Directions
1Understand who you're actually dealing with
A registry (Verisign for .com, Public Interest Registry for .org, and so on) owns and operates a TLD at the infrastructure level, but doesn't sell directly to the public. A registrar (Cloudflare, Namecheap, GoDaddy, Porkbun) is ICANN-accredited to sell and manage registrations on the registry's behalf.
This matters because registry-set wholesale prices (and any registry price increases) flow through every registrar equally — a registrar can't shield you from a registry price hike, only compete on markup, renewal pricing, and what's bundled (privacy, DNS, email forwarding).
2Search and confirm the name is actually free
A registrar's search box checks live availability against the registry, not a cached list — a name can look taken one minute and free the next if it just expired and cleared its grace periods (see the domain-management guide for what those periods are).
If a name is taken, a WHOIS/RDAP lookup (see the reference page) tells you who holds it and when it expires, which is the honest way to gauge whether it's worth a purchase offer versus waiting.
3Price the renewal, not the promo
First-year pricing is routinely a loss-leader — a $1 first year on a TLD that renews at $12–20 is normal, not a bait-and-switch, but it's the renewal price that determines your actual cost of holding the name for years.
Multi-year registration (2–10 years, capped by ICANN per TLD) locks in the per-year rate you pay today and removes one annual renewal-failure risk, at the cost of paying further in advance.
4Set your registrant contact and privacy option
ICANN requires accurate registrant contact information on file — not necessarily public, but accurate, since it's how you're reached about expiration, transfer, and abuse notices. Wrong contact info is the single most common reason people lose a domain to expiration.
Most registrars offer free or low-cost WHOIS privacy (redacting your contact details from public WHOIS/RDAP output) for gTLDs; some ccTLDs restrict or disallow it by registry policy, so check the specific TLD's rules before assuming privacy is available.
5Finish checkout and confirm the record exists
After payment, look the domain up in WHOIS/RDAP yourself (or on this site's TLD pages) to confirm it's actually registered under your name/organization and pointed at nameservers you control — don't just trust the registrar's dashboard.
whois example.com # or use a public RDAP client — confirms registrar, registrant org, and expiration date
Honesty note: articles are drafted with AI assistance, then a human checks each one against the vendor's current setup flow before it publishes — nothing goes live unreviewed. Vendor interfaces still change; if a step looks different, the underlying record is what matters.