How to choose and protect a domain

Use the radio test before the availability test

Say the full address once to someone who has not seen it and ask them to type it. If you need to explain a hyphen, an unusual spelling or whether the ending is .com or .co, customers will face the same problem. Short is helpful, but clear beats clever.

Check what happens when words run together. A phrase that looks fine in a logo may acquire an unintended meaning as a continuous domain. Also search common misspellings and the singular and plural forms; you do not need to buy every variant, but you should know who owns them.

“Available” is a technical result, not legal clearance

A registrar can confirm that a registry will currently accept a string. It cannot promise that the string does not infringe a company name or trademark. Search the web, business registers and trademark databases in the markets where the project will operate.

WIPO has handled domain disputes under the UDRP since 1999. The process can transfer or cancel a domain registered and used in bad faith; it does not award damages. A basic conflict check before launch is cheaper than rebuilding packaging, email addresses and advertising later.

Compare five-year cost, not the checkout banner

Promotional registration may cost one euro or even appear free in a hosting bundle, while renewal is many times higher. Write down the normal renewal price, transfer price and fee for restoring an expired name. Multiply the annual renewal by five and add any privacy or local-presence service.

For a country domain, read the exact registry rules. .de and .uk do not share one lifecycle merely because both are European. Check eligibility, supported characters and what the registry does after expiry.

Put ownership and recovery in the company’s hands

Register a business domain to the correct legal entity. Use an email address the organisation controls, but not one that depends solely on the domain being protected; otherwise a DNS failure can also block password recovery. Enable two-factor authentication and registrar lock where available.

• Store recovery codes in the company password manager.
• Keep automatic renewal and a backup payment method active.
• Record the registrar, registry and renewal date outside the account.
• Review DNS users and agency access after every supplier change.

Buy defensive names with a purpose

A second spelling or key country extension can redirect to the main site. Do not build dozens of empty duplicate websites. Every extra name creates another renewal and recovery obligation, so protect the variants that address a real risk and document what each one is meant to do.