In short: the core service is identical at every accredited registrar — a record in the registry saying the domain is yours. What actually differs is the renewal price, the number of upsells at checkout, the quality of bundled DNS and how easy it is to leave. Below is an honest ranking of six registrars — Namecheap, Porkbun, Cloudflare Registrar, Squarespace Domains, GoDaddy and Dynadot — plus the rules that matter more than any discount: compare renewal prices, enable two-factor authentication and verify every operation with a WHOIS lookup.
How this ranking was made
We do not sell domains and earn no affiliate commission from any registrar, so the criteria are simple and verifiable before you pay:
- Renewal price, not first-year price. The single most important factor. A registration discount is one-off marketing; the renewal price is what you pay every year for the life of the domain.
- WHOIS privacy. Is redaction of your personal data free, paid or missing entirely.
- Bundled DNS hosting. Free nameservers and a record editor, or DNS sold as a separate product.
- Ease of transfer OUT. Can you get the auth code straight from the control panel, or must you argue with a retention manager first. This is the most honest indicator of how a registrar treats customers.
- Account 2FA. Your registrar account is a single point of failure for every domain in it, so two-factor authentication is mandatory.
- Upsells. How many pre-ticked checkboxes you have to clear at checkout.
We deliberately avoid exact prices: promotions change faster than articles get updated. Instead we use two categories — budget and mid-range — and teach you to calculate the three-year cost of ownership, a method that never goes stale.
The ranking
1. Namecheap
A long-established ICANN-accredited registrar with a huge TLD catalog, free WHOIS privacy for life, bundled DNS hosting and a clean control panel. Renewal prices sit in the mid-range and are published openly. Transfers out are painless: the auth code is one click away.
Best for: most people most of the time — a safe default for .com and everyday projects.
Downsides: frequent first-year promotions make it easy to skip the renewal math; support is chat-based only.
2. Porkbun
The budget favorite: low prices on registration and — crucially — on renewal for many TLDs, free WHOIS privacy, free SSL certificates and a solid API, all wrapped in a deliberately quirky interface.
Best for: developers, side projects and anyone who checks renewal prices before buying.
Downsides: a much smaller company than the giants; fewer enterprise features and no phone support.
3. Cloudflare Registrar
Sells domains at wholesale registry cost with zero markup and redacts WHOIS data for free. The catch: your domain must use Cloudflare nameservers, so you adopt the whole ecosystem along with the domain.
Best for: technical users already on Cloudflare DNS who want at-cost renewals forever.
Downsides: mandatory Cloudflare DNS with no external nameservers, a TLD list that is broad but not universal, and minimal hand-holding.
4. Squarespace Domains
The successor to Google Domains: after the 2023 deal, Google's registrar customers were migrated here. Clean interface, flat pricing without checkout tricks, solid DNS and WHOIS privacy included.
Best for: former Google Domains users and Squarespace site owners who value simplicity over tooling.
Downsides: renewal prices for some TLDs rose after the migration; power-user tooling is thinner than at dedicated registrars.
5. GoDaddy
The largest registrar on the planet, with phone support and every adjacent service under one roof. Honesty requires saying it plainly: checkout is an obstacle course of upsells, and attractive first-year prices are balanced by noticeably higher renewals.
Best for: people who want one vendor for everything and value phone support enough to pay for the convenience.
Downsides: aggressive upsells at every step; renewal prices demand a calculator before you commit; extras that competitors bundle for free have historically been paid add-ons.
6. Dynadot
A quiet workhorse: budget-to-mid pricing, free WHOIS privacy, bulk management tools and an API that domain investors appreciate.
Best for: bulk registrations and portfolio management on a budget.
Downsides: a less-known brand; a utilitarian interface; fewer integrations than the market leaders.
Comparison table
| Registrar | Accreditation | WHOIS privacy | Bundled DNS | Best for |
|---|---|---|---|---|
| Namecheap | ICANN | free, for life | yes | safe default for most projects |
| Porkbun | ICANN | free | yes | budget registrations and renewals |
| Cloudflare Registrar | ICANN | free redaction | Cloudflare DNS required | at-cost pricing for technical users |
| Squarespace Domains | ICANN | included | yes | ex-Google Domains users, simplicity |
| GoDaddy | ICANN | varies by plan | yes | one vendor for everything, phone support |
| Dynadot | ICANN | free | yes | bulk and portfolio management |
.com vs country-code TLDs: jurisdiction matters
A .com domain lives under ICANN rules: disputes go through the UDRP procedure, WHOIS data is redacted by privacy services, and you can transfer between hundreds of registrars worldwide. Country-code TLDs play by national rules instead: some require local presence, identity documents or registration through locally accredited registrars, and the dispute process follows local law. Before committing to a ccTLD, read its registry rules — what documents are required, whether WHOIS hides your data by default, and how transfers work. For a global product, .com remains the default; register the matching ccTLD of your key market as well, because buying it back from a squatter later costs far more than a year of registration.
The first-year discount is a renewal trap
The classic acquisition trick: register for a symbolic price, renew at the full rate — which can be several times higher. New gTLDs like .site, .online or .shop show it most vividly: the first year is deep budget territory, the renewal lands firmly in mid-range and above. The registrar's bet is simple: most owners will not bother transferring away to save money, so the discount pays for itself within two or three renewals.
Tip: before you buy, find the renewal price for your TLD on the registrar's website and calculate three years of ownership — one registration plus two renewals. Rank registrars by that number and the discount storefront stops distorting the picture.
The second half of the trap is auto-renewal on a saved card. It is genuinely useful — the domain will not expire silently — but check which rate it charges and watch the card's expiry date: a silently declined renewal payment is the most common way people lose a domain together with the site and mailboxes on it.
Transferring a domain between registrars
A transfer is a routine procedure that registrars prefer not to advertise. If renewals became expensive or support became useless, the domain moves without any downtime: DNS keeps answering during the whole process.
- Unlock the domain (remove the clientTransferProhibited status) in your current registrar's panel.
- Get the transfer code (auth code, also called EPP code). A decent registrar shows it right in the panel, no tickets required.
- Start the transfer at the new registrar, enter the code and confirm the operation by e-mail.
- Wait for completion — up to 5 days for gTLDs; a gTLD transfer also adds one year to the registration term.
Mind the 60-day lock: under ICANN rules a domain cannot be transferred for 60 days after registration or after a change of registrant data. Plan the move in advance, not a week before the expiry date.
Hygiene rule: once a year, log into your registrar account and confirm that the account e-mail works, the phone number is current, 2FA is on and the domain list matches your records. Five minutes a year versus weeks of support tickets after a lost account.
What to check after buying
Right after registration, renewal or transfer, run the domain through a WHOIS lookup: which registrar is on record, which statuses are set and when the registration expires.
whois <your-domain> # typical gTLD (.com) fragment: Registrar: Example Registrar, Inc. Domain Status: clientTransferProhibited Registry Expiry Date: 2027-03-01T12:00:00Z Name Server: ns1.example-dns.com
The statuses ok and clientTransferProhibited are normal. clientHold, serverHold or pendingDelete mean the domain has been pulled out of delegation — contact the registrar immediately. Next, verify delegation with a DNS records check: the nameservers must point where you actually manage your records. If the site is not connected yet, follow our guide on connecting a domain to hosting, and pick the hosting itself from our ranking of hosting providers.
An expired domain is the most common way to lose the site, the mail and the reputation in one day. Registrar reminders land in spam, the auto-renewal card expires. Set up independent domain expiry monitoring: the service tracks the expiry dates in WHOIS itself and warns you in advance — while renewing still costs normal money rather than a redemption fee.
Account security. Legally the domain belongs to the registrant; in practice it belongs to whoever controls the registrar account. Enable 2FA with an authenticator app (not SMS), use a unique password from a password manager, and never tie the account to a mailbox hosted on that same domain: if the domain goes down, you lose both the mail and the way to recover access.
How to find out who a domain's registrar is
The question comes up in three situations: a domain arrived with a website and nobody knows where renewal is paid; you need to reach the holder of someone else's domain; or a domain is stuck between transfers and it is unclear who controls it now.
WHOIS answers it — the registry's public record for the domain. It shows the registrar, registration and expiry dates, status codes and name servers.
# From a terminal
whois example.com | grep -iE "registrar|name server|expiry|status"
# Or via dig — name servers often reveal the registrar indirectly
dig +short NS example.comWithout a terminal the same is done from a browser: our WHOIS lookup returns registrar, expiry and name servers in one table, including zones where the console client answers awkwardly.
A note on privacy. Since GDPR took effect, registrars redact personal data of individual holders: you will see the registrar and the dates, not a private person's name or email. Redacted contacts are normal, not a sign that something is wrong with the domain.
What the status codes mean
ok/active— nothing unusual; the domain is registered and delegated.clientTransferProhibited— transfer lock is on. Standard anti-hijacking protection; you remove it in the registrar's panel before a transfer.serverHold/clientHold— the domain is registered but not resolving. Someone put it on hold: the registry, the registrar, or a dispute.pendingDelete,redemptionPeriod— the term has lapsed and the domain is in the redemption window. Recovery is possible but costs several times a normal renewal.
ccTLDs: where the rules stop being the same
A .com behaves the same everywhere. A country-code domain does not, and the differences surprise people who have only ever bought gTLDs.
- Eligibility. Several ccTLDs require local presence — a registered company, an address, sometimes a resident contact. Registration may go through and then be revoked on a later check.
- Identity verification. Some registries require the holder's identity to be confirmed. Until it is, the domain can be registered but not delegated, which looks exactly like a technical failure and is not one.
- Term length. Not every ccTLD allows the ten-year registration a .com does; some are strictly annual, which turns auto-renewal from a convenience into a requirement.
- Transfers and holder changes are separate procedures. Moving between registrars and changing the legal holder are different operations with different paperwork, and conflating them is how domains get stuck.
The practical consequence: for a ccTLD, price matters less than how clearly the registrar handles verification and account recovery. The price difference is a few units of currency a year; a domain lost to unverified data is a different order of magnitude.
What to do when a domain is about to expire
| Stage | What is happening | What to do |
|---|---|---|
| Before the expiry date | The domain works | Renew in the panel. Cheapest option by far. |
| Just after expiry | Delegation is usually withdrawn; site and mail stop | Renew urgently — still at the normal price at this stage |
| Redemption period | The domain is still yours, but recovery is chargeable | Contact the registrar and pay the redemption fee |
| Release | The domain returns to open registration | Slim chances: desirable names are caught by automation |
The only reliable defence is learning about the approaching date in advance rather than from visitors. Expiry is visible in WHOIS and can be put under continuous watch, so the warning arrives weeks before the mail stops.
Auto-renewal helps but does not save you from an expired card. Check not just the auto-renew checkbox but that the stored payment method is still valid — this is the whole of "we had auto-renewal on and still lost the domain".
FAQ
Where is the cheapest place to buy a domain?
For renewals — Porkbun and Cloudflare Registrar are consistently in the budget category. But the honest answer is always the three-year math: a cheap first year at another registrar is often cancelled out by an expensive second one.
Can I buy a domain permanently?
No. Domains are registered for a term — one to ten years for gTLDs — and then renewed. "Lifetime" domains do not exist, which is why never missing a renewal is the core skill of domain ownership.
What happens if I forget to renew?
First a short grace period when renewal is still possible at the normal price. Then redemption — restoration with a hefty extra fee. After that the domain drops and anyone can register it, including drop-catchers. Auto-renewal plus external expiry monitoring closes this risk almost entirely.
Does the registrar own my domain?
No. The registrar is an intermediary between you and the registry. You are the registrant, and you have the right to transfer the domain to another registrar at any time. Be wary of agencies that register client domains under their own name — it is a classic lock-in scheme.
Should I buy the domain from my hosting company?
It is convenient: one panel, automatic DNS. The trade-off is a single point of failure — a billing dispute with the host now affects the domain too. For important projects many teams keep the registrar and the host separate; if simplicity wins, at least keep 2FA on and monitoring external.
Checklist before you buy
- Calculated three-year cost of ownership using the renewal price, not the first-year discount.
- Confirmed the registrar is ICANN-accredited (or accredited by the relevant ccTLD registry).
- Checked the WHOIS privacy terms: free, paid or missing.
- DNS hosting is bundled, and nameservers can be switched to third-party ones.
- The transfer code is available from the panel — no tickets, no phone calls.
- Enabled 2FA and auto-renewal, attached a valid card.
- Verified statuses and dates via WHOIS and delegation via DNS lookup.
- Set up expiry monitoring independent of registrar e-mails.