Cloudflare Domain Pricing: What At-Cost Really Costs

Cloudflare Registrar sells domains at cost: the registry's wholesale price plus ICANN's fee of $0.20 per domain-year, with no markup on top, according to Cloudflare's own FAQ. For a .com that comes to $10.46, at registration and at every renewal. It is not always the cheapest first-year price, and the .com figure is about to move. Below: per-extension prices from HostList's check on 26 October 2026, a .com comparison, what Verisign's 1 November increase does to the maths, what you give up for the pricing, and a transfer checklist.

The short answer: wholesale plus the ICANN fee

Cloudflare announced the model in a press release dated 27 September 2018, when Registrar entered early access. The offer was simple: no markup on wholesale pricing, at registration and at renewal. It took aim at the familiar registrar tactic of offering a cheap first year, then charging much more at renewal. The current docs put it more plainly: Cloudflare only charges what is paid to the registry, with no markup and no surprise fees.

The maths is straightforward. At launch, BleepingComputer reported that a .com cost Cloudflare $7.85 to Verisign plus an ICANN fee of $0.18, making $8.03. Today Verisign's wholesale .com price is $10.26 and ICANN's fee is $0.20 per domain-year. Add those together and you get the $10.46 shown in Cloudflare's checkout.

One caveat matters here. At cost does not mean fixed. Cloudflare's price moves whenever the registry or ICANN changes its own fee, and that matters for the November increase.

Cloudflare domain pricing by extension

The snapshot below uses USD prices from HostList's own price checks on 26 October 2026, for a one-year term unless the term column says otherwise.

At cost does not mean no promotions

This catches people. When the registry runs a promotion, Cloudflare passes it through directly. In this snapshot, that applies to .org, .io, .dev and .app: the first year is cheaper, the renewal is higher, and the renewal is the number to budget against. Cloudflare is not hiding a markup in the jump, but the jump is still real.

.io needs a closer look: a $32.00 first year becomes $50.00 at renewal, so budget for the higher number. Registry prices move, so treat any table, including this one, as a dated snapshot and check the live price at checkout. HostList tracks .io and .ai separately if those are the extensions you care about.

The .xyz row is the odd one out: registration is higher than renewal. Do not read a broader pattern into that. Check the live price before you buy.

How .com compares with other registrars

Same check, same date, .com only (registration and renewal, USD):

Cloudflare is not the cheapest first year. Atom beats it by a small margin in this snapshot. The renewal column matters more, because that is where most of the domain cost lands over time. Cloudflare's renewal equals its registration price. Atom's rises a little, Openprovider's rises by $5, and Name.com's rises by $7.

The snapshot gives a simple five-year comparison, although it assumes prices stay flat, which they will not, as the next section explains. Five years of one .com comes to $52.30 at Cloudflare, a little more at Atom, and much more at Openprovider and Name.com. The gap between Cloudflare and Atom is about a dollar. The bigger saving is against registrars with steep renewal pricing. GoDaddy is the clearest example: its own guide to domain costs lists a $0.01 first-year .com with a three-year purchase, then a standard $22.99 a year, against Cloudflare's $10.46.

For current figures rather than the 26 October snapshot, use the live .com comparison on HostList.

The 1 November 2026 .com increase

The 26 October table is the price before this change, so read it that way.

Verisign's wholesale .com price rises 7% on 1 November 2026, from $10.26 to $10.97, as Webhosting Today reported. Verisign's contract allows up to 7% a year in the last four years of each six-year cycle. Further rises are therefore possible in November 2027, 2028 and 2029. If every rise is taken, wholesale .com reaches roughly $13.45 by 2029.

Cloudflare adds no registrar markup, so its .com price should move to about $11.17: $10.97 plus the $0.20 ICANN fee. To be clear, $11.17 is an expected price derived from the wholesale change. It is not a figure Cloudflare has published.

The awkward lesson is that at cost protects you from registrar markup, not from the registry. Every registrar selling .com pays Verisign the same wholesale fee, so the whole market feels this increase. A registrar with a thick renewal margin can absorb it quietly, or pass it on under another label. Cloudflare cannot hide it, which is the point of the model.

If you hold a lot of .com names, budget with the 2029 worst case in mind rather than today's $10.46.

What you give up for at-cost pricing

The price carries trade-offs, and Cloudflare's own docs spell them out. At-cost registration does not include the following:

• Your own nameservers. All domains on Cloudflare Registrar use Cloudflare nameservers. Third-party nameservers are not allowed. Business and Enterprise plans can brand the nameserver names, and you can delegate a single subdomain elsewhere. If you need different nameservers for the whole domain, the FAQ says you have to move it to another registrar.
• Refunds. Registrations, renewals, transfers and restores are non-refundable, because the money goes straight to the registry. Turn off auto-renew at least 30 days before expiry if you don't want a renewal.
• Internationalised domain names. IDNs, including Punycode names that begin with xn--, are not supported.
• Non-ASCII contact details. Contact data must be ASCII only, and you need a verified account email before you can register or transfer.
• Every extension. Cloudflare supports over 400, but not all. If an extension doesn't show in search, Cloudflare doesn't sell it.

You do get these at no extra cost, according to the launch announcement: two-factor authentication, automatic domain lock, WHOIS privacy and DNSSEC. For privacy, Cloudflare redacts personal data where the registry allows it, so a few extensions will still expose some details.

The nameserver rule is the major constraint. It is fine if you already run DNS and the CDN on Cloudflare. If your DNS lives elsewhere, at cost is not the right fit.

Buying a domain on Cloudflare

The process is brief. In the dashboard, open the Register domains page, search for the name, and select Purchase on the result you want. Cloudflare runs a final availability check at that point, because a name that has already been taken can still appear in results. Then choose a term, up to ten years for most extensions, enter the contact details, pay and accept the agreements.

Registration takes up to about 30 seconds, according to the register-a-domain docs. Auto-renew is on by default. You can turn it off whenever you like, but keep the 30-day rule in mind if you plan to let a name lapse.

Transferring a domain to Cloudflare

Transfers cause most of the confusion, and most of the unexpected charges. Cloudflare estimates about 30 minutes of active work and up to 10 days in total, depending on your current registrar. This checklist follows the transfer docs.

1. Check eligibility. ICANN blocks transfers within 60 days of a registration, a previous transfer, or a change to the registrant name, organisation or email. You also need a verified account email, a payment method, and a name without non-Latin characters.
2. Switch off DNSSEC at the old registrar. Wait at least 24 hours before changing nameservers, otherwise the old signatures can break resolution and stop the domain going active.
3. Get the domain active on Cloudflare first. It must be a full DNS setup using Cloudflare nameservers before you can enter the auth code. Activation usually takes minutes but can take up to 24 hours. A quick run through the DNS checker will confirm the nameservers have changed.
4. Remove the transfer lock and request the auth code at the old registrar. Codes expire, so ask for it when you are ready to use it.
5. Check the date of your last renewal. Wait at least 45 days after a renewal. Otherwise the registry won't add the extra year and you will have paid for it twice.
6. Enter the auth code. This is when you are billed. Most transfers add one year at cost to the current expiry date. The exceptions: .uk and .nz transfers are free and add no year.
7. Approve the transfer at the old registrar. The old registrar has up to five days to release the domain, and approving it yourself speeds things up.

Two more limits matter. The term cannot exceed ten years, so a domain already sitting at ten years gains nothing from a transfer, and .co is capped at five. If your domain sits on a platform like Shopify, Block or Wix, Cloudflare's workaround is to transfer to another registrar first, wait 60 days, then transfer to Cloudflare.

Renewals and expiry

Auto-renew runs about 30 days before expiry. If payment fails, Cloudflare tries three more times. Keep a working card on file and a contact email you actually read, because an unverified registrant email can put a domain on hold and replace it with a parked page.

If a domain expires, Cloudflare uses this lifecycle from the FAQ:

After day 75, the name is released and anyone can register it. Completed restores cannot be reversed or refunded, so the grace period is the cheap point at which to fix a mistake.

Who should use it, and who shouldn't

Cloudflare Registrar fits well if you already run DNS on Cloudflare and want predictable flat renewals. That covers many agency and freelance setups, where the domain, the CDN and the DNS often end up in one account. You also get the basic security features without add-on fees.

It is a poor fit in three cases. You need another DNS provider's nameservers. You want to register IDNs. Or you want the absolute lowest first-year price on .com, where Atom was ahead in the 26 October snapshot.

This is not a verdict on whether Cloudflare is the best registrar overall. That depends on your stack and your extensions. For the full write-up, read the HostList Cloudflare Registrar profile. To compare other options, browse all registrars or check pricing across extensions.

Frequently Asked Questions

Is Cloudflare Registrar really at cost?

That is Cloudflare's stated model: you pay the registry and ICANN list price with no registrar markup. The .com figure reconciles with the published split of $10.26 wholesale plus $0.20 ICANN. At cost does not mean cheapest, as the .com table shows.

Does Cloudflare charge for WHOIS privacy?

No. Redaction is included, and it applies where the registry allows it. Some extensions do not allow redaction, so check what your extension exposes publicly.

Why did my transfer cost money?

Because Cloudflare bills you when you enter the auth code, and a transfer normally buys one extra year at cost. Only some country-code extensions, such as .uk, have no transfer fee. If you transfer within 45 days of a renewal, you are still charged but no extra year is added.

Will Cloudflare's .com price go up?

It should. Verisign's wholesale increase lands on 1 November 2026, and with no markup on top Cloudflare's price is expected to be about $11.17. That figure is derived from the wholesale change, not from a Cloudflare announcement. More rises are possible in the following years.

Can I get a refund?

No. Cloudflare's FAQ says registrations, renewals, transfers and restores are non-refundable, because the money goes to the registry as soon as the transaction completes. If you do not want a renewal, turn off auto-renew at least 30 days before expiry.

Watch the renewal, not the first-year price: $10.46 for .com in the 26 October snapshot, with about $11.17 expected once Verisign's increase passes through. At cost protects you from registrar markup. It has never protected anyone from the registry.