A .com runs about $11/year as of June 2026, so the money is never the real risk. The real risk is the wrong name. Buy too early and you lock yourself into a brand you regret and pay renewals on a domain you never ship. Buy too late and you publish under a URL you have to throw away, losing the SEO history that came with it. Below is one decision rule, the free commands to verify a name before you pay, current registrar prices, and the registrar settings to lock in on day one.
TL;DR
Buy the domain only when both are true: you are within 30 days of publishing your first page, and you have slept on the name for at least 3 days. Otherwise use a free subdomain and wait. A .com is roughly $11/year and renews flat at a registry-cost registrar, so the price is not the gate. The name and your readiness are.
The decision rule
Buy when all five hold. If any one fails, wait.
- You have validated the niche enough to know you will publish on this domain.
- You can publish your first page within 30 days of buying.
- The name still feels right after sleeping on it for 3 days.
- The name is not trademarked in your target markets.
- You are willing to keep it at least 3 years, long enough to build SEO authority.
For indie builders the domain decision is more emotional than technical. Buying the domain makes the project feel real, which is exactly why people buy too soon. Renewals on an unused domain are cheap in dollars but expensive in sunk-cost bias: once you have paid for coolname.com for two years, you will talk yourself into shipping the wrong project on it.
What a domain actually costs in 2026
Prices below are typical retail at a registry-cost registrar (Cloudflare, Porkbun, Namecheap base price). All figures are as of June 2026 and move over time, so confirm at checkout.
| TLD | First year | Typical renewal | Notes |
|---|---|---|---|
.com | ~$11 | ~$11 (flat) | Verisign wholesale rose to $10.97 on Nov 1 2025; ~7%/yr increases are allowed through 2030 |
.dev | ~$12-15 | ~$12-15 | Google registry; HTTPS forced via preloaded HSTS |
.app | ~$14-18 | ~$14-18 | Google registry; also HSTS-preloaded |
.co | ~$12 first yr | ~$30 | Renewal jumps hard; budget for it |
.ai | ~$70-120 | ~$80-120 | Wholesale rose ~$20 to $160 (2-yr) on Mar 5 2026; pricey and rising |
.xyz, .online, .top | ~$1-3 promo | ~$15-30 | Cheap year one, then a steep renewal cliff |
Two pricing traps cause most regret:
- The renewal cliff. A registrar advertises
$0.99 first yearand renews at $20-30. Always read the renewal price, not the promo. Verisign-backed.comis the only large TLD that renews flat at a registry-cost registrar. - The WHOIS privacy upsell. Privacy normally costs $8-15/year at legacy registrars. Cloudflare, Porkbun, and Namecheap include it free. Never pay for it.
Step by step: verify before you pay
1. Shortlist 5-10 names in a text file
Keep them in a local file, not in a registrar search box. Some search tools log “interest” on a name, and a few have been accused of front-running. Cloudflare and Porkbun do not do this, but a plain text file costs you nothing.
2. Check availability with whois
No signup, no tracking. This loop flags which candidates are free:
for d in mybrand.com mybrand.app mybrand.dev mybrand.ai; do
if whois "$d" 2>/dev/null | grep -qi 'no match\|not found\|status: available'; then
echo "$d AVAILABLE"
else
echo "$d TAKEN"
fi
doneIf whois is not installed: brew install whois (macOS) or sudo apt install whois (Debian/Ubuntu).
3. Sleep 3 days
Most names that feel clever on day 1 feel embarrassing by day 3. Say each finalist out loud, spell it over an imaginary phone call, and check it does not read badly when concatenated (the classic expertsexchange.com problem). Keep the list and revisit.
4. Check trademarks in your target markets
A domain being available does not mean the name is free to use. A registered trademark on the exact name in a market you sell into means the holder can eventually claim the domain through UDRP. Free official databases:
US: https://tmsearch.uspto.gov/ (new Trademark Search; TESS retired 2023; US filings only)
EU: https://www.tmdn.org/tmview/ (TMview, multi-jurisdiction)
China: https://wsjs.cnipa.gov.cn/ (CNIPA trademark search)Search the exact word and obvious variants in your goods/services class. An available .com plus a live US trademark on the exact name is a skip, not a bargain.
5. Pick the TLD
Default to .com. It is still the strongest trust and recall signal, and at a registry-cost registrar it renews flat at ~$11. Good alternatives for a tech audience: .dev, .app, .co, .ai (accepting the higher price). Avoid bargain .xyz, .online, .site, .top for anything trust-sensitive. For more, see the domain extension guide.
6. Buy at a registry-cost registrar and lock it on day one
Choose a registrar that sells at registry cost with free WHOIS privacy. Apply these settings immediately:
Day-one registrar settings
─────────────────────────────────────
[x] Auto-renew ← never let it lapse and drop
[x] WHOIS privacy (free)
[x] Transfer lock (clientTransferProhibited)
[x] Two-factor on the account
[x] DNSSEC (if your DNS supports it)Pay 1 year unless you are certain; multi-year prepay only saves money if .com keeps its ~7% annual rises, and it does not protect a name you abandon. If you use Cloudflare Registrar, you can flip the locks via API after registering:
# enable auto-renew, privacy, and transfer lock on a registered domain
curl -X PATCH "https://api.cloudflare.com/client/v4/registrar/domains/$DOMAIN" \
-H "Authorization: Bearer $CF_TOKEN" \
-H "Content-Type: application/json" \
--data '{"auto_renew": true, "privacy": true, "locked": true}'Note: Cloudflare Registrar requires your domain to use Cloudflare’s nameservers, so pick it only if you plan to run DNS on Cloudflare.
7. Set email forwarding immediately
A catch-all forward means verification mail lands before you set up Google Workspace. On Cloudflare:
Cloudflare → Email → Email Routing → enable catch-all → forward to your@personal-inbox
# or use your registrar's built-in forwarding8. Leave it parked until content is close
If your first page is more than 30 days out, leave the domain parked. Do not put up an empty “coming soon” page that Google can crawl and tag as thin. Point DNS and publish on the same day you have real content.
Day-one and after-launch checklist
Before paying:
- WHOIS / availability confirmed for the chosen name (and any defensive variants you actually want).
- Trademark searches done in your target jurisdictions.
- A real 30-day publishing plan, not a dream.
- Email forwarding plan figured out so verification mail lands.
After launch, verify:
dig +short A yourdomain.com # returns the expected IP once DNS is set
curl -sI https://yourdomain.com # valid SSL + HTTP 200 once the site is live
whois yourdomain.com | grep -i expir # expiration ~1 year out, privacy activeIf SSL fails, give the certificate a few minutes to provision, then see why your SSL certificate is not working.
Common pitfalls
- Buying 5 domains “just in case” — you will renew them for years out of guilt.
- Picking a name that needs spelling explained every time you say it.
- Choosing a niche-specific name that boxes you in if the niche shifts.
- Paying for WHOIS privacy that a registry-cost registrar gives away free.
- Reading the promo price instead of the renewal price and getting hit at year two.
- Buying a
premiumdomain before any content exists — sunk cost will warp later decisions.
FAQ
- Is
.comstill worth it in 2026?: Yes, as the default. It renews flat at ~$11/year at a registry-cost registrar and still carries the strongest trust and recall. Use a non-.comonly when the name is genuinely strong and you accept some trust loss. - Why did my
.comrenewal go up?: Verisign raised the wholesale.comfee to $10.97 on Nov 1 2025 and is allowed ~7% annual increases through 2030, which could push it toward ~$13 by the end of the cycle. A registry-cost registrar passes the wholesale through with no extra markup. - Should I buy a domain before validating the niche?: No. Validate first on a free subdomain. The dollars are small, but the time you sink into a wrong-name domain is not. See picking a content-site niche.
- Are
premiumdomains worth paying for?: Almost never for a new indie project. Spend that money on content and time instead. - Which registrar should I use?: A registry-cost registrar with free WHOIS privacy and stable history (Cloudflare, Porkbun, Namecheap base price). Avoid registrars whose renewals spike to 2-3x the first-year price.
- Do I need to defensively register typos?: Skip it unless your brand is already well known. Squatters target known brands, not pre-launch projects.