How to Skip the Registrar Upsells: What to Untick at Checkout

You found the name, checked it was free, and clicked through to buy it. Then checkout starts growing: privacy, hosting, email, a security package, a builder, and a support plan, each pre-ticked or dressed up as a recommendation. By the payment button, the price no longer looks like the price that made you click. Here is a simple rule for every box: keep it only if you decided you needed it before you arrived, and untick everything you are meeting for the first time at checkout.

Start before checkout, not at it

Before you open a registrar, write down three things: the exact name, the extension, and how long you want it for. That list is your defence: anything on the checkout page that is not on it is a sales pitch, however helpful it sounds. If you have not settled on a name, run it through the Domain Availability Checker first, so you arrive with a decision already made.

Then check the term length, not just the headline figure. A low first-year price means little if the renewal price, shown in smaller text further down the page, is much higher. Check whether auto-renew is switched on: it protects you from losing a name to expiry, but you should choose it deliberately, not discover it after paying.

The one box worth keeping ticked: domain privacy

When you register a domain, the registrar collects your contact details and they are entered into the public WHOIS database. Without privacy protection, anyone who looks up your domain can see the name, address, email address and phone number you registered with. That is how personal inboxes fill with spam and how scammers find a plausible target.

Privacy protection replaces your details in the public record with the registrar's proxy details, while legitimate messages are still forwarded to you. Many registrars include it free, and some charge a yearly fee. For a personal project or a small business run from a home address, this is the one add-on that earns its place. After checkout, confirm it in the WHOIS Lookup: your home address and personal email address should not be showing.

Two exceptions: some country-code extensions do not allow privacy protection, because their registry rules require public registrant details, and a company that wants its ownership publicly verifiable may leave its business details visible. If neither applies to you, privacy stays on.

Untick hosting, the builder, and the email plan, unless you planned them

The most expensive boxes on the page are usually hosting and a website builder, and they are the ones most often added by default. The pitch sounds logical: you have a domain, so surely you need somewhere to put a website. But a domain and hosting are separate purchases, and you are under no obligation to buy them from the same company. Buy hosting when you have chosen a host and compared its plan against what your site actually needs. That decision deserves its own time, not a tick box in a rushed checkout. The same applies to a website builder: untick it unless you already know you want that registrar's builder. You can add hosting or a builder later.

The email plan offered at checkout follows the same logic. A mailbox on your own domain looks professional, and for a business it is usually worth having. But if you already use a mailbox provider, or your future host includes mailboxes, you do not need a second email plan from the registrar. If the project has no mail yet, skip the plan and set it up when the project is real. A mailbox nobody checks is a recurring cost and a security risk, because password resets will land in an inbox nobody reads.

Do not buy an SSL certificate at domain checkout

You do need an SSL certificate before your site goes live, because it encrypts the connection between your site and its visitors and browsers warn visitors away from sites that lack one. You do not need to buy it from your domain registrar at checkout. Most hosting providers now include a certificate with their hosting plan, and free certificates are widely available through the hosting industry's standard free issuer. Buying a separate certificate from the registrar, on top of the one your host will give you, pays twice for the same padlock. Register the domain, choose hosting, then let the host issue the certificate, and confirm it later with the SSL Checker.

Read the security boxes twice

Checkout pages often bundle security-sounding items: domain protection, premium DNS, and malware scanning. Some are real features, and some repackage a free setting as a paid extra. Start with the registrar lock, a standard free setting that stops your domain being transferred away without your approval. If checkout offers "domain protection" as a paid line, check what it actually adds beyond the lock before paying for it.

Premium DNS is similar: standard DNS is enough for most small sites, and only a busy commercial site will notice the extra resilience. Malware scanning scans a website, not a domain, so if you have no website yet, untick it and revisit it when the site exists.

The checkout checklist, before you pay

Run down this list and untick anything you cannot justify in one sentence. First, the domain: is the name spelled exactly right, with the extension you intended, and is the term the length you chose? Second, privacy: is it on, at a price you accept? Third, the renewal price: have you seen it, and would you still buy at that price next year? Fourth, pre-ticked boxes: has the page added hosting, email, a builder, or a certificate you did not ask for? Fifth, the account email: is it one you actually check, and is two-factor authentication on?

That last point matters more than any add-on. Use a password you use nowhere else, switch on two-factor authentication, and keep the recovery email address current. Those free steps protect the domain better than most paid extras.

What to do first, in order

Register just the domain, with privacy protection on and auto-renew switched on if you want the safety net. Pay, then verify: look up the domain in WHOIS to confirm your personal details are hidden, and check the term and renewal date in your registrar account. Then close the tab, and choose hosting, email, and a certificate as separate decisions when you know what the site needs. A checkout that sells you less is not a checkout that failed. It is a domain you actually own, at a price you chose.