Domain registrars: what to look for and what to avoid

The registrar holds the most important asset your website has. What to require, the practices that signal trouble, and how to move a domain to a better one.

3 minread 668words last updated

The short answer

The registrar is the company through which you rent your domain. It is the least glamorous supplier your website has and the one whose failure costs the most: a stolen or lapsed domain takes the site, the email and the brand’s address with it. Choose it for security, clarity and support, keep the account in your company’s name, and treat it with the same care as a bank login.

What to require

RequirementWhy
Two-factor authentication on the accountThe registrar login is the one that can transfer your domain away
Registrar lock and transfer lockPrevents transfers and changes without an explicit unlock step
Account in your company’s name, your card, a company recovery emailOwnership, renewals and recovery do not depend on a person or a supplier
Clear, stable renewal pricingFirst-year prices are often low; renewal prices are what you pay for a decade
Auto-renew that actually retries and notifiesExpiry by failed payment is the most common way domains are lost
Support that answers within a business dayRecoveries and transfers are time-sensitive
Plain interfaceFewer mistakes when the one person who logs in once a year needs to change something

What to avoid

  1. Domains registered in a supplier’s account or name. The most common ownership problem we untangle. Transfer to your own account.
  2. Registrars that sell hosting, email and site builders in the same confusing dashboard. Bundles make it hard to see what you own and where renewals go, and cancelling one product can affect another.
  3. Surprising renewal prices. A cheap first year followed by expensive renewals, with the price hard to find before purchase.
  4. Privacy or ownership tricks. Some cheap offers register the domain under the registrar’s own details. Check that your company is the registrant.
  5. No two-factor, no locks. In 2026 that is a decision to be an easy target.

Registrar and DNS as separate choices

The registrar registers; a DNS provider answers queries. They can be the same company and often are by default. Separating them is frequently better: a dedicated DNS provider offers faster propagation, an API for automation, security features and independence, so a registrar problem does not take DNS down with it. We keep the registrar simple and run DNS where the tooling is strongest.

Moving to a better registrar

Unlock the domain, obtain the transfer code, start the transfer at the new registrar, approve it, and confirm DNS still points where it should afterwards. Lower TTLs beforehand and export the DNS records first, exactly as for any migration. A transfer usually adds a year to the registration, so it is rarely wasted money.

What this means for you

Choose the registrar the way you would choose where to keep a deed: security, clarity and someone who answers. Keep the account in your company’s name with two-factor and locks on. Run DNS wherever the tooling is best. And if a supplier registered your domain, make moving it into your account the first item on the list.

Written by the CivSec S.M.A.R.T team

We build and run websites, software and AI systems for businesses. We write about what we see in that work, in plain language, and we update articles when things change.

Last checked . Spotted something outdated? Tell us.

Frequently asked questions

Does it matter which registrar we use if the domain is in our name?

Yes, for security and for the day something goes wrong. A registrar without two-factor or locks makes the domain easier to steal. A registrar with poor support makes a recovery take days. The domain is the one asset that takes everything else with it; the registrar deserves the same care as a bank.

Should DNS be at the registrar or somewhere else?

Either works; separating them is often better. A dedicated DNS provider gives faster changes, an API, better security features and independence from the registrar. Keep the registrar for registration and renewal, and run DNS where the tooling is best.

Our web supplier registered the domain for us. Is that a problem?

It is a risk if it is in their account or their name. Ask for a transfer to a registrar account in your company's name. A cooperative supplier does it within days; resistance tells you what you need to know.

Sources

  1. ICANN: Expired Registration Recovery Policy (accessed 2026-09-11)