.auth
Is .auth a real TLD? Who’s applying to run it?
.auth is not contested. One applicant has said publicly that it applied to run it, and nobody else has, as of 15 August 2026. It is Link Freedom Group.
A natural fit for login and identity tech brands, but narrow demand and phishing worries keep it a niche developer address.
identity and access-management vendors, developer-tool startups building login/SSO/passkey products, and security teams wanting a semantic home for authentication endpoints
In LFG's published list of 300+ strings submitted before the ICANN window closed on 2026-08-12. Their catalog tagline: “Protected by design.”
The 2012 applications making the most similar bet. Chosen by AI from every string in that round, without being told what happened to any of them.
Same bet as .auth: a short, un-ownable trust-function word that no single vendor can claim but every security/identity provider wants, whose value depends entirely on the registry policing who is allowed to stand behind it.
The category-noun form of the same wager — a functional trust word sold to the same buyer set (security and identity vendors putting primary product identity on it), differing from .auth only in being the industry label rather than the technical function.
Closest structural match for the clipped-developer-jargon shape: an abbreviation developers already type daily, bet on developer-infrastructure companies and their tooling namespaces rather than on a consumer audience, which is where .auth's actual registrants (identity/SDK vendors) live.
What a .auth domain is
.auth is not a TLD yet. It is a string on our record of the ICANN 2026 new gTLD round, filed under AI & tech. One applicant has said publicly that it applied for .auth.
Is the .auth domain extension real yet?
.auth is not yet a domain extension you can register: nothing resolves under it, and no registrar sells names in it. It is a string applicants have put forward in the ICANN 2026 new gTLD round, the process that decides whether it becomes one.
When can you buy a .auth domain?
You can’t yet. ICANN publishes every applied-for string on Reveal Day, 7 October 2026 at 18:00 UTC. A .auth name can only be registered after that, once the string is delegated and its registry opens. Last round's closest parallel to .auth was .secure, delegated on .
Is .auth a real TLD?
Not yet. .auth is not in the DNS root, so nothing resolves under it. It’s here because an applicant said publicly that it applied for .auth in the ICANN 2026 new gTLD round. Every claim on this page links to its source.
- Link Freedom Group · first recordedLink Freedom Group
“.auth · AI & Tech · “Protected by design.””Link Freedom Group
“LFG voluntarily published its full list of submissions ahead of ICANN’s official Reveal Day.”PR Newswire (Link Freedom Group)
“Top level domain registry Link Freedom Group (LFG) has disclosed more than 300 strings submitted as part of the ICANN new top level domain name program.”Domain Name Wire (Andrew Allemann)
- Band: usable but limited (30-49), at its top. The string is a genuine high-value developer keyword: 'auth' is the standard shorthand for authentication across the software industry, and identity/login tooling is a large, durable product category, so a dev-tool brand plausibly using a .auth domain as its primary identity is credible over the next 5 years. It is not in the 50-69 strong-niche band because the realistic buyer pool is narrow (auth vendors and their subdomain-style endpoints rather than a broad category of businesses), and a TLD semantically tied to credentials invites phishing abuse, which tends to make enterprise security teams cautious and can depress mainstream brand adoption; sustained demand is therefore unproven rather than demonstrated. It is not in the 10-29 vanity band because, by analogy with developer-keyword TLDs that found real primary-identity use among technical audiences, the term has authentic end-use utility, not just novelty. Applicant facts: the string is announced by Link Freedom Group, which filed more than 300 strings in the ICANN 2026 round and published its catalog listing this string under 'AI & Tech' with the tagline 'Protected by design.'; a portfolio applicant of that breadth is a neutral adoption signal in itself. Main market uncertainty (launch assumed): whether security-conscious organizations treat .auth as a trust-enhancing home for identity products or preemptively block and avoid it as a credential-phishing surface, since that single dynamic swings both end-use adoption and aftermarket value.