.io domain names: .io domain registration, the .io TLD, and how to buy a .io domain

A .io domain is a web address ending in .io, the country code top level domain assigned to the British Indian Ocean Territory. IANA delegated it in 1997 to the British entrepreneur Paul Kane, alongside .ac, .sh and .tm, and the first registration, levi.io, went live in 1998. For most of its first decade it did nothing at all. Then developers noticed that io is how every computer science course writes input and output, and the extension acquired a meaning that has nothing to do with a group of atolls in the Indian Ocean.

Registration is open to anyone. There is no residency test, no company registration to prove, and no local presence requirement at the second level, which is the level you register at when you buy yourcompany.io. There is one strange rule that almost nobody encounters: third level registrations, the yourcompany.co.io form, are supposed to require residency in the British Indian Ocean Territory, which has no legal permanent inhabitants. In practice everyone registers at the second level and the rule is a footnote.

The registry itself has changed hands several times, and the chain matters if you care who is running the infrastructure your company email depends on. Kane ran it privately from 1997 until Afilias bought Internet Computer Bureau Ltd in April 2017 for $70.17 million. Donuts acquired Afilias in December 2020, Ethos Capital acquired Donuts in January 2021, and the combined business now trades as Identity Digital. Internet Computer Bureau still exists as the registry operator, as a wholly owned subsidiary. If you want the full picture of what .io actually means and where the letters came from, that is the place to start.

Expect roughly $35 to $76 per year at US registrars, with a wide spread between them that you will not see on a .com. The floor is set by the registry: Identity Digital charges registrars $50 per year for a .io, and in July 2026 it notified registrars that the wholesale price rises 12 percent to $56 on January 19, 2027. No registrar can sell below what it pays, so anything advertised under $50 is a first year promotion that reverts.

That reversion is where .io buyers get caught. Porkbun lists .io at $51.80 to register and $51.80 to renew, with a discounted first year, so what you pay in year two is what you saw in year one. Namecheap has been reported at roughly $35 to register and roughly $76 to renew, which is a very different five year cost for the same name. On a .com the difference between registrars is a couple of dollars and nobody bothers. On a .io it is $25 a year forever, so it is genuinely worth taking a minute to compare registrars on renewal price before you check out.

It is also worth knowing that this is the third .io increase in roughly fifteen months. Identity Digital raised wholesale prices across more than 200 extensions on October 6, 2025, raised .io again in January 2026, and has now confirmed the January 2027 rise. The direction of travel is one way. If you are registering a name you intend to keep for a decade, price the decade rather than the first invoice, and compare it against what the other extensions cost before you commit.

Search the name, confirm it is genuinely unregistered rather than registered and quietly held, then register it at an accredited registrar for as long as you are willing to commit. The step people skip is the middle one. A result that says "not available" covers two entirely different situations, one of which ends at a checkout page and one of which ends in a negotiation with a stranger, and knowing which one you are in before you get attached to a name saves a week of wasted effort.

On NameBest the search runs across all three sources in the same pass. If the name is free you can take it immediately. If it is registered you can check who holds it and decide whether an approach is worth making. If the owner has already listed it you can buy it outright, and if it has reached an expiry auction you can bid on it at auction from the same account. If it is heading toward deletion you can place a backorder on it instead of watching a calendar yourself.

Not in any timeframe that should affect a decision you are making this week, but the question is legitimate and deserves a straight answer rather than reassurance. The British Indian Ocean Territory is the subject of a real sovereignty transfer. The United Kingdom and Mauritius signed an agreement on May 22, 2025 handing the Chagos Archipelago to Mauritius, with the UK retaining a 99 year lease over the Diego Garcia military base. As of August 2026 that treaty has not entered into force. UK ratification was still working through Parliament, and the government confirmed in February 2026 that the process had not been paused.

The chain of events that would actually retire .io is longer than most coverage suggests. The extension exists because IO appears in the ISO 3166-1 country code standard. For .io to be retired, IO would first have to be removed from that standard, which requires a request from the relevant authority that nobody has made. IANA would then run a transition, and its practice allows five to ten years for one. So the sequence is treaty entry into force, then an ISO removal request, then a multi year IANA wind down, and none of the first three steps has happened.

The precedents cut both ways and both are slow. The .su extension belonged to the Soviet Union, which dissolved in 1991, and .su domains still resolve more than three decades later because nobody had the appetite to break the sites using them. On the other side, .yu was retired in 2010 after a multi year transition, and .tp and .zr were both eventually removed. Nobody in either case woke up to a dead domain. If jurisdictional certainty is the thing you care about most, the .ai extension currently carries less of this particular question than .io does, and .com carries none of it.

No. The specific worry is that because .io is technically a country code extension, Google will assume the site targets the British Indian Ocean Territory and bury it in US results. Google has resolved this explicitly: it maintains a published list of country code extensions it treats as generic rather than geotargeted, and .io is on it. A .io site is not tied to a geography and can rank in US search on the same footing as a .com.

Google has also been consistent for years that the extension after the dot is not a ranking factor. What moves rankings is whether the page answers the query, whether anyone links to it, and whether it loads. The one real cost of a .io is not algorithmic. Some percentage of people will type your name followed by .com out of pure habit, and that traffic lands wherever the .com points. If the matching .com is unregistered, buy it and redirect it, because at roughly $11 a year it is cheap insurance next to a $50 .io. It is worth checking what a .com actually costs to renew rather than to register, since the renewal is the number that repeats.

Take the .com if the exact name is available to register at standard pricing. It is cheaper, it is what people type by default, and it removes an entire category of small friction from every phone call, podcast mention and business card you will ever produce. That advice is boring and it is still correct.

The realistic situation is that the .com is gone, because almost every pronounceable one has been registered since 2012, and the owner wants five figures. That is where .io earns its price. It signals software, it is short, and the inventory is genuinely thinner on the ground, so the two word name you want is often still free. The trade is real money per year against a name you can actually have this afternoon, plus the .com typo leakage you will never fully recover.

Where it stops being a good trade is at scale. If most of your customers are non technical, .io reads as a typo to them rather than as a signal. If you are consumer facing, budget for buying the .com from its owner later, and know that the price of doing that goes up once you are visibly successful. It pays to work out what to offer from comparable sales before you open that conversation rather than after the seller names a figure.

From whoever holds it now. With around 1.89 million .io names registered as of June 2026, buying a taken domain name is the normal route for anything short or obviously commercial rather than the exception. There are three ways it happens: the owner has listed it on a marketplace at an asking price, the owner has not listed it and you make a private approach, or the name has lapsed into an expired domain auction where you bid against other buyers.

The route decides almost everything about the price and the timeline. A listed name is a checkout. A private approach is a negotiation that can run for weeks and often ends at no. A dropped name in auction is priced by whoever else wants it that day, which can be nobody or can be four other investors. NameBest shows all three in the same result so you know which conversation you are actually in before you start it. If the name has carried a live site before, check the history before you buy, because an aged .io can bring problems along with its age.

Whichever route applies, use escrow on any private purchase, confirm the name has moved into an account you control before the money releases, and get an appraisal first so you have a ceiling you set rather than one the seller sets. A short generic .io is often priced as a premium name by its owner, and that is an aftermarket price rather than a registry rate card. Once the name is yours you can transfer it to another registrar at any time without losing the remaining term.