A custom domain is cheap, but it is also a small commitment. Buy it too early and you lock yourself into a name you regret; buy it too late and you publish content under a URL you have to throw away. Below is a decision rule, the commands to verify a name before you pay, and the registrar settings to lock in on day one.
Background
For indie builders, the domain decision is more emotional than technical. Buying the domain feels like making the project real. But the right time to buy a domain depends on whether you have validated the niche, picked the name carefully, and are ready to publish within 30 days. Buying earlier than that means paying renewal fees on a domain you may never use.
How to tell
- You have validated the niche enough that you know you will publish something on this domain.
- You can publish your first article within 30 days of buying the domain.
- You have a name you do not hate after sleeping on it for 3 days.
- You have checked that the name is not trademarked in your target markets.
- You are willing to keep this domain for at least 3 years — long enough to build any SEO authority.
Quick verdict
Buy the domain only when you are within 30 days of publishing AND you have slept on the name for at least 3 days. Otherwise, use a free subdomain and wait.
Before you start
- Have 5-10 candidate names ready.
- Have a “publish-within-30-days” plan, not a dream.
- Email forwarding plan figured out (so verification mail lands).
Step by step
-
Shortlist 5-10 candidate names in a text file. Do not type them into a registrar yet — some registrars log “interest” and prices may rise.
-
Check availability with
whois(no signup, no tracking):
for d in mybrand.com mybrand.app mybrand.dev mybrand.ai; do
if whois "$d" 2>/dev/null | grep -qi 'no match\|not found\|status: available'; then
echo "$d AVAILABLE"
else
echo "$d TAKEN"
fi
done-
Sleep 3 days. Most names that felt clever on day 1 feel embarrassing by day 3. Keep the list and revisit.
-
Check trademarks in target markets. Quick free sources:
US: https://tmsearch.uspto.gov/ (TESS)
EU: https://www.tmdn.org/tmview/
China: https://wsjs.cnipa.gov.cn/ (Chinese trademark search)A .com available + a registered US trademark on the exact name = the trademark holder can eventually reclaim it. Skip.
-
Pick the TLD. Defaults:
.com. Otherwise.app,.dev,.co,.aifor tech. Avoid bargain.xyz,.online,.site,.topfor anything trust-sensitive. -
Buy at a major registrar. Apply these settings on day one:
Registrar must-have settings
─────────────────────────────────────
[x] Auto-renew ← never let it lapse
[x] WHOIS privacy (free)
[x] Transfer lock
[x] Two-factor on the account
[x] DNSSEC (if your DNS supports it)Pay 1 year unless certain. CLI example (Cloudflare Registrar):
# domains via Cloudflare API once registered
curl -X PATCH "https://api.cloudflare.com/client/v4/registrar/domains/$DOMAIN" \
-H "Authorization: Bearer $CF_TOKEN" \
-H "Content-Type: application/json" \
--data '{"auto_renew": true, "privacy": true, "locked": true}'- Email forwarding immediately. A catch-all so you can receive verification mail without setting up Workspace yet:
Cloudflare → Email → Email Routing → enable catch-all forward to your@personal-inbox
# or registrar's built-in forward- Park the domain or set a temporary landing only if content is within 30 days. Otherwise leave parked to avoid Google “discovering” an empty domain.
Implementation checklist
- WHOIS / availability confirmed for the chosen name (and the variants you want defensively).
- Trademark searches done in target jurisdictions.
- Registered with auto-renew + privacy + transfer lock + 2FA + DNSSEC.
- Email forwarding set up for
@yourdomain.com→ personal inbox. - 30-day publishing plan committed to before paying.
After-launch verification
dig +short A yourdomain.comreturns the expected IP after DNS configured.curl -vI https://yourdomain.comreturns valid SSL + 200 once the site is live.- WHOIS shows correct expiration (typically 1 year out) and privacy active.
Common pitfalls
- Buying 5 domains “just in case” — you will renew them for years out of guilt.
- Picking a name that requires spelling explanations — you will regret it every time you say it.
- Choosing a niche-specific name that boxes you in if the niche evolves.
- Forgetting WHOIS privacy and getting buried under cold outreach spam.
- Buying expensive premium domains before any content exists — sunk cost will warp your decisions later.
- Going with the cheapest registrar — renewals often spike to 2-3x the listed first-year price.
FAQ
- Is
.comstill required in 2026?: Not required, but still the default trust signal. Use a non-com only if the name is strong and you accept some trust loss. - Should I buy a domain before validating the niche?: No. Validate first with a free subdomain. Domain costs are small but the time you sink into a wrong-name domain is not.
- Are premium domains worth paying for?: Almost never for new indie projects. Spend that money on content and time instead.
- Which registrar should I use?: Pick a major registrar with stable history, easy DNS, and free WHOIS privacy. Avoid the cheapest registrar; renewal prices often spike.
- What about defensive registration of typos?: Skip unless your brand is well-known. Squatting trolls only target known brands.