Identity Verification for Root Zone Management
Authorized representatives of TLD managers may verify their identity as an added layer of security for access to the Root Zone Management System. Identities are confirmed by proving your identity online with government issued identification documents. This allows account access to be restored at a later date should you lose access, by requiring you to demonstrate your legal identity again. This helps prevent unauthorized access and streamlines account recovery processes.
Getting started
RZMS users can enroll in Identity Verification from within their RZMS account, by navigating to Settings > Password and Authentication > Identity Verification.
Identity verification is performed by a trusted third party provider called Shufti Pro. IANA does not directly view your identity documents in this procedure, and IANA only records the outcome of the verification process.
Users will need a valid government-issued photo identification document showing full legal name and date of birth, and a device with a front-facing camera.
Information collection
The enrollment process captures the following information, which is retained by the vendor for no longer than seven days.
- Image of government-issued photo identification supplied by the user, along with the legal name and date of birth derived from the image
- A photograph of the user taken through their device’s camera
IANA retains the following information while your account is still active:
- Legal name
- Date of birth
- Outcome of validation
Identity verification requirements
Identity Verification is required for enabling multi-factor authentication and for using the RZMS API. Identity Verification allows IANA to facilitate account recovery for users who no longer have access to their authenticator app or recovery codes. Accounts which have identity verification enabled will be able to prove their identity against the originally supplied identity in order to re-establish lost access to their account.
While identity verification is not currently mandatory for other uses, it is strongly recommended in order to increase account security.
More information
Please contact the Root Zone Management team at root-mgmt@iana.org with any questions or issues regarding the identity verification process.