Domain Registrar
A domain registrar is a company authorized to provide domain-name registration and management services.
It is the provider through which a registrant commonly purchases, renews, and administers a domain.
ICANN maintains and accredits registrars for generic top-level domains under its registrar system. ICANN's registrar information
What a Registrar Can Manage
A registrar account may provide controls for:
- Registration
- Renewal
- Contact information
- Domain Transfer
- Nameserver delegation
- DNSSEC
- Domain locking
- Registration-data settings
Many registrars also sell unrelated services such as:
- Web Hosting
- Website builders
- TLS certificates
- DNS hosting
Those additional services are not inherently part of domain registration.
Registrar vs. DNS Provider
The registrar controls the domain registration.
The DNS provider manages the **DNS Zone**.
These may be the same company, but they do not have to be.
Cloudflare explicitly notes that a business can use Cloudflare for authoritative DNS without moving either its hosting provider or its registrar. Cloudflare's DNS documentation
Registrar vs. Hosting Provider
The registrar manages the domain.
The hosting provider serves the website.
A business can therefore:
Register at Provider A Use DNS at Provider B Host at Provider C.
This separation is normal.
Why It Matters
The registrar has control over important domain-level actions.
Someone with registrar access may be able to:
- Change nameservers
- Transfer the domain
- Modify registration information
- Disable or change DNSSEC
- Allow the registration to expire
Registrar access should therefore be treated as important administrative access.
Common Problems
Common problems include:
- Registrar mistaken for the host
- Credentials belonging to a former contractor
- Shared registrar logins
- Auto-renew disabled accidentally
- Domain-lock settings misunderstood
- Nameservers changed while DNSSEC remains incorrectly configured
How to Improve
Use an organization-controlled registrar account.
Enable strong authentication, document ownership, maintain valid billing information, and restrict access to people who actually need domain-level control.