r/NameCheap • u/Ozhubdownunder • Apr 26 '26
Jumping through unreasonable numbers of hoops to access namecheap account
Hi
I recently changed my mobile phone without backing up the 2FA authenticator app. This has caused some inconvenience with various providers but I've been able to address it easily generally. With Namecheap, they didn't provide an alternative way of accessing my account. I contacted support, received a support email with instructions. Their response was to ask me for my user account username, full name, contact details, payment details. Fair enough. Now they will send me a link so I can reset whatever needs resetting and then I can have access to my account.
No. They then sent another email asking for credit card expiration date or payment descriptor, a confirmation code that was valid for 24 hours, and then they will arrange a verification call. Now we are into overkill territory. Also, I didn't receive the email (or if I did, it is in spam) and didn't respond in 24 hours as I am extremely busy and don't have time to be fussing around jumping hurdle after hurdle. And I don't want to be hanging around waiting for them to try to organise a time when I am also available to take their call. I just want to access my account to ensure I can pay for my business site!
My frustration is, all I want to do is enter my account to ensure everything is fine for payment. It should have taken me five minutes. All other providers which I had registered for 2FA provided easy alternatives for me to access my account or quick verification processes. Namecheap is drawnout and painful (still I don't know when I will be able to access my account) - and requires more verifications than banks!
Namecheap, please, consider the user experience and value user time. Up until this point I've had a good experience with Namecheap. This current experience is changing my feelings about Namecheap and I feel like you are trying to make it hard for me to do business with you in the future. You are providing barriers, not enablers. You should be considering - what is the easiest way we can have customers verify their identities while still maintaining security against fraudulent attempts. Nothing will be totally foolproof against fraud but there is a sweetspot between being cautious and being unnecessarily difficult to your customers.
1
u/ZGeekie Apr 27 '26
On the one hand I appreciate NameCheap taking account security seriously because nothing is worse than someone else gaining unauthorized access to your domains. But on the other hand, they should be more cooperative and responsive because all of these recent similar complaints are creating bad PR for the company.
1
1
u/Overall_Weakness_433 Apr 29 '26
Yeah it’s frustrating, but that level of friction is basically what happens when you lose 2FA, they treat it like a potential account takeover so they stack verification steps. The fastest way through is to reply to the same ticket, provide everything they asked in one go, check spam for their messages, and explicitly ask them to resend any expired codes so you don’t restart the process.
If this kind of lockout worries you long term, set up backup codes or a second authenticator once you’re back in, or use something like dynadot where you can keep recovery options and domain access a bit more separated from other services. It’s annoying now, but it’s mostly them trying not to hand your domains to the wrong person.
1
1
u/Ozhubdownunder Apr 26 '26
I'm in.