I have registered a domain that I use exclusively for email. In addition to my main email address (firstname.lastname@example.org), I have companyA@example.com, companyB@example.com, email@example.com, etc. I pay an email provider for this service.
I also have a free Gmail account, which is what I used as the contact email for the registrar. I have concerns about the security and stability of my Gmail account, and I'm wondering what the best approach is with regard to these concerns.
I feel like it's a Bad Idea(tm) to change my registrar's contact email to firstname.lastname@example.org (or anything @example.com) since I could end up with a catch-22 situation if my account were to be compromised.
If my Gmail account were to be compromised (or otherwise disabled, say due to a Google error), I would/could lose the proverbial "keys to the kingdom". Right now, I can't say that I feel completely comfortable having Google as a gatekeeper here. Same for the other free email services (Yahoo, Hotmail, etc.).
Options I've considered include:
- Creating a separate (free? paid?) email address solely for use with my registrar
- Paying Google for email (assuming better customer support and less likelihood of a Google snafu)
- Using 2FA/U2F on Gmail for extra security (though not extra stability per se)
- Doing nothing - nobody wants my crap LOL
I feel I generally take a proper approach to security - not too careless, not too paranoid - but I'm struggling with the correct approach here.
Any advice is appreciated.