Overview
The Registrar Console at https://registrar-console.registry.co/ is your central web interface for managing all aspects of your .CO Registry account. Setting it up correctly — with proper user roles and security — is an essential first step.
User Roles
Each Registrar account can have multiple user accounts, each assigned one of the following roles:
| Role | Permissions |
| Administrator | Full access. One per account. Can create, update, delete any user including Managers. |
| Manager | Full access. Can manage user accounts excluding Managers and Administrators. |
| Domain Administrator | Limited to domain, contact, and host management features only. |
| Finance Administrator | Limited to billing, payment, and account management features only. |
Two-Factor Authentication (2FA)
2FA is supported using any authenticator app that implements Time-Based One-Time Password (TOTP), such as Google Authenticator or Authy. Registrars are strongly encouraged to enable 2FA on all accounts. Administrator and Manager accounts can enforce 2FA for all users via the Account Settings page.
Best Practices
- Create a separate user account for each employee — never share credentials.
- Assign the most restrictive role appropriate for each user's function.
- Enable 2FA enforcement for all accounts as soon as possible.