# Domain registrars privacy ratings

Where to register and renew domain names.

**Our pick:** [Cloudflare Registrar](https://privacyratings.com/domain-registrars/cloudflare-registrar/): Registry cost with no markup on registration or renewal, free WHOIS redaction, security-key login, and automatic DNSSEC with Cloudflare DNS.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Cloudflare Registrar](https://privacyratings.com/domain-registrars/cloudflare-registrar/) (our pick) | C (66/100) | United States (Five Eyes) | Domain registrar that charges registry cost with no markup, with free WHOIS redaction, transfer lock and one-click DNSSEC. |
| [Njalla](https://privacyratings.com/domain-registrars/njalla/) | D (57/100) | Costa Rica | Domain service run by njalla.srl in Costa Rica. Njalla registers domains in its own name and grants customers full usage rights, and accepts cryptocurrency. |
| [INWX](https://privacyratings.com/domain-registrars/inwx/) | D (50/100) | Germany (Fourteen Eyes) | German domain registrar with a large selection of European extensions, flat renewal pricing, authenticator-app login and optional registry lock. |
| [Orange Website](https://privacyratings.com/domain-registrars/orange-website/) | D (50/100) | Iceland | Icelandic hosting company that also registers domains, asks only for an email address at sign-up and accepts Bitcoin. |
| [NameSilo](https://privacyratings.com/domain-registrars/namesilo/) | D (48/100) | United States (Five Eyes) | US domain registrar with flat renewal pricing and free WHOIS privacy, email forwarding and DNS on every domain. |
| [Gandi](https://privacyratings.com/domain-registrars/gandi/) | D (45/100) | France (Nine Eyes) | French domain registrar and hosting provider with free WHOIS privacy on most extensions, TOTP and security-key login, and a yearly transparency report. |
| [Joker.com](https://privacyratings.com/domain-registrars/joker-com/) | D (45/100) | Germany (Fourteen Eyes) | German domain registrar run by CSL GmbH, offering hundreds of domain extensions, free DNS hosting with DNSSEC, and optional paid WHOIS privacy. |
| [Spaceship](https://privacyratings.com/domain-registrars/spaceship/) | D (41/100) | United States (Five Eyes) | US domain registrar from the team behind Namecheap, offering domain registration with free WHOIS privacy, hosting, email and a domain marketplace. |
| [Namecheap](https://privacyratings.com/domain-registrars/namecheap/) | F (39/100) | United States (Five Eyes) | Large US domain registrar with free WHOIS privacy on eligible extensions and TOTP or security-key login. |
| [GoDaddy](https://privacyratings.com/domain-registrars/godaddy/) | F (36/100) | United States (Five Eyes) | US domain registrar and web hosting company offering domain registration, website building, hosting and business email. |
| [Hover](https://privacyratings.com/domain-registrars/hover/) | F (36/100) | Canada (Five Eyes) | Canadian domain registrar owned by Tucows, offering domain registration with free WHOIS privacy on supported extensions and email hosting. |
| [Dynadot](https://privacyratings.com/domain-registrars/dynadot/) | F (30/100) | United States (Five Eyes) | California-based domain registrar with free WHOIS privacy on eligible extensions, two-factor login and optional registry lock. |
| [IONOS](https://privacyratings.com/domain-registrars/ionos/) | F (30/100) | United States (Five Eyes) | Web hosting company and domain registrar, part of the German IONOS Group, offering domains, website builders, hosting, email and cloud servers. The ionos.com site is run by IONOS Inc. in the US. |
| [Porkbun](https://privacyratings.com/domain-registrars/porkbun/) | F (27/100) | United States (Five Eyes) | US domain registrar with free WHOIS privacy on most extensions, authenticator-app and security-key login, and an API. |
| [Squarespace Domains](https://privacyratings.com/domain-registrars/squarespace-domains/) | F (27/100) | United States (Five Eyes) | Domain registrar run by the website builder Squarespace, which took over Google Domains customers. Registrations include WHOIS privacy on eligible domains, DNSSEC and SSL. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?
- **Free WHOIS privacy** (weight 2): Is registrant data hidden from public WHOIS and RDAP at no extra cost?
- **Honest renewal pricing** (weight 1): Are renewal prices the same as, or close to, the first-year price?
- **Two-factor login** (weight 2): Do accounts support two-factor authentication with an authenticator app or security key?
- **Transfer and registry lock** (weight 1): Is transfer lock on by default, with registry lock available?

Source: https://privacyratings.com/domain-registrars/