A domain registrar is a company or organisation accredited by ICANN, the Internet Corporation for Assigned Names and Numbers, or by a national registry authority to sell and manage domain name registrations. When someone registers example.com they do so through an accredited registrar, a company like GoDaddy, Namecheap, Cloudflare Registrar, Google Domains, or hundreds of others, that processes the registration, maintains the registrant’s records, and communicates with the relevant TLD registry to publish the domain’s delegation records in the DNS hierarchy.

The registrar sits between the domain buyer and the TLD registry. The registry, Verisign for .com and .net, the Public Interest Registry for .org, DENIC for .de: operates the authoritative infrastructure for the TLD zone. The registry does not sell registrations directly to the public, that is the registrar’s role. Registrars are accredited by ICANN to sell registrations on behalf of registries, manage registrant relationships, and handle technical administration including nameserver assignment and WHOIS record management.

Every registered domain has a registrar. The registrar of record is the company through which the domain is currently registered, this may be the original registrar where the domain was first purchased or a different registrar if the domain has been transferred. The domain owner interacts with their registrar for all registration management tasks, renewals, contact updates, nameserver changes, transfers, and domain locking.

How domain registration works

The domain registration process involves a chain of interactions between the registrant, the registrar, and the TLD registry, each playing a distinct role in establishing the domain in the DNS hierarchy.

Checking availability: before registering a domain the registrar’s system queries the TLD registry’s WHOIS database to verify the requested domain is available. If the domain is already registered the registry returns registrant information. If it is available the registrar can proceed with the registration.

Registrant information collection: the registrar collects the registrant’s contact information, name, organisation, address, email address, phone number, required by ICANN for WHOIS records. This information becomes part of the public WHOIS record unless the registrant uses domain privacy services to mask their personal details.

Payment and agreement: the registrant pays the registration fee and agrees to the registrar’s terms of service and ICANN’s registration agreement. Registration fees vary by TLD and registrar, typically ranging from a few dollars per year for common TLDs to significantly more for premium names or specialised TLDs.

Registry submission: the registrar submits the registration details to the TLD registry through the EPP, Extensible Provisioning Protocol, the standardised protocol registrars use to communicate with registries. The registry creates the domain record, assigns it to the registrar, and publishes the delegation NS records in the TLD zone pointing to the domain’s authoritative nameservers.

DNS configuration: the registrar assigns default nameservers, typically the registrar’s own nameservers, to the domain. The domain owner can change these nameservers through the registrar’s control panel to use a different DNS provider. The nameserver assignment determines which servers are authoritative for the domain’s DNS zone.

Registration confirmation: the registrar confirms the successful registration to the registrant via email. The domain is now registered, delegation records are published in the TLD zone, and the domain is resolvable through DNS.

What registrars provide

Registrars offer a range of services beyond the core domain registration, some bundled with registration, others as optional paid add-ons.

Domain registration and renewal: the core service. Selling registrations for one to ten years and managing renewal notifications and automatic renewal billing. Different registrars offer different pricing, introductory discounts for first-year registration with higher renewal rates, flat renewal pricing, bulk discounts for multiple domains.

DNS management: most registrars provide basic DNS hosting, allowing domain owners to manage A records, CNAME records, MX records, TXT records, and other record types through a control panel. Registrar DNS quality varies significantly, some offer feature-rich interfaces with API access and advanced record types, others offer only basic record management with limited functionality.

Domain forwarding: redirecting the registered domain to another URL. As discussed throughout this glossary registrar forwarding is typically HTTP-only without SSL support, a significant limitation for most real-world use cases.

WHOIS privacy / domain privacy: masking the registrant’s personal contact information in WHOIS records by replacing it with the privacy service’s contact details. Some registrars include privacy protection free, others charge an annual fee. ICANN’s introduction of Registration Data Access Protocol, RDAP, and GDPR compliance changes have made WHOIS data less publicly accessible generally, but privacy services provide additional protection.

Domain transfer management: processing incoming transfers from other registrars and outgoing transfers to other registrars. Transfers require an authorisation code, EPP auth code, from the current registrar and are subject to transfer lock periods. Registrars have varying policies around transfer ease and speed.

Domain locking: preventing unauthorised transfers and changes through registrar-level locks. Standard registrar lock prevents transfers. Registry lock, available through premium registrars for high-value domains, requires additional verification steps for any changes and provides stronger protection against DNS hijacking.

SSL certificates: many registrars sell SSL certificates as an add-on. With Let’s Encrypt providing free SSL certificates through most hosting platforms the value of paid SSL from registrars has diminished, but some registrars still bundle SSL with domain purchases as a convenience offering.

Email hosting: some registrars provide basic email hosting, allowing the domain to be used for email addresses, as a bundled service or add-on. Quality varies considerably and most businesses use dedicated email hosting rather than registrar-provided email.

Website builders: registrars frequently bundle website building tools with domain purchases, particularly targeting customers who are buying their first domain and need a simple way to get a website online quickly. The quality and capabilities of registrar-provided website builders vary widely.

Types of registrars

The registrar market covers a range from mass-market consumer registrars to specialised professional services and developer-focused providers.

Mass-market registrars: large registrars serving millions of customers across all segments, individuals, small businesses, and enterprises. GoDaddy, Namecheap, Network Solutions, and similar companies compete primarily on price, marketing, and breadth of bundled services. Mass-market registrars typically have the widest TLD selection and most competitive introductory pricing, often with significantly higher renewal rates.

Developer and technical registrars: registrars focused on technical users who want clean interfaces, API access, transparent pricing, and no aggressive upselling. Cloudflare Registrar, Porkbun, Hover, and similar providers prioritise simplicity and value for technical customers. Cloudflare Registrar famously sells domains at cost, charging exactly what the registry charges with no markup, though it requires using Cloudflare’s DNS.

Premium and enterprise registrars: registrars serving enterprise customers with large domain portfolios, complex security requirements, and compliance needs. CSC, MarkMonitor, and similar providers offer portfolio management tools, enhanced security features like registry lock, trademark monitoring, and dedicated account management. Premium registrars charge significantly more than mass-market alternatives but provide services appropriate for valuable brand domains.

Specialty and niche registrars: registrars focused on specific TLDs or markets. Some registrars specialise in specific ccTLDs: operating as the official registrar for a national registry. Others focus on premium domain sales and aftermarket transactions. Specialty registrars may have better prices, faster support, or additional services for their specific TLD or market focus.

Reseller registrars: companies that resell domain registrations through a white-label arrangement with an accredited registrar. Website builders, hosting companies, and marketing agencies frequently offer domain registration as part of their service bundle, often through a reseller arrangement. The underlying registration is handled by an accredited registrar but the customer relationship is with the reseller.

Choosing a domain registrar

Selecting a registrar involves balancing price, features, security, and reliability across several dimensions.

Pricing and renewal rates: introductory registration prices and ongoing renewal rates are the most visible price comparison point. Many registrars offer dramatically discounted first-year prices, sometimes less than one dollar, but charge substantially more for renewals. Understanding the total cost of ownership over multiple years, not just the first-year price, gives a more accurate comparison. Transfer pricing, privacy protection cost, and add-on fees add to the total cost.

Security features: domain security is critical, a compromised domain can disrupt business operations, redirect users to malicious sites, and damage brand trust. Key security features to evaluate include two-factor authentication for account access, domain lock options, registry lock availability for high-value domains, and alert notifications for domain changes. Registrars with weaker security practices are higher-risk for DNS hijacking and domain theft.

DNS management quality: registrar DNS quality matters if the registrar’s DNS is used for the domain. Features to evaluate include supported record types, particularly ALIAS/ANAME records for apex domain connection, TTL control, DNSSEC support, API access for programmatic management, and interface usability. Many domain owners use a separate DNS provider, like Cloudflare, rather than the registrar’s DNS, which reduces the importance of registrar DNS quality.

Transfer and lock policies: how easy it is to transfer a domain away from the registrar indicates whether the registrar prioritises customer convenience or retention. Registrars that make transfers difficult, hiding auth codes, applying unnecessary locks, delaying transfer approvals, create operational friction. Registrars with clear, straightforward transfer processes are preferable.

Support quality: domain issues, expiry problems, transfer complications, DNS emergencies, require responsive support. Support channel availability, phone, chat, email, ticket, and response times vary considerably. For business-critical domains access to reliable support is an important consideration.

Reputation and stability: a registrar that goes out of business or is acquired creates operational disruption for domain owners. Choosing established registrars with long track records reduces this risk. ICANN accreditation status is publicly verifiable, checking that a registrar is currently accredited confirms they are authorised to operate.

Domain registrars and redirect management

The registrar is where domain management begins, but redirect management typically requires capabilities beyond what registrars provide natively.

Registrar forwarding limitations: most registrars provide basic domain forwarding as a built-in feature, entering a destination URL that the domain forwards to. As discussed throughout this glossary registrar forwarding typically lacks HTTPS support, creating certificate errors for HTTPS visitors, and offers no path-level redirect rules, no status code control, and limited reliability. For serious redirect management registrar forwarding is insufficient.

DNS management for redirect infrastructure: the registrar provides access to DNS management where records are updated to connect the domain to redirect management infrastructure. Adding a CNAME record for the www subdomain pointing to the redirect service, or updating A records for the root domain to point to redirect infrastructure IP addresses, these DNS changes are made through the registrar’s DNS management interface or a separate DNS provider.

Nameserver delegation to DNS providers: many domain owners change nameservers from the registrar’s default to a dedicated DNS provider, Cloudflare being the most common choice. The nameserver change is processed through the registrar’s control panel, the registrar submits the updated NS delegation to the TLD registry. After the change DNS management moves to the new provider while the registrar continues to handle registration, renewals, and WHOIS management.

Registrar for domain portfolio management: large domain portfolios, dozens or hundreds of domains across multiple TLDs, benefit from registrar features designed for portfolio management. Bulk renewal management, portfolio pricing, centralized account management, and transfer coordination become important at scale. Premium registrars serving enterprise customers provide dedicated portfolio management tools that consumer-focused registrars do not.

Transfer to security-focused registrar: domains used for business-critical purposes, primary brand domains, high-value redirect sources, domains with significant backlink profiles, benefit from being registered at registrars with the strongest security practices. Transferring a domain to a security-focused registrar with registry lock support is a worthwhile investment for domains where compromise would cause significant business impact.

Managing domains across multiple registrars

Organisations accumulate domains across multiple registrars over time, through original purchases at different registrars, domain acquisitions where the seller’s registrar differs from the buyer’s preferred registrar, and TLD availability differences where some registrars support certain TLDs that others do not.

Consolidation to a primary registrar: transferring all domains to a single preferred registrar simplifies management, one interface, one billing relationship, consistent security policies across all domains. Domain transfers cost one year’s renewal, effectively pre-paying a renewal year, but the management simplification may justify the cost.

Portfolio visibility across registrars: where consolidation is not practical maintaining a clear inventory of all domains across all registrars is essential. Spreadsheet or portfolio management tools tracking each domain’s registrar, registration status, expiry date, and key configuration details prevent the most common domain management failure, unintended expiry due to lost track of a registration.

Expiry notification management: registrars send renewal notification emails to the registrant contact email address on file. If that email address changes or is abandoned expiry notifications go undelivered. Keeping registrant contact information current at all registrars, and ensuring renewal notifications reach someone who acts on them, is critical for preventing unintended domain expiry.