One of the great advantages of ENS names is their decentralized nature. As the wallet owner, you retain full control over your ENS name—no centralized entity can revoke or seize it.
However, this autonomy demands heightened responsibility. Securing your wallet keys and avoiding phishing scams is critical because if you lose access to your name, recovery is impossible.
Adopting robust security practices ensures your ENS name remains protected from malicious actors.
Understanding Hot, Warm, and Cold Wallets
Before optimizing your setup, distinguish between wallet types:
- Hot Wallet: Connected to the internet (e.g., MetaMask, browser extensions). Ideal for frequent transactions but vulnerable to hacks.
- Warm Wallet: Semi-offline (e.g., hardware wallets with occasional connectivity). Balances accessibility and security.
- Cold Wallet: Fully offline (e.g., paper wallets, air-gapped devices). Maximum security but less convenient for daily use.
Recommended ENS Name Configuration
To maximize security without sacrificing usability:
Cold Wallet for Owner Role
- Stores ultimate control over your ENS name.
- Isolated from online threats; used only for critical changes.
Hot/Warm Wallet for Manager Role
- Handles routine updates (e.g., subdomains, records).
- Reduces exposure of your cold wallet’s private keys.
Hot Wallet for ETH Address & Primary Name
- Simplifies everyday interactions (e.g., sending/receiving ETH).
👉 Learn how to secure your ENS name with cold storage
This tiered approach ensures that even if your hot wallet is compromised, your ENS name ownership remains intact.
Setup Guide for Unwrapped Names
- Assign Owner Role: Transfer ownership to a cold wallet via ENS Manager.
- Delegate Manager Role: Designate a hot/warm wallet for daily management.
- Set ETH Record: Link your hot wallet’s address for transactions.
Setup Guide for Wrapped Names
- Wrap Your Name: Convert to an ERC-721 token for added flexibility.
- Cold Wallet Custody: Store the NFT in your cold wallet.
- Delegate Permissions: Use a hot wallet for metadata updates.
Practical Examples
- Personal Use: Cold wallet (owner), mobile warm wallet (manager), browser hot wallet (ETH address).
- DAO Management: Multisig cold wallet (owner), dedicated warm wallet (manager).
Key Roles Explained
Owner
- Holds irreversible control (e.g., transferring ownership, unwrapping).
- Should never be used for daily transactions.
Manager
- Adjusts records, subdomains, and metadata.
- Compromise risks only temporary functionality, not ownership.
ETH Record
- Public-facing address for receiving funds.
- Updateable by the manager or owner.
FAQs
Q: Can I recover my ENS name if I lose my cold wallet’s keys?
A: No. ENS names are non-custodial—lost keys mean permanent loss.
Q: Is a hardware wallet considered cold storage?
A: Yes, if kept offline. Connected hardware wallets function as warm wallets.
Q: Why separate owner and manager roles?
A: Minimizes exposure of critical keys while allowing operational flexibility.
👉 Explore advanced ENS security strategies