Does a .app domain require HTTPS?

Yes, and not as a recommendation. The entire extension is on the HSTS preload list built into browsers, so a .app site without a valid TLS certificate will not load at all. Plan for the certificate as part of launch.

Who can register a .app domain?

Registration is open — there is no requirement to have published an app. Any registrant restrictions that apply to your registration appear in the registration requirements on this page, read live from registry data.

.app domain names

HTTPS enforced at the registry level, by design.

Quick answer

.app is a Google-operated extension for mobile and web applications, and it is preloaded in browsers as HSTS — meaning every .app site must be served over HTTPS or it simply will not load. That constraint is the point: it removes insecure connections as a possibility rather than as a policy.

Check a .app name

What .app actually signals

Operated by Google Registry and included in the HSTS preload list at the extension level, so browsers refuse plain HTTP for every .app domain.
A valid TLS certificate is not optional — the site is unreachable without one, so factor certificate setup into launch rather than treating it as a follow-up.
Names it unambiguously as an application rather than a marketing site, which is useful when the product and the company have different names.

Registration requirements for .app

Read from the registry data behind our own registration flow, so these are the rules your registration will actually be checked against — not a general description of the extension.

Registry requirements for .app domains
Requirement	.app
Registration term	1 to 10 years
Organization details	Not required — individuals can register
Registrant country	No country restriction
Nameservers	Optional at registration (up to 13)
Internationalised names (IDN)	Supported
Transfers	Require an authorization code from the losing registrar

Registry data last synchronised 2026-08-17 · source: Google

Who .app suits

A good fit for

Mobile and web applications with a distinct product identity
Product sites that should never be reachable over plain HTTP
Companies separating an app domain from their corporate domain

Worth comparing against

.dev — Same HTTPS enforcement, developer rather than end-user framing.
.io — Broader technical use without the HTTPS constraint.
.com — Widest recognition if the app is consumer-facing.

.app domains on the marketplace now

Premium .app names currently listed on Name.ai. Availability changes constantly; this list refreshes hourly.

Browse all .app domains