GoDaddy Review 2026
Overall 7.1Evaluated from GoDaddy's published documentation and the pricing rows we track for it, not from hands-on account testing, then scored on renewal pricing, WHOIS privacy, DNS tools, security, support, transfer experience, and TLD coverage. How we test and what we have tested so far →
Effective February 2, 2026, GoDaddy reclassified all customers (including 21M personal users) as 'Business Customers' under its Terms of Service. The change removes EU Consumer Rights Directive protections, including the 14-day cooling-off period and statutory refund rights, and raised the arbitration filing fee from $200 to over $2,300. Customers registered before this date were subject to the updated terms unless they actively opted out.
EU and UK users lose statutory consumer protections, including cooling-off and refund rights. Arbitration costs increased sharply, making individual dispute resolution less accessible.
Verdict
Huge TLD selection and strong phone support, but renewal pricing, aggressive upsells, and a February 2026 TOS change that reclassified 21M personal users as Business Customers, stripping EU consumer protections and raising arbitration fees from $200 to $2,300+, weigh significantly on the score.
Score breakdown
How to read these scores. The numeric scores on this page are derived from our published methodology weights applied to documented registrar facts. They are not the output of hands-on purchase, transfer and support testing, which we have not yet run. Treat them as a structured summary of the facts, not as a test result. The facts and prices underneath them each carry their own source and date.
| Category | Score (0–10) | Bar |
|---|---|---|
| Overall | 7.1 | |
| PricingEditorial judgementWe hold no verified .com price for GoDaddy, so this score is not backed by pricing we collected. | 6.5 | |
| RenewalsEditorial judgementWe hold no verified .com price for GoDaddy, so this score is not backed by pricing we collected. | 6.0 | |
| Pricing transparencyEditorial judgementNo verified catalogue for GoDaddy, so first-year-versus-renewal behaviour is unmeasured here. | 5.0 | |
| WHOIS privacyFrom published documentationWHOIS privacy: Free on most TLDs (Domains by Proxy). | 8.0 | |
| DNSFrom published documentationDNS: Standard managed DNS; premium DNS available as upgrade. | 7.5 | |
| Security / 2FAFrom published documentationTwo-factor authentication: TOTP and SMS. | 8.0 | |
| SupportFrom published documentationPublished support channels: 24/7 phone, Live chat, Ticket support. Channel availability is documented; we have not published timed response measurements. | 9.0 | |
| Transfer experienceEditorial judgementWe have not published transfer timings for this registrar. This score reflects documented transfer policy and our reading of it, not a measured run. | 8.0 | |
| TLD / ccTLD coverageFrom published documentationCoverage per the registrar's own material: One of the largest TLD catalogs available. We hold no verified prices to corroborate it. | 9.5 | |
| Developer tools / APIFrom published documentationA public API is documented, alongside bulk management tools. We score the documented surface, not measured API reliability. | 7.5 | |
| Beginner UXEditorial judgementNo usability testing has been published for this registrar. This is a judgement from the account interface and documentation. | 7.5 |
Why this score? Huge TLD selection and strong phone support, but renewal pricing, aggressive upsells, and a February 2026 TOS change that reclassified 21M personal users as Business Customers, stripping EU consumer protections and raising arbitration fees from $200 to $2,300+, weigh significantly on the score.
Reading the labels. Measured Derived from pricing we collected and verified ourselves. From published documentation Traced to a fact recorded from the registrar's own published material. Editorial judgement A judgement. We have not published a measurement behind this number.
- Bundled services
- Phone support
- Large TLD selection
- Cheap renewals
- Paid WHOIS privacy upsell
Pricing
| TLD | First-year | Renewal | 10-year cost | Transfer | WHOIS privacy | Checked |
|---|---|---|---|---|---|---|
| .com | $11.99 | $21.99 | $209.90 | $11.99 | Free, with exceptions | 2026-05-12 |
| .net | $17.99 | $24.99 | $242.90 | $17.99 | Free, with exceptions | 2026-05-12 |
| .org | $9.99 | $22.99 | $216.90 | $9.99 | Free, with exceptions | 2026-05-12 |
| .io | $49.99 | $69.99 | $679.90 | $49.99 | Free, with exceptions | 2026-05-12 |
| .ai | $89.99 | $109.99 | $1079.90 | $89.99 | Free, with exceptions | 2026-05-12 |
| .co | $9.99 | $34.99 | $324.90 | $9.99 | Free, with exceptions | 2026-05-12 |
These figures are sample data, not read from this registrar's own pricing page, so they are not on a refresh cadence, they are flagged for review past 90 days instead. 11 of 11 rows are individually past the 90-day review line. Freshness describes when we last read a price, not whether it is right. How we check prices · freshness data
How we verified this pricing
Manual read in a real browser on 2026-08-19 DID load GoDaddy's domain pages and render prices: the July anti-bot finding (403 to plain fetch and to headless) no longer describes the blocker. The remaining blocker is currency: GoDaddy geo-routes to the en-uk market from our location and prices in GBP, while every price on this site is USD. The /en-us/ paths 404 on the UK market and the page offers no region or currency selector, so no USD figure can be read without a US-located session or an authenticated API key. Per the corrections policy we do not convert currencies or use proxies to spoof location, so GoDaddy rows remain sample.
Source: https://www.godaddy.com/domains/domain-name-search
Blocked by: Geo-forced GBP storefront (en-uk). Observed 2026-08-19, GBP, for evidence only, NOT ingested: new-customer offer GBP 3.99 first year on .com/.co.uk/.uk with code GDWELCOME; .co.uk GBP 12.99 list with additional years GBP 12.99; .me GBP 22.99 with additional years GBP 22.99; .tv GBP 36.94; .live GBP 36.91 list; .xyz GBP 19.19 list; .store GBP 62.07 list.
Renewal pricing explained
Editorial judgementWe have not verified any GoDaddy price against its own published pages, so there is no renewal analysis here to give. The general point still applies: a first-year price is paid once and a renewal is paid every year after it, so the renewal is the figure that decides what a domain costs to hold.
Until we can read this registrar's prices ourselves, compare the renewal column in its cart against the verified figures on our cheapest-renewals page rather than against its advertised first year.
WHOIS privacy
From published documentationGoDaddy documents its WHOIS privacy as: Free on most TLDs (Domains by Proxy).
Note the qualifier in that wording. "Eligible" or "most" domains means some extensions are excluded, and the exclusions are usually set by the registry rather than the registrar: a number of ccTLDs require registrant details to be published and no registrar can override that. Check your specific extension rather than the headline policy.
What privacy does is replace your name, postal address, phone number and email in the public record with the provider's forwarding details. What it does not do is hide the registration from the registrar, the registry, or a court order, and it does not stop a domain being linked to you by other means. Since GDPR, most registries also redact personal data by default regardless of what the registrar sells, so for many extensions the privacy product is a smaller addition than it was. Our WHOIS-privacy sub-score for GoDaddy is 8.0, based on the documented policy.
DNS tools
From published documentationGoDaddy describes its DNS as: Standard managed DNS; premium DNS available as upgrade.
We have not recorded ALIAS or ANAME support here. That matters if you need the apex of your domain to point at a platform hostname rather than an IP address, which most hosted site builders and store platforms ask for: check before committing.
A public API is documented, so DNS records here can be managed from a script rather than a dashboard. Remember that the registrar and the DNS host do not have to be the same company: you can keep a domain here and point its nameservers anywhere. Our DNS sub-score for GoDaddy is 7.5, based on documented capability rather than measured resolution times.
Security and 2FA
From published documentationGoDaddy documents TOTP and SMS for account access.
An authenticator app and SMS are not equivalent, even though they sit side by side in the same settings page. SMS can be redirected by a SIM swap, which is a known and repeatedly used route into domain accounts; codes from an app cannot. If both are enabled, the account is only as strong as the weaker one, so turn SMS off once the app is working.
Neither method resists a convincing phishing page: both produce a code a human can be persuaded to type somewhere else. Hardware security keys do resist it, and this registrar does not document support for them.
Whatever the method, the registrar account is the domain's real perimeter: anyone inside it can change nameservers and start a transfer. Turn on the strongest option offered, keep the registrant email on an account with its own two-factor, and check the domain lock is set. Our security sub-score for GoDaddy is 8.0, based on the methods it documents rather than on a penetration test.
Support channels
From published documentationGoDaddy publishes 3 support channels: 24/7 phone, live chat, ticket support.
Round-the-clock availability is the part that matters most, because domain problems are not office-hours problems: an expiry, a failed transfer or a DNS mistake takes a site down whenever it happens.
What we have not done, and will not imply: we have not timed responses on these channels or run test tickets. The support sub-score of 9.0 reflects the channels published and their stated hours, not measured response times. Treat published availability as a claim by the registrar until someone has tested it.
Transfer experience
MeasuredTransferring a .com in to GoDaddy costs $11.99 against its renewal of $21.99. For most gTLDs a transfer adds a year to the registration rather than resetting it, so that fee buys a year rather than only paying for the move.
The process itself is the same everywhere and the constraints are ICANN's, not the registrar's: unlock the domain, get the authorization code from the losing registrar, and enter it at the gaining one. A gTLD cannot be transferred within 60 days of a registration, a previous transfer, or a change to the registrant contact, that last one catches people who tidy up their WHOIS details first and then find the domain locked for two months.
We have not run a transfer in or out of GoDaddy, and we do not have testing notes for it. Everything above is computed from prices we verified or from ICANN's published transfer policy, not from watching a transfer complete.
TLD and ccTLD coverage
One of the largest TLD catalogs available
Developer and agent access
The only registrar in the set that gates production API access by account size: the domain-Availability API is limited to accounts with 50 or more domains, while Management and DNS need at least one domain or a Domain Pro Plan. An OTE sandbox is available for development.
- Auth model
- API key (key + secret)
- Scoped API tokens
- No(1 of 7 measured have it)
- OAuth delegation
- No(0 of 7 measured have it)
- Outbound webhooks
- No
- Sandbox
- api.ote-godaddy.com(3 of 7 measured)
- Machine-readable API spec
- None published(1 of 7 measured have it)
- Rate limit
- Documented per endpoint
- Account-level audit logs
- No(1 of 7 measured have it)
Gating: Production access to the Availability API requires 50+ domains; the Management and DNS APIs require 1+ domain or a Domain Pro Plan
GoDaddy API documentation · API availability read from the registrar's documentation.
Figures in brackets are Open Domain Data's 2026-Q3 landscape edition, over the 7 registrars it measures, not the registrars this site tracks. Full API-access comparison.
An official, read-only MCP served over streamable HTTP that answers domain-search and availability questions with no authentication, because it exposes only public data. By design it cannot register a domain, modify DNS or change any setting: GoDaddy's documentation states registration and management must be completed on godaddy.com. It is a discovery tool for agents, not a management one.
- Endpoint
- https://api.godaddy.com/v1/domains/mcp
- Auth
- None: public data only
- Method coverage
- Domain search + availability
- MCP sandbox
- No
- Domain name search
- Availability checks
GoDaddy API-capability facts and the cohort figures beside them derived from Open Domain Data (CC BY 4.0), dataset version registrar_api_capabilities@2026.06, registrar_landscape@2026-Q3, agent_capability_signals@2026.05. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
DNS capabilities
Upstream facts from Open Domain Data, shown with the source behind each field. These are capabilities, not our assessment: our own view of GoDaddy's DNS is in the score breakdown.
| Capability | GoDaddy |
|---|---|
| DNSSEC | Supported From public sourcesDNSSEC managed for domains on GoDaddy nameservers; Premium DNS offers fully managed signing. www.godaddy.com/help/turn-dnssec-on-or-off-6420 · checked 2026-06-25 |
| ALIAS / ANAME at the apex | No From public sourcesGoDaddy DNS does not document a native ALIAS/ANAME flattened-apex record type; recorded false pending an independently tested source. www.godaddy.com/help/add-an-a-record-19238 · checked 2026-06-25 |
| DNS records over an API | Yes From public sourcesDomains API exposes DNS record GET/PUT/PATCH; API access available from a single domain. developer.godaddy.com/doc/endpoint/domains · checked 2026-06-25 |
| Minimum TTL | 600s |
| Record types | AAAAACNAMEMXTXTSRVCAANS |
CAA records are supported by every registrar in this dataset, GoDaddy included, so the row is stated here once rather than repeated as a distinction that does not exist.
Record last checked upstream: 2026-06-25 · overall basis: From public sources
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
GoDaddy DNS capability facts (DNSSEC, record types, minimum TTL, API record management) derived from Open Domain Data (CC BY 4.0), dataset version dns_capabilities@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
RDAP endpoint
RDAP is the structured, JSON successor to WHOIS, and this is where GoDaddy answers it. Look a domain up without querying it yourself, or read what RDAP is.
- Base URL
- https://rdap.godaddy.com/v1/Independently testedBase URL from the IANA registrar-ids registry; matches the registrars-dataset rdap_base. Endpoint live-probed 2026-06-25 (godaddy.com) and returned a valid RDAP domain object. www.iana.org/assignments/registrar-ids/registrar-ids-1.csv · checked 2026-06-25
Every registrar in this dataset, GoDaddy included, reports the same two things, so they are stated here once rather than as rows implying a difference: conformance rfc7483, the base RDAP response format, and an endpoint published in the IANA registrar-ids registry, which is what makes it discoverable without knowing it in advance.
Record last checked upstream: 2026-06-25
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
GoDaddy RDAP endpoint facts derived from Open Domain Data (CC BY 4.0), dataset version rdap_metadata@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
Abuse and security contacts
Where to report a compromised domain, phishing, or a vulnerability. Upstream facts from Open Domain Data, with the record each was read from.
| Contact | GoDaddy |
|---|---|
| Abuse email | Independently testedRegistrar Abuse Contact Email read from the registry RDAP record for godaddy.com; sponsoring registrar IANA ID matches (146). Abuse phone in the same record: +1.4806242505. rdap.verisign.com/com/v1/domain/godaddy.com · checked 2026-06-25 |
| security.txt (RFC 9116) | Not established The .well-known/security.txt path returns HTTP 403 to an automated request (anti-bot); presence could not be confirmed. www.godaddy.com/.well-known/security.txt · checked 2026-06-25 |
| Published abuse policy | None catalogued |
"Not established" and "not published" are different facts and are kept apart here. Two registrars in this dataset return an HTTP 403 anti-bot response at the security.txt path, which is not the same as the path returning 404. Every ICANN-accredited registrar is required to publish an abuse contact and to act on reports; where this table cannot show one, check ICANN Lookup for the registrar abuse contact in the registry record.
Record last checked upstream: 2026-06-25
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
GoDaddy abuse and security contact facts derived from Open Domain Data (CC BY 4.0), dataset version registrar_security_contacts@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
- Comprehensive TLD catalog
- Localized in many countries and currencies
- Strong phone support availability
- Renewal prices are higher than budget competitors
- Aggressive upsells at checkout
- DNS performance is not best-in-class
- Feb 2026 TOS reclassified personal customers as Business Customers, stripping EU consumer protections
Logged incidents
Inadvertent execution of a command affected Anycast access to the authoritative nameservers.
Affected: DNS · full entry and sources
Our incident log begins in August 2026 and is not a complete history: it records what we could source.
Alternatives
FAQ
Is GoDaddy a good domain registrar?
Does GoDaddy offer free WHOIS privacy?
What 2FA options does GoDaddy support?
Does GoDaddy have an API?
How much does a .com renewal cost at GoDaddy?
Has GoDaddy been hands-on tested?
Changelog
- 2026-08-19Re-read manually. GoDaddy does render prices to a real browser: the July anti-bot finding was out of date, but it geo-routes to its en-uk market and prices in GBP. Those figures are recorded as evidence and deliberately not ingested; status changed to blocked_geo_currency.
- 2026-07-15Stayed unverified: Akamai returns 403 to a headless browser as well as to a plain fetch. Blocker documented in registrars.json and pricing-sources.json.
- 2026-07-07GoDaddy's February 2026 terms-of-service consumer-protection change was documented as a dated editorial notice.
- 2026-06-26: Full review refreshed.
- 2026-06-26: Pricing re-checked.
Corrections are applied within 7 business days and noted here: corrections policy. Site-wide record: /changelog/.
Sources
- https://www.godaddy.com, pricing, read from this page
- ICANN accredited registrar list, accreditation
- https://en.wikipedia.org/wiki/GoDaddy, company background
- https://www.best-domain-registrars.com/methodology/, how this score was produced
Registrar identity facts (name, website, country, accreditation status) derived from Open Domain Data (CC BY 4.0), dataset version registrars@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.