Cloudflare Registrar review: at-cost domains, with one catch

The short version

• .com first year: $10.46. Cloudflare sells domains at cost: the registry’s fee plus ICANN’s fee, with no markup.
• Renewal: $10.46 a year today. Same as the first year. Cloudflare says it never adds surcharges to renewals.
• 3-year total: $31.38 at today’s prices, or $32.80 if your two renewals follow Verisign’s new .com fee.
• Right for people who already use Cloudflare for DNS, or are happy to. Every domain here must use Cloudflare’s nameservers.

A domain registrar is the company you rent your domain name from. Cloudflare shows prices only in its domain search, not on a public price list, so the dollar figures below come from cfdomainpricing.com, a third-party tracker not run by Cloudflare. The .com price matches Verisign’s fee plus ICANN’s, as Cloudflare’s at-cost promise says it should.

We manage our own domains at Namecheap and Spaceship, not Cloudflare, and have no affiliate deal with any registrar. Apart from those third-party prices, everything here comes from Cloudflare’s own pages.

What a .com really costs over three years

The arithmetic: $10.46 × 3 = $31.38. With the new fee: $10.46 + $11.17 + $11.17 = $32.80.

The $10.46 is Verisign’s current $10.26 wholesale fee plus ICANN’s $0.20 fee. Cloudflare’s pages describe one at-cost price that already covers ICANN’s charge, so there is no separate ICANN fee to add.

Other popular endings

These also come from cfdomainpricing.com, the third-party tracker. Note that .org and .io cost more to renew than to buy. At cost means you get whatever deal the registry offers, including its renewal price.

What is included free

• WHOIS privacy. Your name, email and address are redacted from public lookups by default, where the registry allows it. Your state and country still show, under ICANN policy.
• DNS. Free Cloudflare DNS, plus one-click DNSSEC, which signs your DNS records so they cannot be faked.
• SSL. Free Universal SSL, so your site loads over HTTPS when it runs through Cloudflare.
• Email forwarding. Cloudflare Email Routing forwards mail for [email protected] to an inbox you already have, free and unlimited. You get up to 200 forwarding rules per domain. It is not a mailbox.
• Two-factor login. Security keys (including Touch ID and Windows Hello), authenticator apps and email codes.
• Registrar lock. Domains stay locked against transfers until you turn the lock off in the dashboard.
• Auto-renew. On by default. Cloudflare first tries to renew about 30 days before expiry. If a domain lapses, most endings get a 40-day grace period to renew, though the site shows a suspension page after day 30.

Upsells to watch for

There is not much to push. Cloudflare’s pages describe no paid bundles at domain checkout. What can cost extra:

• A real mailbox. Cloudflare does not sell one. For sending and receiving at your own address you need email hosting from someone else.
• Paid Cloudflare plans. Pro is $20 a month billed yearly ($25 billed monthly), and Business is $200 a month billed yearly ($250 billed monthly). A domain does not need either. Custom-branded nameservers need Business or Enterprise.
• Registry lock. The strongest anti-hijack protection comes only with Custom Domain Protection on the Enterprise plan. Its price is not published.
• Restore fees. If a domain passes the grace period, getting it back costs a restore fee on top of the renewal. The amount varies by ending. Cloudflare shows it before you confirm, but does not publish it on the pages we checked.

Moving your domain away

• In the dashboard, go to Manage Domains, select the domain, open Configuration and turn off the domain lock.
• Copy the auth code (also called an EPP or transfer code) and enter it at your new registrar.
• Approve the request in Cloudflare to start it right away. If you do nothing, it auto-approves on the fifth day.
• Under ICANN rules, you cannot move a domain within 60 days of registering it, transferring it, or changing the owner details. Cloudflare lists no transfer-out fee. The new registrar usually charges for a year it adds.
• You can keep using Cloudflare’s free DNS after the move, because Cloudflare manages DNS for domains registered elsewhere.

Our domain transfer guide covers the steps at the other end.

Who it is right for, and who should look elsewhere

Right for:

• Sites that already run DNS, CDN or SSL through Cloudflare.
• Anyone who wants renewals at cost, with no registrar markup or promo pricing.
• People who want free privacy, DNSSEC and security-key login in one account.

Look elsewhere if:

• You need your host’s or builder’s nameservers. Cloudflare does not allow third-party nameservers.
• Your domain sits at Shopify, Wix or Block. These often block nameserver changes, so you cannot move straight to Cloudflare. Cloudflare suggests moving to another registrar first and waiting 60 days.
• You want email bundled in, or a domain with accented or non-Latin letters, which Cloudflare does not support.

To compare Cloudflare with Spaceship, Porkbun and others on 3-year cost, see best domain registrars.

Sources: Cloudflare: Registrar, .com domains, Registrar FAQ, transfer out, renewals, WHOIS redaction, Email Routing pricing, plans. Verisign: Q1 2026 results (.com price change). Dollar prices per ending are from cfdomainpricing.com, a third-party tracker not run by Cloudflare, because Cloudflare publishes no public price list.