Cloudflare Registrar Review: At-Cost Pricing and Security Integrations
Review summary
Cloudflare Registrar sells domains at registry cost with no markup. It requires Cloudflare nameservers and integrates security tools such as Registrar Lock and DNSSEC.
Cloudflare Registrar review shows a service that registers and renews domains at exact registry wholesale cost plus the ICANN fee. Launched around 2018, it targets users who already manage DNS and security through Cloudflare. The model eliminates renewal price spikes common with other registrars.
Domains must use Cloudflare authoritative nameservers during registration. This requirement ties the registrar to Cloudflare’s anycast DNS, CDN, and SSL offerings. Enterprise customers gain additional controls through Custom Domain Protection.
Cloudflare Registrar Pricing and Plans
Registration and renewal prices match registry wholesale rates with no added markup. As of late October 2026, .com domains cost between $10.44 and $11.17 per year after recent Verisign adjustments. .org renewals start near $8.50, while .net sits around $11.86. More than 390 TLDs follow the same at-cost structure.
Auto-renewal is enabled by default. There are no first-year discounts or hidden fees beyond the standard ICANN charge. Support remains ticket-based for non-Enterprise accounts, which limits assistance for complex issues.
Enterprise plans add Custom Domain Protection with registry lock where supported and out-of-band verification for changes. Foundation DNS features such as advanced nameserver sets appear in beta for larger accounts.
Cloudflare Registrar Security Features and Limitations
Registrar Lock activates by default and displays as clientTransferProhibited in WHOIS records. Users unlock domains through the dashboard to generate an EPP code for transfers. A standard 60-day ICANN lock applies after registration or inbound transfers.
DNSSEC and WHOIS redaction come free on eligible domains. HSTS preload configuration occurs in the SSL/TLS Edge Certificates section for proxied zones. Administrators set max-age up to 12 months, includeSubDomains, and the preload directive before submitting to hstspreload.org.
Enterprise accounts receive manual multi-user verification and enhanced change controls. The service lacks email hosting and offers narrower TLD coverage than some competitors. Transferring nameservers requires moving the domain to another registrar.
| Registrar | .com Renewal | Extra Locks | Nameserver Flexibility |
|---|---|---|---|
| Cloudflare Registrar | $10.44–$11.17 | Default + Enterprise registry lock | None (Cloudflare only) |
| Porkbun | Competitive flat rate | Free email forwarding | Full choice |
| Namecheap | Variable renewals | Free WhoisGuard | Full choice |
Common user complaints center on the nameserver requirement. Reviews from 2026 note strong value for technical teams already inside Cloudflare but limited appeal for users needing broader registrar features.
Frequently asked questions
Does Cloudflare Registrar charge a markup on renewals?
No. Prices equal registry wholesale cost plus the ICANN fee on every renewal. This holds for .com, .org, .net and over 390 other TLDs as of November 2026.
How is HSTS preload configured with Cloudflare Registrar domains?
HSTS settings appear in the SSL/TLS dashboard under Edge Certificates. Users enable HTTPS first, set max-age and preload directives, then submit the domain manually at hstspreload.org after meeting the 12-month criteria.
What happens if I need to change nameservers later?
Domains registered with Cloudflare Registrar require Cloudflare nameservers. Moving to third-party nameservers means transferring the domain out to another registrar first.
Is Registrar Lock included by default?
Yes. The lock activates automatically and shows as clientTransferProhibited. Enterprise plans add registry-level lock and manual verification steps for protected domains.
Comments
No comments yet. Be the first!