displayed on the "IP Account Lock" screen.
Click the "Add Address" button to save your settings.

Note: To avoid locking yourself out of your account, do not use this feature if you are unsure of what you are doing!

What is a One-Time Verification code?

The One-Time Verification code adds an extra layer of security to your EDUCAUSE account beyond just a username and password to verify your identity. You can use this code for single authentication within a short time frame.

Where is the code sent?

Primary Account Holders: The One-Time Verification code will be sent to the primary email address associated with your EDUCAUSE account.

Subusers: The One-Time Verification code will be sent to the subuser email address if the account was accessed with the subuser username and password.

How long will it take for the code to arrive?

The One-Time Verification code will be sent within 1-2 minutes, usually faster after the username and password are entered.

How long is the code valid for?

The One-Time Verification code is valid for 5 minutes.

Can I request another code? If so, after how long?

Yes, you can request another code 2 minutes after the first code. Please note that when a new code is sent, the first or prior code will no longer be valid.

What if I do not have access to a primary email address?

If you do not have access to the primary email associated with your account, please contact our Support Team for further assistance.

Will the email also be sent to alternative email addresses?

No, the One-Time Verification code only goes to the primary account email.

I am a Subuser and I do not have access to my email. What should I do?

You will need to contact the primary account holder for further assistance. The primary account holder will be able to change the subuser email address by accessing EDUCAUSE account.

What are the security questions for?

Security questions are a way to verify your identity when accessing an account.

Please ensure the security questions and answers are entered correctly. This is extremely important as these details will be requested for various actions on your account.

How do I change my security questions and answers?

You may update your security questions and answers by following the steps below:

Log in to your account
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Security" section, click the "Security Questions" link.
Follow the detailed instructions on the screen.

Where can I view my invoices?

Log in to your account
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Billing" section, click the "Invoice History" link.
All of your invoices will be displayed on the screen; click on any of the invoices to view the details.

Note: You can download any invoice from the invoice details screen by clicking the download / print icon located on the top right-hand side.

Where can I view my payments?

Log in to your account.
Go to the "My Account" area [located in the "Welcome" drop-down menu].
In the "Billing" section, click the "Payments and Refunds" link.
All of your payments, including links to your invoices, will be displayed on the screen.

Account and user set up

How do I create a new user with specific roles?

You may create multiple role-based users for your account to help you and your team collaborate more efficiently while still maintaining the highest level of security for your .edu domain account.

Once established, each user has their own username and password to log in to the account with privileges that are personalized for their specific role.

Security is a top priority for us. To ensure your account remains secure, all changes to users will go through the account owner.

To create a new user, please take the following steps:

Log in to your account
Select "My Account" from the drop-down menu under your username.
Click "Manage Users."
Select the user role type.
Add user information.
Select the user role type.
Click "Create New User" to add the user to your account.

Once users are added, they will be emailed instructions on how to log in to their .edu domain account. Please share the new user account username and password you've created with the person in question, as this information is not emailed to a new user for security reasons.

How do I disable a user?

Log in to your account.
Select "My Account" from the drop-down menu under your username.
Click "Manage Users."
If the user has already been created, you will find a toggle next to the name to disable the user.

How do I change permission settings, roles, or delete a user?

Log in to your account.
Select "My Account" from the drop-down menu under your username.
Click "Manage Users."
Click on a user to open the "Edit User" settings and:
- Change permissions or role type, OR
- Click "Update User" OR "Delete User."

How do I reset two-factor authentication for a user?

Two-factor authentication is tied to the original mobile phone on which it was established. If the original phone has been replaced or lost, then two-factor authentication will need to be reset. Only account owners can reset two-factor authentication for a user.

Log in to your account
Select "My Account" from the drop-down menu under your username.
Click "Manage Users."
Click on a user to open the "Edit User" settings.
Click the link for "Reset Two-Factor Authentication."
Check the box to confirm you want to reset two-factor authentication for the user.
Click the "Reset" button.

What are the user permission roles?

Technical

Technical FAQs

Why don't IP addresses show up in the EDUCAUSE Whois server for nameservers that don't end in .edu?

IP addresses for nameservers not ending in .edu are not collected by EDUCAUSE and are therefore not displayed. To find the IP address of a nameserver that doesn't end in .edu, visit the VeriSign Whois server or the Whois server of the registrar of the nameserver.

How do I make nameserver address changes?

To makes changes to the nameservers associated with your domain name, follow these instructions:

Log in to your account.
Click on "View All Domains."
Click on the domain name you want to modify.
Click on "Edit Nameservers" and make the necessary changes.
Confirm your changes to nameserver information for your .edu domain name(s).

There may be a delay between when you submit the nameserver changes and when the registry processes these changes. Until then, the old nameservers will still be handling your domain name(s).

When will changes to domains and hosts be made live on the Internet?

Once your domain name has been verified, it will become active in the registry and your domain will appear in the Whois. If you have requested changes to your organization name and/or registrant address, then these will be updated in the Whois once they have been verified and approved by EDUCAUSE.

How do I know if my domain and host changes have been made?

They will be reflected in the Whois.

How do I configure my DNS?

We do not host your DNS. Please contact your DNS provider (i.e., whoever provides you with your nameservers) for instructions on how to configure your DNS.

What are autonomous system numbers?

An autonomous system number (ASN) is a unique number that is available globally to identify an autonomous system; the system’s ASN enables it to exchange exterior routing information with other neighboring autonomous systems.

What is an IN-ADDR.ARPA domain?

Across the Internet, the in-addr.arpa (inverse address) domain is used for reverse mapping of IPv4 numbers, which allows one to determine the hostname associated with a given IP address.

How do I register an IN-ADDR.ARPA domain?

You should ask your upstream provider about registering your in-addr.arpa domain. If you are working directly with a regional registry, visit its website.

How do I get a Secure Sockets Layer (SSL) server certificate for my website?

EDUCAUSE does not issue SSL certificates. You can obtain an SSL certificate through VeriSign.

DNSSEC

DNSSEC FAQs

What is DNSSEC?

DNSSEC is a technique for improving Internet security. The Domain Name System (DNS) is the part of the Internet that translates names such as "example.edu" into numeric addresses (for example, 198.59.61.90). All Internet applications — from electronic mail to online banking — depend on the accuracy and integrity of this translation. Over the years, Internet security experts have discovered a variety of ways that DNS translation may be compromised. The DNSSEC security system limits the problem by allowing owners of domain names to provide a digital signature that adds an extra level of authentication to the translation process.

When will .edu be signed?

On August 2, 2010, EDUCAUSE and VeriSign announced the completion of a project to deploy DNSSEC within the .edu portion of the Internet. Institutions whose domain names end in .edu will be able to utilize digital signatures to mitigate certain DNS security vulnerabilities, such as cache poisoning and man-in-the-middle attacks. The .edu namespace is signed, and .edu domain names can also be signed at this time.

How do I implement DNSSEC for my domain?

EDUCAUSE does not manage your DNS; we recommend consulting your DNS service provider for its procedures on implementing DNSSEC.

Once you have obtained your key from your DNS provider, you can sync it with the registry in the domain settings area of your account by taking the following steps:

Log in to your account.
Click on "My Domains."
Click on the domain name you want to sync.
In the "DNSSEC" section, click "Configure DS Records" link.
On the "Configure DS Records" screen, enter the information provided by your DNS provider and click "Update."

I've signed my domain - how do I know it is validating?

A service run by Verisign is one of the online services that will check to ensure the registry is synced with your DNS provider. This tool is not run by EDUCAUSE, so the association cannot guarantee the accuracy of the results. Please consult your DNS provider for its recommended tool if you have concerns.

Once I sign my domain and publish my DS records with EDUCAUSE, will I be required to roll the keys annually?

While it is considered a generally accepted best practice to roll your DNSSEC key at least annually, please consult your DNS provider for its best practices as EDUCAUSE does not manage your DNS.

Do I have to implement DNSSEC for my domain?

No, you do not have to implement DNSSEC. DNSSEC addresses an identified security risk, however, and helps to prevent malicious activities like cache poisoning, pharming, and man-in-the-middle attacks. It uses a digital signature to create a chain of authority. It then uses the chain to verify that the source domain name, which the DNS resolver returns, matches the DNS record stored at the authoritative DNS. If it cannot validate the source, it discards the response.

Will DNSSEC increase fees for .edu domain names?

No, DNSSEC does not add to the cost of .edu domain names.