Domain names: buying, valuing and protecting yours

How to choose and buy a domain, when a premium one is worth it, which variants to register, and how to keep the one you have.

3 minread 717words last updated

The short answer

A domain name is two assets at once: a brand asset that decides how people find and remember you, and a security asset on which your website, your email and every password reset depend. Buy it for memorability, easy spelling over the phone and fit with your market’s expectations. Pay a premium when the premium removes a spelling problem or matches the brand exactly, not for vanity. Register the obvious variants, typos and local endings for your serious markets, redirected to the main one. Keep everything at one reputable registrar, in the company’s name, with auto-renew, a valid payment method, locks and two-factor. And never let a domain lapse, because the day it does, the site, the email and the brand go with it.

Choosing one

CriterionWhyTest
MemorablePeople type it from memory and say it aloudSay it once on the phone; can they type it?
Easy to spellEvery misspelling is a lost visitor or a phisher’s opportunityAsk three people to spell it after hearing it
Short enoughLong domains are mistyped and truncatedFits on a business card without wrapping
Fits the marketLocal endings signal locality; a generic ending signals internationalWhich do your customers expect?
No conflictsTrademarks, existing brands, unfortunate readingsSearch it; read it as one word
Available variantsTypos and local endings obtainableCheck before committing

Buying and protecting

  1. Buy at a reputable registrar, in the company’s name, on a company email that several people can access.
  2. Register the variants: common typos, plural or hyphenated forms, the local ending per serious market; redirect all to the main domain.
  3. Turn on auto-renew with a valid company payment method, and a calendar reminder a month before expiry regardless.
  4. Enable the transfer lock and two-factor on the registrar account; consider registry lock for a domain the business depends on.
  5. Keep DNS at a provider you control, with the records exported and the setup documented.
  6. Review yearly: registrant, contact email, expiry, locks, who has access.

Valuing the one you have

Not by resale figures, which matter only if you would sell. By what losing it would cost: the visitors who type it, the email built on it, the links and redirects pointing at it, the brand recognition, the years of search history. For a business that value dwarfs any premium price they debated at the start, which is the argument for protecting it with the same care as any other asset of that size.

What this means for you

Choose a domain people can remember and spell, pay a premium only when it removes real friction, register the plausible variants, and protect the whole set at one reputable registrar in the company’s name with auto-renew, locks and two-factor. Review it yearly. The domain is the root of your digital presence, and it is the asset most often lost by inattention rather than by anyone trying to take it.

Written by the CivSec S.M.A.R.T team

We build and run websites, software and AI systems for businesses. We write about what we see in that work, in plain language, and we update articles when things change.

Last checked . Spotted something outdated? Tell us.

Frequently asked questions

Should we pay for a premium domain?

When the alternative is a domain customers will misspell, misremember or type into a competitor's, and when the brand is worth the investment. A premium domain that matches the name exactly can save years of explaining and lost traffic. A premium domain for vanity, when a clear alternative exists, is money better spent on the site.

Which variants should we register?

The main domain, the common typos and plural or hyphenated forms, and the local ending for each market you sell in seriously, all redirected to the main one. Registering every possible ending is unnecessary; registering the ones a customer would plausibly type, or a phisher would plausibly use, is prudent and cheap.

How do we value a domain we already own?

By what it would cost the business to lose it: the traffic that arrives by typing it, the email that depends on it, the brand built on it, the redirects and links pointing at it. For a business that runs on its domain that value is far larger than any resale figure, which is why protection matters more than valuation.

Sources

  1. ICANN: Information for Domain Name Registrants (accessed 2026-09-12)