Running the business

Cloudflare Registrar: what at-cost domain pricing means, and the trade-offs

Stack Founder HQ · Updated 18 October 2026 · Running the business · How we write

Domain prices are a small cost, but they are paid every year for as long as a product exists. Registrars often advertise a discounted first year, so the renewal price is the number to check. Cloudflare Registrar takes a different approach. It sells registrations, renewals and transfers at cost, meaning the price charged by the registry and ICANN, with no markup. This article explains what that means in practice and the conditions that come with it.

*Details checked on 18 October 2026 in Cloudflare's Registrar documentation and Registrar FAQ. Domain prices vary by top-level domain (TLD) and are shown when you search for a domain in the Cloudflare dashboard.*

What "at cost" means

Cloudflare says it charges only what is paid to the registry for your domain: "No markup. No surprise fees." It also says that, "unlike other registrars", domains only renew at the list price set by the registry. The renewal price is therefore the same kind of price as the registration price, not a higher "renewal rate".

Cloudflare's FAQ points out some consequences:

Because the money is passed straight to the registry, registration, renewal and transfer fees are non-refundable. Check the domain name carefully before buying.
A transfer in isn't free. Most registries require a transfer to include at least one more year of registration, which Cloudflare charges at cost and adds to your expiry date. Some country-code domains, including .uk and .nz, have no transfer fee.
Restoring a domain after it has expired usually involves a separate restore fee, which varies by TLD.

Cloudflare also redacts WHOIS contact information by default, and offers one-click DNSSEC, which is free.

The main condition: Cloudflare nameservers

This is the trade-off that matters most. According to Cloudflare's FAQ, all domains on Cloudflare Registrar use Cloudflare nameservers, and you can't use third-party nameservers. In practice:

Your DNS must be hosted on Cloudflare, using a full setup zone.
If one subdomain needs to be on a different DNS provider, you can delegate that subdomain.
Business and Enterprise plan customers can use custom nameservers, which are still Cloudflare's service under your own names.
If you need different nameservers altogether, you have to move the domain to another registrar.

For many small software businesses this is no problem. Cloudflare's DNS is free and widely used, and if your site is on Cloudflare Pages or behind Cloudflare's proxy, you are already set up this way. However, if your DNS is managed elsewhere, for example by your hosting provider, AWS Route 53 or a managed email provider's setup, Cloudflare Registrar isn't the right choice for that domain.

Transferring a domain to Cloudflare

Cloudflare's documentation lists these prerequisites and rules:

The domain must first be active on Cloudflare with a full DNS setup. You can't enter the authorisation code until it is.
ICANN's 60-day rule: domains can't be transferred within 60 days of registration, a previous registrar transfer, or a change to the registrant's contact details. If you start a transfer during that window, you can leave it In Progress, and Cloudflare will wait until the window has passed. Cloudflare notes that this 60-day rule doesn't apply to .uk domains.
Term limits: ICANN-governed TLDs cap registration at 10 years. If your domain already has 10 years left, no extra year can be added. Some country-code TLDs have shorter caps.
DNSSEC is turned off during the move. You can turn it back on afterwards.

Changing the registrant's name, organisation or email counts as a Change of Registrant under ICANN rules. Cloudflare emails an approval link, and approving applies a 60-day transfer lock unless you choose not to apply it.

Renewals and expiry

Cloudflare sets new registrations to auto-renew by default. Its FAQ says it attempts renewal about 30 days before expiry and retries three more times if that fails. A failed renewal is usually a payment problem, so keep your card details up to date.

If a domain does expire, Cloudflare describes this timeline:

Days after expiry	What happens
1–30	Grace period: the domain still resolves, and you can renew
31–40	Suspension: the domain shows a suspension page
41–70	Redemption: restoring is usually possible, for a restore fee
71–75	Pending delete

Also, make sure you verify the registrant email address after registering. Cloudflare explains that ICANN requires a hold on domains whose registrant email isn't verified, which stops the site resolving until you verify it.

When another registrar may suit you better

You need your DNS somewhere else. This is the main reason, as explained above.
Your TLD isn't supported. Cloudflare supports more than 400 TLDs and publishes the list on its TLD policies page, but not every TLD is available.
You want to bundle services. Some registrars bundle email hosting, website builders or other services with domains. Cloudflare Registrar sells domains only, though Cloudflare offers separate services such as email routing.

When comparing registrars, look at the renewal price and the transfer-out process, not just the first-year price. Over five or ten years, the renewal price matters far more.

Practical checklist

Put the domain on Cloudflare DNS (full setup) before transferring, and check all your records, including email (MX, SPF, DKIM, DMARC), have been copied correctly.
Check whether the domain is within ICANN's 60-day transfer lock.
Unlock the domain and get the authorisation code from your current registrar.
After transferring, turn DNSSEC back on, check auto-renew is enabled and verify the registrant email.
Keep payment details current so renewals don't fail.