Home / Guides

Domain add-ons you shouldn't pay for.

A .com should cost about $10–$16 a year. The other $90 on your registrar bill is a menu of add-ons that are free elsewhere, already included, or solving problems you don't have. Here's the honest tour.

The short answer

The domain is the product. Almost everything else at checkout is margin. Paid SSL, paid WHOIS privacy, paid "domain lock," premium DNS, security scanners — each is either free at a good registrar or free somewhere better. The two things genuinely worth doing cost nothing: turn on auto-renew, and check the renewal price before you buy.

Get your exact price in 60 seconds → Free calculator · itemized · no email required
01 · Why checkout looks like that

Domains are cheap. Upsells are the business.

Registrars pay a wholesale fee per .com — around $10 — to the registry. Selling you the domain at $12 barely keeps the lights on. The profit is in what happens between "add to cart" and "pay now": a gauntlet of pre-checked boxes and urgent-sounding protection bundles. None of this means your registrar is evil. It means the checkout page is a sales floor, and you should walk it the way you'd walk a car dealership's.

02 · The skip list

Six add-ons to decline, and why

  • Paid SSL certificates ($30–$100/yr). Identical encryption is free from Let's Encrypt and bundled by every serious host. We wrote the full breakdown here — short version: decline it everywhere.
  • WHOIS / domain privacy ($10–$15/yr). Worth having, never worth buying. Privacy regulations already redact most personal data, and good registrars include full privacy free, by default.
  • "Domain lock" / protection bundles ($10–$30/yr). Transfer lock — the thing that stops your domain being moved without approval — is a free standard feature, usually already on. The paid bundle re-sells you the padlock your door came with.
  • Premium DNS ($36–$60/yr). Cloudflare's free DNS is world-class — faster than most paid offerings. Paying a registrar for "premium DNS" is buying bottled tap water next to a spring.
  • Security scanners ("SiteLock" and friends, $30–$150/yr). Automated scanners that mostly notify you after something's wrong, on sites that — if built and hosted properly — have almost no attack surface to scan. Static sites like the ones we build have no database or login to breach in the first place.
  • Email upsells ($36–$72/yr per mailbox). Registrar webmail is usually the worst product in the building. If email matters to your business, put it on Google Workspace or Microsoft 365 and own it properly.
03 · Worth doing

The short list that actually protects you

  • Auto-renew: on. Free, and it prevents the only true domain catastrophe — expiry. Expired domains get scooped by resellers within days, and buying yours back is miserable.
  • A current card and a real email on the account. Most "I lost my domain" stories are actually "my card expired and the warning emails went to an address I stopped reading."
  • Multi-year renewal at an honestly-priced registrar. Locking in years at $11 each is rational. Locking in years at an inflated price is just prepaying the problem.
  • Owning it yourself. The domain should be registered to you, in your account — not your designer, not your old marketing agency. It's the deed to your online presence.

What a .com should cost: $10–$16 a year, renewal included. At-cost registrars like Cloudflare charge the wholesale fee with zero markup; Porkbun and Namecheap sit close behind with privacy free. If your renewal is $20+, the difference is buying nothing.

Already at an expensive registrar? Moving is a 30-minute job that pays a dividend every year — the step-by-step transfer guide covers it, including the DNS-copying step people miss.

04 · Red flags

Spot the sales floor at a glance

  • Pre-checked boxes at checkout. Uncheck everything, then decide.
  • A first-year price under $5. That's a teaser; the renewal is the real price.
  • "Protection" bundles that don't itemize what's inside.
  • An SSL certificate anywhere on a domain bill.
  • Renewal reminders that arrive as upsell emails.

The bigger picture: your domain is one line of what a website actually costs. The full pricing guide lays out every line honestly — including the ones agencies pad.

Free — the 1-page version

The Domain-Bill Audit Checklist

Ten line-by-line checks to run against your registrar bill — the whole guide condensed to one page you can finish in five minutes. Drop your email and it unlocks right here.

No spam, no calls unless you ask. We'll only email you if you reply first.

The Domain-Bill Audit — 10 checks

Run these against your registrar account and last invoice.

  1. Renewal price: a .com should renew at $10–16. Above $20? Plan a transfer.
  2. SSL line item: any charge for a certificate = cancel it; free SSL is identical.
  3. WHOIS/domain privacy: if it's a paid line, your registrar charges for what good ones include free.
  4. "Protection" or "lock" bundle: transfer lock is a free standard feature. Cancel the paid version.
  5. Premium DNS: cancel; Cloudflare's free DNS outperforms it.
  6. Security scanner add-on: cancel; it mostly notifies you after problems on sites that shouldn't have them.
  7. Email upsell: if you pay your registrar for mailboxes, price Google Workspace instead.
  8. Auto-renew: ON. This is the one that prevents catastrophe.
  9. Card + contact email current: most lost domains are expired cards and unread warnings.
  10. Registered to YOU: not your designer, not an old agency. It's the deed — hold it.

Common questions

The things people ask us

Is domain privacy worth paying for?

Worth having, not worth paying for. Regulations already redact most WHOIS data, and reputable registrars include full privacy free as standard. A registrar charging $10–$15/year for it is telling you how the rest of the menu is priced.

Is "domain lock" a scam?

The lock isn't — transfer lock is a real safeguard, free and usually on by default at any reputable registrar. Paying extra for a branded protection bundle that includes it is paying for the padlock your door came with.

Do I need premium DNS?

Almost certainly not. Cloudflare's free DNS is among the fastest and most reliable in the world. Registrar "premium DNS" at $3–$5/month is a slower version of something you can have free.

Why is my renewal triple the first-year price?

First-year prices are loss leaders — $2–$9 to win you, $20+ to keep you, betting you won't bother moving. The renewal price is the real price. Check it before registering; transfer out if you're stuck.

Should my web designer own my domain?

No — you should, in your own account, always. It's the deed to your online presence. A good developer works inside your account or with delegated access. Our builds always register the domain to the client.

Audit the whole picture

Your website bill deserves the same scrutiny.

See what a website should actually cost — every line itemized honestly, no padding.