Domain Registration Rules and Restrictions: The Complete List (2026)

 

What domain registration rules actually mean

Domain registration rules decide who can register a given extension and what they must prove. The good news is that the vast majority of TLDs are open to anyone with valid contact details, and it is mostly country-code and niche extensions that impose requirements.

So domain rules are less a wall and more a checkpoint. Knowing which extensions have one, and what they demand, is the whole game.

This article covers eligibility rules: who is allowed to register which extension. Separate technical rules also apply to every domain name, including length limits and which characters are permitted.

 

Open TLDs you can register without verification

Most domain extensions sit here. You supply valid registrant information and you're done.

This includes the classic generics like .COM, .NET, and .ORG, popular tech-adjacent ccTLDs used generically such as .IO, .CO, and .AI, and the large field of new gTLDs like .XYZ, .ONLINE, and .STORE. Several country codes, including .ME and .CO, are also open to registrants worldwide.

If your target extension is on this tier, the only requirement is honest WHOIS data. Inaccurate details can still cost you the domain later, so treat that as non-negotiable.

 

Restricted TLDs and the documents each one requires

This is where registration planning matters. Restrictions cluster into a few recognizable groups, and each group's domain registration rules ask for a specific kind of proof or eligibility declaration.

 

Country-code TLDs with local presence rules

Some ccTLDs require a tie to the country or region.

• .US requires a US nexus. You must certify one of three categories: US citizen, permanent resident, or an organization or entity with a bona fide US presence.
• .CA is limited to Canadians who meet CIRA's Canadian Presence Requirements, a set of categories covering citizens, permanent residents, legal representatives and Aboriginal people. Another set of categories is related to non-individuals, like Canadian corporations, among others.
• .EU requires EU or EEA citizenship, residence, or an established organization, per EURid's rules.

Requirements vary by registry and change over time, so confirm the current policy before committing.

 

Sponsored and community TLDs

These are gated by a sponsoring organization and are not open to the general public. Common examples include:

• .AERO – Reserved for aviation community members
• .MUSEUM – Museums, professional museum associations, and individuals with a verified link to a museum
• .JOBS – Employers and HR departments
• .RADIO – Registrants must be linked to the radio industry

 

Professional and financial TLDs

Some extensions require credentials or a license. Legal extensions such as .LAW generally require proof of a license to practice.

Exact credential requirements and accepted proof vary by registry, so check the specific TLD's policy before you commit.

 

HTTPS-enforced TLDs

A handful of extensions, including .APP, .DEV, .PAGE, .BOO, .DAD, .DAY, .ING, .MOV, .RSVP and more, don't gate who registers but do enforce a technical requirement. Google Registry requires HTTPS for most of its TLD, which means an extra layer of security.

 

Why domain registrations get rejected (and how to fix it)

A rejected registration usually isn't a dead end. Many failures trace back to a small set of fixable causes:

• Missing or incorrect nexus data. Restricted TLDs often ask you to declare eligibility. For example, a non-US company that selects a citizen or permanent-resident category on a .US order will be rejected. The fix is to re-file under the bona fide US presence category if the business genuinely qualifies.
• Inaccurate or incomplete WHOIS. Mismatched names, addresses, or unverifiable contacts can stall or reverse a registration. Correct the record to match your documentation.
• Unmet documentation. If a TLD needs proof such as a VAT number, business registration, or license, the order waits until you supply it.

Automated checks often clear in minutes, but manual document review can take several business days. If you simply don't qualify, a trustee or local-presence service can hold the domain on your behalf for certain ccTLDs. It's a legitimate route, but it adds cost and puts a third party on the record, and some registries prohibit trustees outright, so check before relying on it.

 

TLD restrictions that affect resale and transfers

For investors, eligibility isn't just a registration hurdle. It can follow the domain.

If an extension requires a qualifying registrant, your buyer must also qualify, which shrinks your resale pool. Some ccTLDs also impose stricter change-of-registrant or transfer rules than generic TLDs. Factor that into any restricted TLD you plan to hold and flip, because a limited exit is a real cost even on a cheap acquisition.

 

TLD eligibility requirements: quick reference table

Last verified: July 2026. Registry policies change, so confirm before registering.

TLD	Requirement type	Typical requirement
.COM / .NET / .ORG	Open	Valid WHOIS only
.IO / .CO / .AI	Open	Valid WHOIS only
.US	Restricted	US nexus declaration
.CA	Restricted	Canadian presence (CIRA)
.EU	Restricted	EU/EEA citizenship, residence, or establishment
.LAW	Professional	License or credential proof
.APP / .DEV / .PAGE / .BOO / .DAD / .DAY / .ING / .MOV / .RSVP	Open (technical)	HTTPS required

 

Requirements shift as registries update policy, so treat this as a starting map and verify the current rule before you register.

Ready to register a domain with an extension you qualify for? Start your domain search.

 

FAQ

 

What are restrictions on a domain name?

Restrictions are conditions a registry places on who may hold a domain or how it can be used. Common ones include residency or local-presence rules on ccTLDs, credential checks on professional TLDs, verification on sponsored TLDs like .AERO, and technical rules like the HTTPS requirement on Google Registry domains such as .APP and .DEV.

Separately, universal syntax rules apply to every domain name: letters, numbers, and hyphens only, no hyphen at the start or end, and a 63-character limit per label.

 

Do I have to live in a country to register its domain extension?

It depends on the extension. Many country-code TLDs like .ME and .CO are open to anyone worldwide, while others such as .US, .CA, and .EU require a verifiable connection to that country or region. Always check the registry's eligibility policy before you buy.

 

What is a nexus requirement?

A nexus requirement is a declared connection to a country, used most notably by .US. When registering, you certify that you are a US citizen, a US permanent resident, or an organization with a genuine US presence. Registrants must continue to meet it for the life of the domain.

 

Why was my domain registration rejected?

The most common causes are an incorrect or missing eligibility declaration, inaccurate WHOIS data, or documentation the registry required but didn't receive. All three are usually fixable by correcting the information and resubmitting. A rejection rarely means the name is permanently off-limits to you.

 

Do .APP and .DEV really require HTTPS?

Yes. Browsers will only load these TLDs over HTTPS. You need a valid SSL certificate in place for the site to work at all, so plan for one before launch.

 

What are .AI domain registration rules?

.AI is the country-code extension for Anguilla, but it has no local presence or residency requirement, so anyone worldwide can register one with valid contact details. The main quirk is the term length: .AI domains are registered in two-year increments rather than one year. No documents or eligibility proof are needed.

 

What are .ORG domain registration rules?

.ORG is an open generic TLD managed by the Public Interest Registry (PIR). Despite its long association with nonprofits and organizations, it has never been restricted, so any individual or business can register a .ORG with valid WHOIS data. You do not need to prove nonprofit or organizational status.

 

What is required to register a domain name?

For most extensions, you need an available domain name and accurate registrant (WHOIS) contact details, nothing more. Restricted extensions add requirements such as a local presence, an eligibility declaration, or supporting documents like a business number or professional license. Registration is a renewable license tied to that contact data, so keeping it accurate matters for the life of the domain.