How Many TLDs Should You Actually Register?

There are over 1,400 delegated top-level domains, and a few hundred that anyone can buy. Every registrar checkout page will happily cross-sell you two dozen of them. Almost none are worth the money.

The honest answer for most businesses is between one and six. This post explains how to land on your number instead of guessing.

1. The Real Reasons to Own More Than One

Defensive registration is only rational when it prevents a concrete harm. There are exactly four:

Reason	The harm being prevented	Worth paying for?
Confusion capture	A competitor or squatter fields traffic meant for you	Usually yes
Brand impersonation	Phishing from a lookalike your customers trust	Yes, for Tier 0
Market entry	You genuinely operate in that country/sector	Yes
Future optionality	You might expand there someday	Rarely

That last row is where budgets go to die. "We might launch in Germany eventually" is not a reason to hold .de, .eu, and .berlin for six years at renewal prices.

2. The Tiered Model

Sort candidate extensions into tiers and apply a fixed rule per tier.

Tier 0 — Own always (1–2 domains)

Your primary. For most companies this is .com, or the ccTLD of your only operating market. This is the one on business cards, in email addresses, and in every backlink.

Tier 1 — Own if cheap and plausible (2–4 domains)

• The ccTLD of a market where you have actual revenue
• Your industry's dominant new gTLD, if it has real recognition (.io for developer tools, .ai for ML products)
• The obvious alternative someone would try first (.net or .co when your .com is a compound word)

Tier 2 — Own only on evidence (0–3 domains)

Register these when something happens, not in advance:

• A typo variant that shows up in your analytics referrer data
• An extension a competitor just registered against your brand
• A market where you've signed your first customer

Tier 3 — Do not own

Everything else. .biz, .info, .xyz, and the long tail of niche gTLDs bought "just in case" generate no traffic, no protection, and a recurring bill.

3. The Math That Settles Arguments

Defensive registration is an insurance product. Price it like one.

annual cost   = renewal price × number of domains
expected loss = P(abuse) × cost of that abuse
register if   : expected loss > annual cost

A .com typo variant at $12/year defending a site with 50,000 monthly visitors is trivially worth it. A .rodeo variant of a B2B SaaS brand is not — nobody is typing it, so P(abuse) is effectively zero.

The asymmetry matters: the cost of a defensive registration is certain and recurring; the benefit is probabilistic and often zero. That argues for a small, evidence-driven portfolio rather than a broad speculative one.

4. What Defensive Registration Does Not Solve

A common and expensive misconception: owning yourbrand.net does not stop someone registering yourbrand-support.com, yourbrandhq.com, or yourbrand.co.uk. The permutation space is unbounded — you cannot buy your way to safety.

Against genuine impersonation, these work better and cost less:

• Trademark registration plus UDRP/URS proceedings — takes the domain away from a squatter regardless of extension
• The Trademark Clearinghouse (TMCH) — gives you sunrise priority and notifies you when someone registers a match in a new gTLD
• Certificate transparency monitoring — catches lookalikes the moment they request SSL, usually before any phishing campaign launches

Budget these before the twentieth defensive registration.

5. Practical Sizing by Business Type

Business	Sensible count	Typical set
Local service business	1–2	.com + national ccTLD
SaaS, single market	2–3	.com, .io or .app, .net
Ecommerce, multi-country	4–8	.com + one ccTLD per real market
Global consumer brand	15–40	Tier 0/1 + TMCH + active monitoring
Side project / prototype	1	Whatever's available and cheap

If you're outside these ranges, you're either exposed or overspending.

6. Auditing an Existing Portfolio

Run this annually:

1. Export every domain with its renewal cost.
2. Pull 12 months of traffic per domain (most will be zero).
3. Flag anything with no traffic, no redirect, and no trademark rationale.
4. Check whether flagged names are still confusable with your primary.
5. Let the rest lapse.

Portfolios accumulate by default because auto-renew is frictionless and cancellation requires a decision. The audit is the forcing function.

7. Before You Register Anything

Check availability across the extensions you're actually considering rather than the ones a checkout page suggests. Our search checks hundreds of real, registerable extensions at once — cross-referenced against IANA's delegated list, so you won't be shown names that don't exist in the DNS root.

Then apply the tiers. One good domain plus a trademark beats twelve mediocre ones.