What is a domain registrar and how do you pick one?

Sajjad
Domain
26 Oct, 2026

A domain registrar is a company authorised to register domain names on your behalf with the registries that run each top-level domain, such as Verisign for .com. When you buy a domain, the registrar submits the registration to the registry, bills you for it, and gives you an account where you manage renewals, contact details, nameservers, and transfers. To pick a good one, compare renewal prices rather than first-year offers, and look for free privacy protection, strong account security, a simple transfer-out process, reliable DNS, and support for the extensions you need.

You'll deal with your registrar for as long as you hold the domain, so the choice matters more than a one-off purchase. This article explains where registrars fit in the domain system, how they differ from registries and resellers, how to find out which registrar a domain uses, and a practical checklist for choosing one.

What Does a Domain Registrar Do?

A registrar is the retail layer of the domain name system. Its main jobs are:

Registering domains: It checks availability with the registry and creates the registration.
Renewing domains: It extends the registration at the registry when you renew, or when auto-renew runs.
Managing registration data: It stores the registrant's contact details and publishes registration data through RDAP and, where still offered, WHOIS.
Setting nameservers: It tells the registry which nameservers are authoritative for your domain.
Handling transfers: It issues the auth code and processes transfers in and out.
Applying status codes: It sets locks such as clientTransferProhibited at the registry.
Enforcing policy: It applies ICANN rules for generic TLDs and registry rules for each extension, including email verification and dispute outcomes.

Many registrars also offer extras such as DNS hosting, email, website builders, SSL certificates, and privacy services, but those aren't part of the core registrar role.

Registry vs Registrar vs Reseller

Three types of organisation sit between you and your domain. They're easy to confuse.

Role	What it does	Who it deals with	Examples
Registry	Operates a TLD and holds the authoritative database of its domains	Registrars	Verisign (`.com`, `.net`), Public Interest Registry (`.org`), Nominet (`.uk`)
Registrar	Accredited to register domains with registries and sell them	The public and resellers	Namecheap, Cloudflare Registrar, Porkbun, GoDaddy
Reseller	Sells domains under its own brand using a registrar's accreditation	The public	Many web hosts and agencies

The registry sets the wholesale price and the rules for its extension. The registrar adds its margin and services. A reseller isn't accredited itself. It sells through a partner registrar, which is the one listed in the registration data.

This matters when something goes wrong. If your domain was bought through a reseller, such as a web host, the official registrar may be a company you've never heard of. Transfers, disputes, and compliance complaints ultimately involve the accredited registrar.

ICANN Accreditation

For generic TLDs, a registrar must be accredited by ICANN and sign the Registrar Accreditation Agreement (RAA), which sets obligations such as data accuracy, email verification, renewal reminders, and transfer handling. Each accredited registrar has a numeric IANA Registrar ID. For ccTLDs, accreditation is handled by each country's registry instead. Learn more in what ICANN is and what role it plays.

How to Find a Domain's Registrar

Registration data shows which registrar manages any domain. The quickest method is an RDAP lookup:

curl -s https://rdap.org/domain/example.com \
  | jq '.entities[] | select(.roles | index("registrar")) | {name: (.vcardArray[1][] | select(.[0]=="fn") | .[3]), ids: .publicIds}'

{
  "name": "Example Registrar, Inc.",
  "ids": [
    { "type": "IANA Registrar ID", "identifier": "9999" }
  ]
}

The traditional whois command still works for many domains:

whois example.com | grep -iE "^ *(registrar|registrar iana id|registrar url):"

   Registrar: Example Registrar, Inc.
   Registrar IANA ID: 9999
   Registrar URL: http://www.example-registrar.example

For gTLDs, ICANN ended the requirement to offer port 43 WHOIS in January 2025 in favour of RDAP, so some registries and registrars may stop answering WHOIS queries. Use RDAP where you can. See what RDAP is and what WHOIS is for more.

Checking Your Own Portfolio

If you manage several domains, a short Python script can list the registrar and expiry date for each:

import json
import sys
import time
import urllib.request

def registrar_info(domain: str) -> tuple[str, str]:
    req = urllib.request.Request(
        f"https://rdap.org/domain/{domain}",
        headers={"Accept": "application/rdap+json", "User-Agent": "domain-check/1.0"},
    )
    with urllib.request.urlopen(req, timeout=15) as resp:
        data = json.load(resp)

    registrar = "unknown"
    for entity in data.get("entities", []):
        if "registrar" in entity.get("roles", []):
            for field in entity.get("vcardArray", [None, []])[1]:
                if field[0] == "fn":
                    registrar = field[3]

    expiry = next(
        (e["eventDate"] for e in data.get("events", []) if e["eventAction"] == "expiration"),
        "unknown",
    )
    return registrar, expiry

for name in sys.argv[1:]:
    try:
        reg, exp = registrar_info(name)
        print(f"{name:30} {reg:35} {exp}")
    except Exception as exc:
        print(f"{name:30} error: {exc}")
    time.sleep(1)

python3 registrars.py example.com example.net example.org

Unexpected registrar names in the output often reveal domains bought through resellers or old agencies, which is worth knowing before you need to renew or transfer them. For larger collections, see what a domain portfolio is and how to manage one.

How to Pick a Domain Registrar

1. Compare Renewal Prices

The first-year price is often a promotion. You'll pay the renewal price every year after, so that's the figure to compare. Check:

The standard renewal price for each extension you use.
Whether privacy, DNS, or lock features cost extra.
The redemption fee, charged to restore a domain after it expires, which can be much higher than a renewal.
The transfer-in price, which for gTLDs usually includes a year of renewal.

Some registrars sell at or close to the registry's wholesale cost. Others charge more but bundle support or services.

2. Look for Free Privacy Protection

Many registrars now include privacy or contact redaction at no cost. Avoid ones that charge a recurring fee for it. See what domain privacy protection is.

3. Check Account Security

Your registrar account controls your domain, so its security matters more than almost anything else. Look for:

Two-factor authentication with authenticator apps or hardware security keys, not just SMS.
Registrar lock that's on by default and easy to manage.
Login and change notifications by email.
Team or delegated access, so you don't share a single login with developers or agencies.
Registry lock, if you run a high-value domain and the registrar offers it.

For the full picture, read how to protect your domain from hijacking.

4. Make Sure Leaving Is Easy

A good registrar lets you unlock the domain and get the auth code yourself, instantly, from the dashboard. Be wary of registrars that require support tickets, phone calls, or fees to transfer out. See how to transfer a domain to another registrar.

5. Evaluate DNS Features

If you'll use the registrar's DNS, check that it supports:

All the record types you need, including CAA, SRV, and TXT records with long values.
Reasonable TTL control.
DNSSEC, ideally one-click. See what DNSSEC is.
An API, if you automate DNS changes.

If you prefer a dedicated DNS provider, make sure the registrar lets you set custom nameservers and DS records. The trade-offs are covered in registrar DNS vs third-party DNS.

6. Confirm TLD Support

No registrar sells every extension. If you need specific ccTLDs, confirm the registrar supports them and can meet any local presence requirements, sometimes through a trustee service.

7. Consider Support and Reputation

Check how you can contact support, whether it's available in your time zone, and how the registrar handles expired domains. Reading the terms around expiry, auctions, and redemption can tell you a lot about how a registrar treats customers.

8. Check API and Bulk Tools

Agencies and portfolio owners benefit from bulk editing, CSV export, and an API for renewals and DNS. Smaller users can ignore this.

Registrar Comparison Checklist

Criterion	What good looks like
Renewal price	Clearly listed, close to the first-year price
Privacy	Free and automatic where the extension allows it
Two-factor authentication	Authenticator app or security key supported
Transfer out	Self-service auth code, no fee
Lock	Enabled by default
DNS	Full record support, DNSSEC, sensible TTLs
Expiry handling	Clear grace and redemption terms, reasonable redemption fee
Support	Reachable when you need it
Upselling	Optional extras, not pre-ticked

Should You Keep Domains at Your Web Host?

Web hosts often register domains as resellers. It's convenient, but it ties your domain to your hosting account. If you leave the host, have a billing dispute, or the host has an outage, managing the domain becomes harder. Many people prefer to keep domains at a dedicated registrar and point them at their host. See domain name vs web hosting for the full comparison.

Consolidating Domains at One Registrar

If your domains are scattered across several registrars, consolidating them makes renewals and security easier to manage. Before moving:

List every domain, its registrar, and expiry date using the script above.
Check for transfer restrictions on recently registered or transferred domains.
Make sure the new registrar supports every extension.
Transfer in batches, starting with less critical domains.

Keep DNS hosting unchanged during transfers so your sites and email aren't affected.

FAQ: Domain Registrars

A registry operates a top-level domain and keeps the master database of its domains, such as Verisign for .com. A registrar is the company you buy from, which registers domains with the registry on your behalf.

Run an RDAP lookup on the domain using ICANN Lookup or a command such as curl against rdap.org, and look for the entity with the registrar role. WHOIS lookups also show the registrar name and IANA ID for many domains.

Yes. Unlock the domain at your current registrar, get the auth code, and start a transfer at the new registrar. For most generic TLDs, the transfer adds a year to the registration.

Sometimes. Many hosts sell domains as resellers of an accredited registrar. An RDAP or WHOIS lookup will show which registrar is officially responsible for the domain.

Not necessarily. Price and security aren't closely linked. Check for two-factor authentication, default registrar lock and a clean transfer process rather than judging by price alone.

No. Search engines don't rank sites based on the registrar. What matters is that your domain stays active, resolves reliably and points to a fast, well-run website.

Conclusion

A domain registrar is the company that registers your domain with the registry and gives you the tools to manage it. Registries run each extension, registrars sell and manage registrations, and resellers sell through registrars, so the company you paid isn't always the one listed in the registration data.

When choosing a registrar, look past the first-year price. Fair renewals, free privacy, strong two-factor authentication, a default lock, easy transfers out, and solid DNS matter far more over the life of a domain. Check where your current domains are registered with a quick RDAP lookup, and consolidate them at a registrar you trust.