Cloudflare Registrar is cheapest, it sells domains at wholesale cost with no markup, though you must use its nameservers. Porkbun is the cheapest full-service registrar and includes WHOIS privacy free. Namesilo and Dynadot are close behind, and both are strong on bulk portfolios.
Editorial judgement last reviewedRegistration price is marketing. Renewal price is what you actually pay, every year, for as long as you own the domain, and the gap between the two is the entire business model of the bottom half of this industry.
A domain advertised at a dollar for the first year can renew at twenty. Multiply by a portfolio and a decade and the difference is real money, which is why our registrar comparison sorts on renewal price by default and treats the headline number as approximately meaningless.
The other half of the cost is add-ons. WHOIS privacy should be free, ICANN doesn't charge for it and most decent registrars include it, but it's still sold as a ten-dollar-a-year upsell by the incumbents. So is DNS, so is email forwarding, and so is an SSL certificate you can get free from Let's Encrypt.
We ranked on the total annual cost of holding a domain, not the cost of acquiring one.
Renewal price on common TLDs, .com, .net, .org, .io, .dev, which is the number that recurs.
What's included. WHOIS privacy, DNS hosting, email forwarding, URL forwarding and SSL should not be line items. Where they are, we add them to the cost.
Transfer-out friendliness. A registrar that makes leaving difficult has taken a hostage, and a cheap price on a hostage isn't a bargain.
API access, because programmatic registration matters to a meaningful share of readers, and because bulk operations save real time on a portfolio.
Price stability. We weight the vendors with a track record of holding prices over those with a history of quiet increases at renewal.
Cloudflare sells domains at exactly what it pays the registry, plus the mandatory ICANN fee, with no markup ever. WHOIS privacy included. No upsells, no first-year bait, no renewal surprise. Across a portfolio over a decade the saving is substantial and it requires no ongoing attention.
The condition is that the domain must use Cloudflare's nameservers. That's the price of at-cost pricing and it's a fair trade for most people, Cloudflare's DNS is fast, free and has a decent API.
It's disqualifying in three cases: a client's domain that must stay on their DNS provider, a TLD Cloudflare doesn't support (the list is narrower than a full-service registrar's), and any workflow that needs to register domains from code, since there's no general registration API.
Note also the concentration risk. Registrar, DNS, CDN and WAF in one account means one compromise affects all of it.
The best default for developers who want low renewals without the nameserver constraint. Renewal prices at or near the bottom among full-service registrars, WHOIS privacy free forever, SSL free, email forwarding and URL forwarding included, and a broad TLD catalogue that's often the cheapest place to hold a niche extension.
The API is simple and pleasant, availability, registration, renewal, nameservers and DNS records with an API key and no reseller agreement. There's no sandbox, so your first end-to-end test registers a real domain; pick a cheap TLD for it.
Small company, so support hours are narrower than a large registrar's, but the support you do get is knowledgeable and human.
Consistently low renewal pricing, free WHOIS privacy, and a management interface built for people holding hundreds of domains rather than three. Bulk operations, portfolio tools and an API are all part of the product rather than an afterthought.
The interface is dated and nobody would call it pleasant. If you're managing a large portfolio and price per domain per year is the metric that matters, that's an entirely acceptable trade, and the bulk tooling saves more time than the UI costs.
Competitive renewals, a wide TLD catalogue including many country-code extensions, a workable API, and genuinely good bulk registration and management tooling. It's the registrar that domain investors reach for, which tells you where its strengths are.
Also runs an aftermarket and auction platform, useful if you're buying names that are already taken. For straightforward developer use it sits close to Porkbun
on price with a slightly more commercial feel.
Namecheap
's sibling brand, built more recently with a cleaner interface and aggressive pricing on common TLDs. Free WHOIS privacy, straightforward DNS, and a management experience that's noticeably more modern than most of this list.
Shorter track record than the others here, and the product is still filling in, check API coverage against your needs before building anything on it. For someone registering a handful of domains who wants low prices and a decent interface, it's a legitimate option.
Understanding the business model tells you what to check.
The first-year discount is the oldest trick: a registrar buys a .com from the registry at a fixed wholesale price and sells the first year below cost, recovering it over years of above-market renewals. If a price looks impossible, it is, and you're paying for it later.
Add-on bundling is the second. WHOIS privacy costs the registrar nothing and is sold for ten dollars a year. DNS hosting costs almost nothing and is sold. SSL certificates are free from Let's Encrypt and are sold. Every registrar on this list includes those; the incumbents don't, and the difference can exceed the domain price.
Checkout dark patterns are the third, pre-ticked boxes for services you didn't ask for, ninety-nine-year registrations, "premium DNS", and site builders. Read the cart before paying.
The fourth is expiry. A lapsed domain enters a redemption period where recovering it costs many times the renewal price, and drop-catchers monitor expirations continuously. Turn on auto-renew for anything you care about, keep a card on file that hasn't expired, and set your own calendar reminder independent of the registrar's emails.
Moving a domain takes about a week: unlock at the current registrar, get the authorisation code, initiate at the new one, approve the confirmation email. Every registrar on this list handles it competently.
Four things catch people. ICANN blocks transfers within sixty days of registration or a previous transfer, so plan around it. A transfer adds a year of registration and you pay for it, you're not losing time, but you are paying up front. WHOIS privacy can mask the administrative contact address the confirmation email goes to, so check it's reachable before you start. And DNS records do not travel with the registration.
That last one is the classic outage: someone transfers a domain, the nameservers change, every record vanishes, and the site goes dark. Export your zone file first, recreate it at the destination, confirm it resolves, then flip the nameservers. Done in that order the transfer is invisible to users.
Whichever registrar you land on, enable registrar lock and two-factor authentication on day one. Domain theft happens through account compromise and social engineering, not through clever DNS attacks, and those two settings are what stands between a compromised inbox and someone else controlling your domain.
Yes for supported TLDs, it charges the registry fee plus the ICANN fee with no markup, and includes WHOIS privacy. The constraints are that you must use Cloudflare nameservers and the TLD list is narrower than a full-service registrar's.
Because the first year was sold below cost to win the registration. The renewal is the real price. Always check it before registering, it's the number you'll pay every year afterwards.
No. Every registrar on this list includes it free, and it costs them nothing to provide. Being charged for it is a signal about the rest of the pricing. Some country-code registries mandate public registrant data regardless.
Yes, and it's usually worth it for a portfolio. You'll pay for a year of registration as part of the transfer, so the saving starts from the year after. Watch the sixty-day ICANN lock and export your DNS zone first.
