.BANK Domain

The .BANK domain is restricted solely to banking entities. Online attacks are becoming more frequent and personal data is increasingly vulnerable on the Internet. This can cause problems for banking entities and their customers.

Therefore, the .BANK extension aims to provide a secure space to protect the integrity of all customer data. Only certified banking institutions under government regulatory authority can acquire it.

If you seek greater cybersecurity and want to avoid issues that could later lead to significant financial and time losses, the .BANK domain is what you need. Customers will feel more secure when entering a .BANK website, which will generate greater trust among users of the digital space.

Eligibility

The .bank domain names must correspond to the legal name or brand of the organization (e.g., registered trademark, trade name, service mark). A registered trademark is not required to register a domain name.

Organization Eligibility

They can only be registered by government-regulated entities, specifically:

1. Retail bank


2. Savings association


3. National retail bank


4. Retail bank or savings association holding company or parent company

Other eligible organizations include:

1. Associations or groups of associations whose membership is primarily composed of the aforementioned regulated entities.


2. Government regulators of retail banks, savings associations, national retail banks, or organizations whose members are primarily composed of such government regulators (if approved by the fTLD Board)

Technical Requirements

The official .bank registry (fTLD) sets the following technical requirements to register and manage .bank domains. It is important to comply with all of them, otherwise the domain cannot be registered or will not resolve DNS requests:

• Token: You must obtain a token prior to your domain registration request (remember to select "INWX" as the desired registrar). You can provide it to us when requesting the registration in the shopping cart. Important: Ownership data must be exactly the same as indicated when requesting the token; otherwise, your registration will not be approved or will be delayed longer than desired.


• DNSSEC: To ensure the domain resolves DNS requests, DNSSEC must be obligatorily active.


• Glue Records: External DNS servers outside the .bank zone are not allowed. This means .bank domains must use DNS under .bank domains. We recommend creating Glue Records under the same domain and using DNS of the domain you are going to register.


• HTTPS: You must use an SSL Certificate. .bank domains only work under the https:// protocol and, at a minimum, use TLS 1.2.


• Authenticated Email: You must obligatorily use DNS-based DMARC and SPF records to authenticate your email. This improves the deliverability of your emails and enhances the security of email communications, especially if combined with DKIM.


• 2FA: To register and manage .bank domains with INWX, you must activate and maintain active two-factor authentication (2FA) in your customer account. This way, you can only access your customer account with a temporary code, which increases the security of your account and the domain you manage with us. Even if a third party obtains your INWX login details, they will not be able to complete the access without this code. You can activate this option from the preferences in your client area.