Offshore, in Panama · One verified email, no ID · We act on Panamanian court orders, not on complaints alone · Paid in crypto
Language: English
Search a domain

.app · $8.99/year · no KYC · crypto

Register a .app domain offshore, with HTTPS from day one

Google Registry runs .app, and every .app site must load over HTTPS. Register yours from Panama with a verified email and pay in crypto.

Last updated: · 5 min read

Quick answer

Can I register a .app domain offshore without KYC?

Yes. Google Registry sets no registrant restriction on .app, and we ask only for a verified email, not an ID. WHOIS privacy is included. Plan a TLS certificate, because browsers force HTTPS on .app. At Isthmus Domains, an offshore domain registrar in Panama, a .app costs $8.99/year the first year and $15.49/year to renew (19 October 2026), paid in crypto with no KYC.

Search a .app domain

Popular extensions

  • .app $8.99

Availability for .app comes live from Google Registry over RDAP each time you search.

.app price per year

1 extensions · prices per year in USD
Extension1st yearRenewalTransferWHOIS privacyRestrictions
.app$8.99$15.49$15.49FreeHTTPS required

The first .app year is priced lower than renewals, and the site will not open in browsers without a valid HTTPS certificate.

.app at a glance

RegistryGoogle Registry (Charleston Road Registry Inc.)
Kind of extensionNew generic TLD (gTLD) run by Google, HTTPS required
Who can registerAnyone; no restriction
Without KYC at Isthmus DomainsYes, email check only
Public WHOIS / RDAPPrivacy contact replaces yours
Registration period1 to 10 years
Domain protectionOffered as an option

Does Google Registry vet who registers a .app?

No. Google Registry, through its Charleston Road Registry subsidiary, places no restriction on who holds a .app. You do not need a published app, a developer account or a company. The registry's one special rule is technical, not personal: HTTPS. At Isthmus Domains, the personal side stays small. We confirm one email address, as ICANN requires, and keep it private. No ID, no selfie, no address proof. You pay in crypto, so no card issuer learns about the name or the product behind it. Founders can secure the name before the app even exists.

RDAP output for a .app

.app is a generic extension, so ICANN's RDAP service covers it, as it has covered all gTLDs since WHOIS was retired on 28 January 2025. A query on your name returns our privacy service in the contact fields, and your email, the only contact data we collect, stays out of view. The public can still read the nameservers, registrar, dates and status. Google Registry receives registration data under its own policies and keeps its own copy.

Domain protection for an app brand

Anyone curious about an app can look up its domain. With the optional Domain protection, Google Registry and public RDAP show our company as holder. The transfer lock is on by default, so every transfer or DNS edit needs confirmation in your account. We hold only your email. We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. Each complaint is read by a person, and you hear about it when the law allows.

Google's $25 million extension

Google bought the right to run .app for $25 million at an ICANN auction on 25 February 2015, through Charleston Road Registry. The extension opened to the public in May 2018. From the start, Google put the whole TLD on the HSTS preload list built into major browsers. A browser therefore refuses plain HTTP for any .app site. Google Registry applies the same HTTPS rule to .dev and .page. The registry sets no other condition on registrants. The .app zone is also signed with DNSSEC, according to root zone data checked on 8 October 2026.

Where .app fits

UseWhy .app fits
Mobile app landing pagesThe name tells visitors there is something to install.
Web apps and SaaSHTTPS is enforced, which suits logins and payments.
Progressive web appsA .app address matches what users open on their phone.
Beta and waitlist sitesA short, clear name for an early product.

HTTPS and renewal: what to plan for .app

You need a TLS certificate before the site shows anything. A free certificate from an ACME authority works; add a CAA record in our DNS editor if you want to limit issuers. Plain HTTP redirects will not help, because the browser never makes the HTTP request. Email on the domain is not affected; HSTS concerns browsers. Renewal costs more than the first year at most registrars, including ours. A new .app also stays locked for 60 days before any transfer.

.app pricing at other registrars

Porkbun lists .app at $8.75 for the first year and $14.93 to renew, checked on 19 October 2026. On 8 October 2026, Cloudflare charged $8.20 then $14.20, Namecheap $10.98 then $23.18, and Dynadot $14.00 then $14.50. Njalla sold it at €30 a year and OrangeWebsite at €22.00. Namecheap's renewal is more than double its first year.

.app questions

Why does my .app site show an error over plain HTTP?

Because .app is on the HSTS preload list, browsers switch every request to HTTPS before it leaves the device. Without a valid certificate, the visitor sees a security error and no page. Install a certificate on your host, then point the domain with A, AAAA or CNAME records in our DNS editor.

Do I need to publish an app to own a .app?

No. There is no proof of an app, no store listing and no developer account requirement. Any person or company can register a .app for any lawful site. The only rule is technical: serve it over HTTPS. We check your email address and nothing else, and payment is in crypto.

Can I use a .app only for email?

Yes. HSTS preload affects browsers, not mail. Add MX and TXT records in our DNS editor, or use your own nameservers. The domain still needs HTTPS if you later put a website on it. An email-only domain renews each year like any other, so keep renewal on.

How do you handle complaints about a .app?

No name is above the rules. We do not act on a complaint alone: copyright, defamation or competitor claims need a Panamanian court decision. Phishing, malware, botnets, CSAM and fraud against victims, such as fake app downloads, lead to suspension on a documented report. Read our abuse policy.

Sources (4)
  1. Root Zone Database: .app — IANA (2026-10-08)
  2. HSTS preload and Google Registry kb.porkbun.com/article/96-hsts-preload-and-google-registry — Porkbun (2026-10-08)
  3. .app (gTLD) — Wikipedia (checked 2026-10-19)
  4. Domain pricing porkbun.com/products/domains — Porkbun (checked 2026-10-19)

.com $11.99/year · no KYC · crypto

Search a domain