# Register a .app domain offshore, with HTTPS from day one

> Register a .app domain offshore with Isthmus Domains in Panama. No KYC, one verified email, WHOIS privacy, crypto payment. HTTPS is required on every .app.

- URL: https://isthmusdomains.com/tld/app/
- Last updated: 2026-10-19
- Publisher: Isthmus Domains (https://isthmusdomains.com)

Google Registry runs .app, and every .app site must load over HTTPS. Register yours from Panama with a verified email and pay in crypto.

**Quick answer — Can I register a .app domain offshore without KYC?**

Yes. Google Registry sets no registrant restriction on .app, and we ask only for a verified email, not an ID. WHOIS privacy is included. Plan a TLS certificate, because browsers force HTTPS on .app. At **Isthmus Domains**, an offshore domain registrar in Panama, a .app costs **$8.99/year** the first year and $15.49/year to renew (19 October 2026), paid in crypto with no KYC.

## Search a .app domain

Search a domain name: https://isthmusdomains.com/app/domains/?q=yourname.app

Popular extensions: .app ($8.99)

Availability for .app comes live from Google Registry over RDAP each time you search.

## .app price per year

| Extension | 1st year | Renewal | Transfer | WHOIS privacy | Restrictions |
| --- | --- | --- | --- | --- | --- |
| .app | $8.99 | $15.49 | $15.49 | Free | HTTPS required |

*1 extensions · prices per year in USD*

The first .app year is priced lower than renewals, and the site will not open in browsers without a valid HTTPS certificate.

## .app at a glance

| Attribute | Value |
| --- | --- |
| Registry | Google Registry (Charleston Road Registry Inc.) |
| Kind of extension | New generic TLD (gTLD) run by Google, HTTPS required |
| Who can register | Anyone; no restriction |
| Without KYC at Isthmus Domains | Yes, email check only |
| Public WHOIS / RDAP | Privacy contact replaces yours |
| Registration period | 1 to 10 years |
| Domain protection | Offered as an option |

## Does Google Registry vet who registers a .app?

No. Google Registry, through its Charleston Road Registry subsidiary, places no restriction on who holds a .app. You do not need a published app, a developer account or a company. The registry's one special rule is technical, not personal: HTTPS. At Isthmus Domains, the personal side stays small. We confirm one email address, as ICANN requires, and keep it private. No ID, no selfie, no address proof. You pay in crypto, so no card issuer learns about the name or the product behind it. Founders can secure the name before the app even exists.

## RDAP output for a .app

.app is a generic extension, so ICANN's RDAP service covers it, as it has covered all gTLDs since WHOIS was retired on 28 January 2025. A query on your name returns our privacy service in the contact fields, and your email, the only contact data we collect, stays out of view. The public can still read the nameservers, registrar, dates and status. Google Registry receives registration data under its own policies and keeps its own copy.

## Domain protection for an app brand

Anyone curious about an app can look up its domain. With the optional [Domain protection](https://isthmusdomains.com/domain-protection/), Google Registry and public RDAP show our company as holder. The transfer lock is on by default, so every transfer or DNS edit needs confirmation in your account. We hold only your email. We release the data we hold only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case. Each complaint is read by a person, and you hear about it when the law allows.

## Google's $25 million extension

Google bought the right to run .app for $25 million at an ICANN auction on 25 February 2015, through Charleston Road Registry. The extension opened to the public in May 2018. From the start, Google put the whole TLD on the HSTS preload list built into major browsers. A browser therefore refuses plain HTTP for any .app site. Google Registry applies the same HTTPS rule to .dev and .page. The registry sets no other condition on registrants. The .app zone is also signed with DNSSEC, according to root zone data checked on 8 October 2026.

## Where .app fits

| Use | Why .app fits |
| --- | --- |
| Mobile app landing pages | The name tells visitors there is something to install. |
| Web apps and SaaS | HTTPS is enforced, which suits logins and payments. |
| Progressive web apps | A .app address matches what users open on their phone. |
| Beta and waitlist sites | A short, clear name for an early product. |

## HTTPS and renewal: what to plan for .app

You need a TLS certificate before the site shows anything. A free certificate from an ACME authority works; add a CAA record in our DNS editor if you want to limit issuers. Plain HTTP redirects will not help, because the browser never makes the HTTP request. Email on the domain is not affected; HSTS concerns browsers. Renewal costs more than the first year at most registrars, including ours. A new .app also stays locked for 60 days before any transfer.

## .app pricing at other registrars

Porkbun lists .app at $8.75 for the first year and $14.93 to renew, checked on 19 October 2026. On 8 October 2026, Cloudflare charged $8.20 then $14.20, Namecheap $10.98 then $23.18, and Dynadot $14.00 then $14.50. Njalla sold it at €30 a year and OrangeWebsite at €22.00. Namecheap's renewal is more than double its first year.

## .app questions

### Why does my .app site show an error over plain HTTP?

Because .app is on the HSTS preload list, browsers switch every request to HTTPS before it leaves the device. Without a valid certificate, the visitor sees a security error and no page. Install a certificate on your host, then point the domain with A, AAAA or CNAME records in our DNS editor.

### Do I need to publish an app to own a .app?

No. There is no proof of an app, no store listing and no developer account requirement. Any person or company can register a .app for any lawful site. The only rule is technical: serve it over HTTPS. We check your email address and nothing else, and payment is in crypto.

### Can I use a .app only for email?

Yes. HSTS preload affects browsers, not mail. Add MX and TXT records in our DNS editor, or use your own nameservers. The domain still needs HTTPS if you later put a website on it. An email-only domain renews each year like any other, so keep renewal on.

### How do you handle complaints about a .app?

No name is above the rules. We do not act on a complaint alone: copyright, defamation or competitor claims need a Panamanian court decision. Phishing, malware, botnets, CSAM and fraud against victims, such as fake app downloads, lead to suspension on a documented report. Read our [abuse policy](https://isthmusdomains.com/abuse/).

## Sources

1. [Root Zone Database: .app](https://www.iana.org/domains/root/db/app.html) — IANA (2026-10-08)
2. [HSTS preload and Google Registry](https://kb.porkbun.com/article/96-hsts-preload-and-google-registry) — Porkbun (2026-10-08)
3. [.app (gTLD)](https://en.wikipedia.org/wiki/.app_(gTLD)) — Wikipedia (checked 2026-10-19)
4. [Domain pricing](https://porkbun.com/products/domains) — Porkbun (checked 2026-10-19)

---

Isthmus Domains: Isthmus Domains is an offshore domain registrar in Panama: register any domain with no KYC and pay in crypto. A .com costs $11.99/year; Domain protection adds $29 a year.