The best registrar is the one you will not have to think about. It renews on time, tells you early when something is wrong, lets you leave without a fight, and does not make your domain the price of a bad support experience.
That matters more than it sounds. A domain is the one piece of your online presence that cannot be rebuilt. A website can be restored from backup and an email setup can be rewritten, but if the domain lapses or is moved by someone else, every address and every link built on it goes with it.
This guide covers what to check before you register or transfer, how to compare prices fairly, and how a transfer works, so that leaving a registrar later holds no mystery.
Price, but the right price
Look at the renewal and transfer prices, as well as the first-year price. Check for extra charges for privacy, DNS or email forwarding. Some cheap registrars recover the discount later, and a few raise the renewal price sharply for domains they consider valuable.
Work out the cost of ownership over five years rather than one. The figures below are examples, not quotes from anyone.
| Item | Registrar X (promo) | Registrar Y (flat) |
|---|---|---|
| Year 1 | 2.00 | 11.00 |
| Years 2 to 5, per year | 16.00 | 11.00 |
| Privacy / DNS add-ons | 4.00 per year | Included |
| Five-year total | 86.00 | 55.00 |
The cheaper first year loses by the third. Wholesale prices for the common endings are broadly the same across the industry, so a large gap at renewal usually means a margin somewhere else.
Security features
Two-factor authentication on the account, registrar lock, clear transfer procedures, and the option for a registry lock on important domains. Check what the registrar does if someone claims to be you. Ask how they verify an identity before changing contact details or releasing an authorisation code.
Registrar lock is the standard protection and costs nothing. It places a clientTransferProhibited status on the domain, so no transfer can start until you remove it. Registry lock is stronger and rarer: the change must be confirmed out of band with the registry, which is slow on purpose. It suits a domain whose loss would be a disaster, such as a bank's or a utility's.
Use a mailbox for the account that is not on the domain itself. If the registrar emails you a renewal warning to an address at the domain that has already expired, the warning never arrives. A free webmail account with two-factor authentication works well as the contact address.
DNS
Is DNS included? How fast and reliable? Does it support the record types you need (CAA, SRV, ALIAS)? Is there an API for automation, which matters if you use ACME with DNS validation?
A registrar's own DNS is often fine for a simple site. Check the editor: can you add a TXT record longer than 255 characters (split into strings, as DKIM keys require)? Can you set the TTL? Is there an export? The DNS cheat sheet lists the record types, and How DNS Works explains what the registrar actually controls.
Extension support
Not every registrar sells every ending. If you need a particular country code, check it is available and what its rules are. Some require a local presence or a company number, some publish contact details that others hide, and some have their own transfer procedure that differs from the usual one. A few country registries are reached only through partner registrars, which adds a middleman and a delay.
If you plan to hold several endings for one brand, check that the registrar can manage them in one place. Splitting a brand across three accounts invites a missed renewal.
Transfer out: how leaving works
How hard is it to leave? A good registrar gives you the code and removes the lock without a fight. Know the procedure now, while nothing depends on it.
- Before anything, copy your DNS records from the old registrar if it hosts your DNS. If the nameservers will change, set up the zone at the new provider first.
- Check that contact details are current, especially the registrant email, since approval messages go there.
- Lift the registrar lock on the domain at the old registrar and request the authorisation (EPP) code.
- At the new registrar, start the transfer and enter the code.
- Approve the request when the email arrives. Otherwise most transfers complete on their own in up to five days.
- When it completes, check the nameservers are what you expect, and turn registrar lock back on.
Two rules catch people out. A domain generally cannot be transferred within 60 days of registration or of a change of registrant, which is enforced by the registries. And a transfer between registrars for most generic endings adds a year to the registration, which is why the transfer price usually includes a renewal. Country codes follow their own rules, so check before you start.
Renewals, expiry and contact details
Most domains are lost through admin, not attack. The card on file expired, the renewal email went to someone who left, or auto-renew was never switched on. Fix these three on day one.
- Turn on auto-renew, and put a card on file with an expiry date well beyond the next renewal.
- Make the registrant and admin email a role address that several people can read, ideally on a different domain.
- Put the expiry date in two calendars, at least 60 days ahead.
Find out what the registrar does after expiry. Practice varies: some keep the domain working for a short grace period, some switch the site off and show an advert, and recovery often costs a surcharge on top of the renewal. Registries also run their own redemption period before a name is released, and the details differ by extension. You do not want to learn the rules by living through them.
Check the registrant details too. The registrant is the legal owner of the domain, not the person who bought it. If a freelancer or agency registered the name in their own name for you, you are a customer of theirs, not the holder. Get the registration moved into an account you control, with your organisation as the registrant.
Warning signs
- A transfer-out process that needs a phone call during office hours, or a fee for the authorisation code.
- Pre-ticked add-ons at checkout, or "free" services that turn into paid at renewal.
- No two-factor authentication, or only SMS-based codes.
- Domain locked to the registrar's own hosting or email products.
- Support that cannot say who actually holds the registration.
Separating roles
Many people keep the registrar, DNS and hosting separate to reduce dependence on one company. It adds a little complexity and removes a single point of failure. Whatever you choose, document it.
With the roles split, a problem at one company need not take down the others, and moving the site does not touch the domain. The price is a bit more admin: three logins, three renewals, and a page of notes saying which is which.
Try it on your own site
Run whois example.com and read the status lines. clientTransferProhibited means the registrar lock is on. Look at the expiry date and the registrar name. Run dig NS example.com +short to see which nameservers the registry hands out, and compare them with what your DNS provider says it uses. If they differ, the registrar is where the mismatch lives. Do both once a quarter.
Things people ask
Should I register for ten years?
A few years is reasonable for a domain you rely on, and auto-renew with a working payment card covers the rest. Long registrations do not help search rankings.
Is WHOIS privacy worth it?
Many registries now redact personal data by default. Where they do not, privacy services reduce spam. Make sure a working contact address still reaches you.
What if the registrar goes out of business?
Domains are held at the registry, and a failed registrar's domains are typically moved by the registry or the accreditation body. It is slow and stressful. Keep your records and an auth code procedure ready.
The checklist
- Renewal and transfer prices known, plus add-on costs, over five years.
- Two-factor authentication on, and a contact email that is not on the domain.
- Registrar lock on, with registry lock considered for critical domains.
- DNS editor supports the records you need, and exports the zone.
- The ending you want is supported, and its rules are understood.
- Transfer-out procedure read and understood before you need it.
- A real support question asked and timed.
- A note of who holds the registrar, DNS and hosting, kept somewhere safe.