Domain Registrar vs Registry: What's the Difference?

People use "registrar" and "registry" interchangeably, but they are different things with different roles. A registry operates a top-level domain (like .com or .org). A registrar sells domain registrations to the public. The registry is the wholesaler; the registrar is the retailer.

Understanding this distinction helps you make sense of how domain pricing works, why transfers take time, what happens when things go wrong, and who to contact when you have a problem.

What Is a Domain Registry?

A domain registry (also called a registry operator) is the organization that manages a specific top-level domain. It maintains the authoritative database of every domain registered under that TLD and operates the TLD's name servers.

What Registries Do

Maintain the TLD database. The .com registry knows about every .com domain in existence: who registered it, which registrar it was registered through, what name servers it uses, and when it expires. This database is the single source of truth for the TLD.

Operate name servers. When someone's browser needs to find the name servers for example.com, it queries the .com TLD name servers, which are operated by the registry. The registry responds with the name server addresses, which then handle the rest of the DNS lookup.

Set wholesale pricing. The registry sets the wholesale price that registrars pay per domain registration. Registrars add their own markup. When Verisign (the .com registry) raises its wholesale price, every registrar's .com price increases.

Define TLD policies. Each registry sets rules for its TLD. Some TLDs have registration restrictions (.edu requires accredited educational institutions; .bank requires verified financial institutions). Others are open to anyone. The registry decides.

Process registrations. When a registrar submits a domain registration, the registry processes it: checking availability, adding the record to the database, and activating the domain in DNS. This happens through a standardized protocol called EPP (Extensible Provisioning Protocol).

Major Registries

| Registry | TLDs Managed | |---|---| | Verisign | .com, .net | | Public Interest Registry (PIR) | .org | | Donuts (Identity Digital) | .app, .dev, .shop, and hundreds of newer gTLDs | | Afilias (Identity Digital) | .info, various newer gTLDs | | CNNIC | .cn (China) | | Nominet | .uk (United Kingdom) | | DENIC | .de (Germany) |

Country-code TLDs are typically managed by a registry designated by that country's government or a delegated organization.

What Is a Domain Registrar?

A domain registrar is a company accredited by ICANN to sell domain name registrations to the public. Registrars are the companies you interact with when you search for, register, renew, and manage your domains.

What Registrars Do

Sell domain registrations. The registrar is the storefront. You search for a domain, pay for it, and the registrar handles the registration with the appropriate registry on your behalf.

Manage customer accounts. Your registrar account is where you manage your domains: update DNS settings, enable privacy protection, set up auto-renewal, configure transfer locks, and manage contact information.

Provide DNS management. Most registrars offer DNS hosting, allowing you to manage your domain's DNS records (A, CNAME, MX, TXT, NS records) through their control panel.

Handle renewals. Registrars process renewal payments and communicate with the registry to extend your registration. They also send renewal reminders before your domain expires.

Process transfers. When you transfer a domain to or from a registrar, the registrar handles the transfer process according to ICANN's transfer policy.

Offer additional services. Many registrars sell related services: web hosting, email hosting, SSL certificates, website builders, and WHOIS privacy protection.

Popular Registrars

Cloudflare Registrar, Namecheap, Porkbun, Google Domains, GoDaddy, Hover, Name.com, and Gandi are among the most widely used registrars. There are over 2,500 ICANN-accredited registrars worldwide. For comparisons, see best domain registrars.

How They Work Together

The registration process involves both the registrar and the registry working in sequence.

Domain Registration Flow

1. You search for example.com at your registrar. The registrar checks the .com registry to see if the name is available.

2. You pay the registrar. The registrar collects your payment, which covers their fee plus the registry's wholesale cost.

3. The registrar submits registration to the registry. Using EPP, the registrar tells the .com registry: "Register example.com with these name servers and this registrant data."

4. The registry processes the registration. Verisign adds example.com to the .com database and activates it in DNS.

5. The domain is live. DNS servers worldwide can now resolve example.com to the name servers specified in the registration.

This entire process typically takes seconds to minutes.

Domain Renewal Flow

1. Your registrar sends you renewal reminders as the expiration date approaches.
2. You pay the registrar (or auto-renewal charges your payment method).
3. The registrar tells the registry to extend the registration.
4. The registry updates the expiration date in its database.

If renewal fails (payment declined, auto-renewal disabled, emails not received), the domain enters the expiration process. See what happens when a domain expires and domain grace periods for the full timeline.

Domain Transfer Flow

1. You initiate a transfer at the new (gaining) registrar.
2. The gaining registrar sends a transfer request to the registry.
3. The registry notifies the losing registrar.
4. The losing registrar emails the registrant for confirmation.
5. After confirmation (or after a waiting period if no response), the registry moves the domain to the gaining registrar.
6. The gaining registrar extends the registration by one year.

Transfers typically take 5 to 7 days. The 60-day lock after initial registration or a previous transfer is an ICANN policy to prevent domain theft.

Why the Distinction Matters

Pricing

When a registry raises its wholesale price, every registrar's retail price goes up. Verisign, the .com registry, has a contract with ICANN that allows annual price increases. This is why .com domains get slightly more expensive over time. The registrar's markup varies, which is why different registrars charge different prices for the same TLD.

Understanding the registry/registrar split explains why some TLDs are more expensive than others. A TLD with a high wholesale registry price (like .io at around $30) will always be more expensive at retail than a TLD with a lower wholesale price.

Problem Resolution

When something goes wrong with your domain, knowing whether the issue is at the registrar level or the registry level determines who can fix it.

Registrar issues: Billing problems, account access, DNS management, transfer delays, customer support. Contact your registrar.

Registry issues: TLD-wide DNS outages, policy changes, domain status holds placed by the registry. Your registrar contacts the registry, or you escalate through ICANN.

Domain Security

Your domain's security depends on both layers. The registrar protects your account (authentication, transfer locks, account recovery). The registry protects the TLD infrastructure (DNS stability, EPP security, protection against unauthorized bulk operations).

A compromise at the registrar level (someone gains access to your account) lets them change your DNS, transfer your domain, or modify your settings. A compromise at the registry level is rarer but more catastrophic, potentially affecting millions of domains.

Registrar vs Registry vs Registrant

Three terms that start with "registr-" and mean different things:

• Registry: Operates the TLD. Manages the master database. Sets wholesale pricing. (Example: Verisign for .com)
• Registrar: Sells domain registrations. Manages your account. Provides the user interface. (Example: Namecheap, Cloudflare)
• Registrant: The person or organization that registers and uses the domain. (Example: You)

The hierarchy flows: ICANN oversees registries. Registries authorize registrars. Registrars serve registrants. For more on how ICANN fits into this structure, see what is ICANN.

Choosing Based on This Understanding

When choosing a registrar, remember that the domain itself comes from the registry and is the same regardless of which registrar you use. A .com domain from Namecheap is identical to a .com domain from Cloudflare at the registry level. The differences are in the registrar's:

• Retail pricing and renewal rates
• Management interface and ease of use
• DNS hosting quality and features
• Customer support responsiveness
• Security features (2FA, domain locking)
• Additional services (email hosting, web hosting)

The registry is chosen for you when you pick a TLD. The registrar is your choice. Choose based on the registrar's service quality, not on any perceived difference in the domain itself.

For ongoing domain management, tracking expiration dates across registrars is essential. The domain expiry guide covers this in detail, and the domain portfolio guide addresses multi-registrar management.

Key Takeaways

• A registry operates a TLD and maintains the master database of all domains under it.
• A registrar sells domain registrations to the public and manages customer accounts.
• The registry is the wholesaler; the registrar is the retailer. Both are needed for the system to work.
• Domain pricing is determined by the registry's wholesale cost plus the registrar's markup.
• Your domain is identical regardless of which registrar you use. Choose a registrar based on service quality and pricing.
• Understand which layer handles which issues so you know who to contact when problems arise.