.org domain names

What .org is

.org is short for organization. It was created as the catch-all for organisations that did not fit the other original categories, and it remains the default extension for nonprofits, charities, NGOs, foundations, open-source projects and standards bodies. Its IANA type is a generic top-level domain (gTLD), non-sponsored and legacy. Despite its mission-driven registry, .org is not a sponsored TLD: a sponsored TLD has a defined community and enforceable eligibility rules, and .org has neither. Its IANA registration date is 1 January 1985, and the first .org was mitre.org, registered by the MITRE Corporation in July 1985.

The registry operator as of 2026 is Public Interest Registry (PIR) of Reston, Virginia, a nonprofit founded by and affiliated with the Internet Society. Unlike .com and .net, .org has changed operator: Network Solutions ran it from 1993 and passed to Verisign after the 2000 acquisition, and on 1 January 2003 PIR took over following an ICANN competitive selection, migrating 2.6 million domains in what was then the largest transfer in internet history. PIR does not run the technical back end itself: it has used the same provider since 2003, Afilias, acquired by Donuts in 2020 and rebranded Identity Digital in 2022.

Who can register .org

Anyone, anywhere, for any purpose. This is the most misunderstood fact about .org: there is no requirement to be a nonprofit. No charity registration number, no 501(c)(3) determination, no documentation, no validation, no registry verification. For-profit companies and individuals register .org freely and legitimately every day.

The nonprofit association is convention and public perception, not policy. It is strong enough to be a real branding asset, and strong enough that exploiting it deliberately can look deceptive, but it is not enforced. If you want an extension that actually proves NGO status, PIR operates one: .ngo and .ong are genuinely validated.

What .org costs to own

The price caps are gone. Until 2019 the .org registry agreement capped the wholesale price and permitted only limited annual increases. ICANN proposed removing those caps in March 2019, moving .org onto the standard base gTLD registry agreement, which contains none. The proposal drew one of the most lopsided public comment records in ICANN's history — 3,252 comments opposed and 6 in favour — and ICANN removed the caps anyway.

PIR then did the opposite of what everyone feared. With the caps off, the .org wholesale price stayed flat from 2016 to 2026 — a full decade without an increase, while comparable extensions raised prices repeatedly. In March 2026 PIR announced its first increase in that decade, of roughly 11%, effective 1 June 2026, and a spokesperson stated the organisation had no further plans to increase prices at that time. Adjusted for inflation, the new price is worth less than the old one was in 2016.

Hold both halves in mind: the contractual protection is gone and nothing legally prevents aggressive future increases, but in practice this operator has shown the most restraint of any legacy registry.

The base-agreement mechanics are the buyer's real protection: six months' notice of any increase, and the right to renew up to ten years at the pre-increase price beforehand. PIR runs no broad premium tier, so .org registry pricing is essentially uniform, and first-year and renewal fees are identical at the registry level. Recovery after expiry runs through the standard Redemption Grace Period — the window after deletion during which only the original registrant can restore the name — at a fee substantially above a renewal.

Registration terms, renewals, and transfers

Minimum registration is one year, maximum ten, and expiry may never sit more than ten years in the future. Stacking renewals to that ceiling is the mechanism for locking in pre-increase pricing.

Transfers follow standard ICANN policy with no .org-specific registry restrictions. Authorisation is by per-domain EPP authInfo code; the losing registrar must release it and lift the clientTransferProhibited status within five days of a valid request, and a successful transfer adds one year to the term. Sixty-day locks apply after initial registration, after a prior inter-registrar transfer, and after a Change of Registrant, with an opt-out available on the last of these only before the change is made.

One point of confusion is worth clearing up. PIR's Quality Performance Index scores registrars on abuse rates: it shapes PIR's commercial relationships, has no effect on a registrant's ability to transfer a domain, and is not a transfer restriction. The pending ICANN Transfer Policy reform, approved by the GNSO Council on 12 March 2025, would replace the sixty-day locks with 720-hour (thirty-day) locks and a time-limited Transfer Authorization Code, on the same timetable as every other gTLD.

WHOIS, RDAP, and privacy

.org is a thick registry: registration data including contact fields is held at the registry itself, not only at the registrar — a real operational difference from .com and .net, which remain thin. PIR runs its own registration data services, with RDAP at rdap.publicinterestregistry.org. For a registrant, thick registration means the registry holds a copy of your contact record independently of your registrar.

RDAP has been the definitive protocol for gTLD registration data since 28 January 2025. Registrant data is redacted by default in public output under the ICANN Registration Data Policy, in force since 21 August 2025, with contact through an anonymised address or a registrar web form.

Privacy and proxy services are permitted; PIR imposes no registry-level prohibition. One pattern is specific to this extension: many nonprofits deliberately publish full contact details on their own websites for donor confidence, so registry redaction is often supplemented by voluntary disclosure.

DNSSEC is supported, and .org got there first: it was the first open gTLD to implement DNSSEC, signed in 2009 — ahead of .net in 2010, .com in March 2011, and the root zone itself. Internationalized domain names are supported across multiple scripts.

Who .org suits, and who should avoid it

.org suits nonprofits, charities, foundations, NGOs, associations, religious organisations, unions, and political and advocacy groups, where the extension carries earned rather than borrowed trust. It suits open-source software projects, standards bodies, technical working groups, wikis and reference resources — a well-established convention, and one reason so many of the internet's core infrastructure organisations sit on .org. It suits community projects, clubs and member associations; museums, libraries and research initiatives; and educational projects that cannot qualify for .edu, whose accreditation requirements are genuinely enforced.

It should be avoided by straightforwardly commercial businesses. That is permitted, but it invites the perception that you are borrowing nonprofit credibility you have not earned, and it confuses customers who read .org as a signal that nothing is being sold. It is also the wrong choice for anyone who believes a .org will make them look like a nonprofit to a sophisticated audience: journalists, grantmakers and regulators check registration status, not top-level domains.

Common mistakes with .org

• Believing .org proves, or requires, nonprofit status. Both directions of this error cause harm. Commercial registrants rule themselves out of an available extension; audiences assume a .org site is a charity, and registrants who exploit that assumption take on a reputational and, in some jurisdictions, regulatory risk. For a verified NGO identity, PIR's .ngo and .ong are the validated option.
• Registering only the .org and skipping the matching .com. Donors, journalists and grantmakers type .com by reflex, and a well-known charity that leaves its .com unregistered will eventually find a lookalike donation-scraping site sitting on it. Defensive registration is cheap; recovering a name through a dispute proceeding takes months during which the fraudulent site is live.
• Misreading the pricing history in either direction. Some buyers believe the 2019 cap removal made .org expensive; it did not, and the price was flat from 2016 to 2026. Others treat PIR's restraint as a guarantee; no contractual cap exists to fall back on.

The year .org was nearly sold to private equity

In November 2019 the Internet Society announced that it had agreed to sell Public Interest Registry to Ethos Capital, a private equity firm formed only months earlier, for a reported $1.135 billion. The transaction would have converted the operator of .org from a nonprofit into a for-profit asset held by investors, with returns depending on the extension that hosts much of the world's charitable, civic and open-source infrastructure.

The timing made it worse. Months earlier, in March 2019, ICANN had removed .org's wholesale price caps against a public comment record of 3,252 objections to 6 supportive comments. To the nonprofit sector the sequence looked like one decision: strip the price protections, then sell the registry to buyers who could exploit their absence. Whether or not that reading was fair, it powered a mobilisation of nonprofits and foundations in numbers ICANN had rarely faced.

On 30 April 2020 the ICANN Board withheld consent, citing the risk of handing .org to an untested private equity firm. The sale did not happen, and PIR remains a nonprofit — a surprising number of secondary sources still get this wrong. Namecheap's separate Independent Review Process challenge to the cap removal was voluntarily terminated in November 2025.

Three things about registry governance became clear. First, a registry is a transferable asset: the right to operate a top-level domain sits in a contract, and contracts can be assigned, so nothing guarantees that the organisation running an extension in five years is the one running it today. Second, ICANN's consent to a change of control is the only real check, and it is exercised rarely — a veto, not a supervisory regime. Third, the price caps did not come back.

PIR then held the price flat until June 2026 before taking a single increase, with no contractual constraint obliging it to. Once caps are gone, the identity and incentives of the operator are what a buyer is relying on.