Complete .CA Domain Guide: Register, Renew & Protect

Most domain advice is written for .com. That’s a problem when your domain ends in .ca, because the rules differ where it counts. Who can register one, what happens on the day it expires, and how much of your personal information is public all work differently for .ca. A .ca domain doesn’t simply vanish the moment it expires. It passes through defined stages that can give you more than two months to recover it, if you know where to look. And unlike .com, you can’t register a .ca at all without a qualifying connection to Canada.

This .ca domain guide covers the whole life of a Canadian domain:

who can register one under CIRA’s rules;
how to register and set it up;
how to manage DNS, contacts, transfers and ownership changes;
how .ca domain renewal and expiry actually work;
how to protect the domain from loss, hijacking and lookalikes.

The short answer

• Who can register: only people and organizations that meet CIRA’s Canadian Presence Requirements. Examples include Canadian citizens, permanent residents, Canadian corporations, and holders of a Canadian-registered trademark that matches the domain.

• Registering: use a CIRA-certified registrar, choose the correct eligibility category, register for 1 to 10 years, and accept the CIRA registrant agreement when prompted.

• Privacy: individuals get WHOIS privacy automatically. Businesses should use a role email address, such as domains@yourbusiness.ca, as the contact.

• Expiry: an unrenewed .ca moves into an auto-renew grace period of up to 45 days, then a 30-day redemption period, then release. Your registrar’s own policy sets the fees and when the domain stops resolving.

• Protection: turn on auto-renew, multi-factor authentication and a transfer lock. Keep your eligibility current. Know that the CIRA dispute policy exists for bad-faith lookalikes.

What a .ca domain is, and who runs it

.ca is Canada’s country-code top-level domain. It is operated by the Canadian Internet Registration Authority (CIRA), a not-for-profit organization. Three parties are involved in every .ca, and knowing which one does what saves a lot of frustration later.

Party	Who it is	What it does for you
Registry	CIRA	Sets the .ca rules, keeps the master database of .ca domains, runs WHOIS, and oversees the dispute policy
Registrar	A CIRA-certified company you buy from	Takes your registration, renewals and payments. Gives you the control panel for DNS and contacts. Applies its own fees and expiry policy
Registrant	You, the person or organization that holds the domain	Must meet CIRA’s eligibility rules, keep contact details accurate, and renew on time

You never deal with CIRA for day-to-day changes. Renewals, transfers, DNS and contact updates all go through your registrar. CIRA steps in for eligibility audits and disputes.

CIRA rules: who can register a .ca domain

The defining rule of .ca is the Canadian Presence Requirements (CPR). Every registrant must fit one of CIRA’s eighteen eligibility categories. You choose the category, sometimes called the “legal type,” when you register. The most common are:

Category	Who it covers	Points to watch
Canadian citizen	Canadian citizens, wherever they live	Individual category, so WHOIS privacy applies automatically
Permanent resident	Permanent residents of Canada	Individual category
Legal representative	Executors, guardians and similar representatives of a citizen or permanent resident	Individual category
Aboriginal peoples	Indigenous peoples of Canada, and Indian bands as defined under the Indian Act	Separate categories for individuals and collectivities
Corporation	Companies incorporated federally or under a province or territory	Covers a Canadian subsidiary of a foreign company. The foreign parent alone doesn’t qualify
Trademark registered in Canada	Owners of a trademark registered with the Canadian Intellectual Property Office	The domain must consist of or include the exact word component of the trademark
Other organizations	Partnerships, trusts, associations, trade unions, educational institutions, hospitals, libraries and museums, governments and others	Each has its own conditions in CIRA’s policy

Three practical consequences follow from these CIRA rules.

Pick the category that matches who will own the domain. A domain for a business should normally be registered to the business in the “Corporation” category, not to the owner personally. If it’s registered personally, it becomes an asset of that person, and transferring it later means a formal change of registrant.

Eligibility has to stay true. CIRA audits registrants. If a company is dissolved, or a trademark registration lapses and nothing else qualifies, the domain can be suspended or cancelled. Make updating your domain part of the to-do list whenever your company is restructured.

Foreign businesses have two routes. A business with no Canadian entity can qualify through a Canadian-registered trademark, but only for a domain containing that trademark’s exact words. The broader route is to incorporate a Canadian subsidiary and register the domain to it.

How to register a .ca domain, step by step

Choose the name. A .ca name can use letters, numbers and hyphens, but it can’t start or end with a hyphen. It can also include French accented characters (é, è, ê, ë, à, â, æ, ç, î, ï, ô, œ, ù, û, ü and ÿ). Shorter is easier to type, say and fit on a sign.
Check availability through your registrar’s search or CIRA’s WHOIS lookup.
Choose a CIRA-certified registrar. Only certified registrars can register .ca domains. Before buying, compare renewal prices as well as first-year prices, and check the registrar’s expiry and redemption policy.
Select your CPR category and enter the registrant’s legal name exactly. For a corporation, use the full legal name including “Inc.,” “Ltd.” or the equivalent.
Choose a term from 1 to 10 years. Longer terms reduce the number of renewal moments where things can go wrong.
Accept the CIRA registrant agreement. Registrars present this during checkout or by email afterwards. If you don’t accept it within the time allowed, typically about a week, the registration is cancelled.
Point the domain to your hosting. Set your nameservers or DNS records so the domain reaches your website and email.

A note on French characters. CIRA links the accented and unaccented versions of a name. If you register ecole.ca, the variant école.ca is reserved for you, and nobody else can register it. Variants must be registered separately, by the same registrant and through the same registrar. If your audience writes your name with accents, register the variant and redirect it.

How to manage a .ca domain after registration

Registration takes minutes, but management lasts for as long as you hold the domain. To manage a .ca domain well, focus on five areas.

DNS: nameservers and records

Your domain’s DNS tells the internet where your website and email are. There are two ways to set it up. You can point the domain’s nameservers to your hosting provider, which then manages every record for you. Or you can keep DNS at your registrar and add individual records: A or AAAA records for the website, MX records for email, and CNAME and TXT records for services and verification.

Whichever you choose, add the three email authentication records:

SPF lists the servers allowed to send mail for your domain.
DKIM signs your outgoing mail.
DMARC tells receiving servers what to do with mail that fails those checks.

Together they make it much harder for anyone to send convincing email pretending to be from your .ca, and the major mailbox providers increasingly expect them from legitimate senders.

Contacts and WHOIS privacy

For individual registrants, CIRA doesn’t show personal contact details in public WHOIS. Privacy is built in at no cost. For businesses and other non-individual registrants, contact details can be visible. That’s why the contact email on a business domain should be a role address that several people read, not an employee’s personal inbox. When someone leaves the company, a role address keeps working and the domain doesn’t become impossible to recover.

Transfers between registrars

To move a .ca to a new registrar, unlock the domain at your current registrar and get the authorization code. Then start the transfer at the new registrar. Transfers are restricted for a period after a new registration and after a recent transfer, which in practice means roughly two months. Plan moves around that window.

Changing the registrant (selling or reassigning)

Changing who owns a .ca, for example when you sell a business or move a domain from an owner’s name to the company, is a registrant transfer. It’s not just an edit to the contact details. The new registrant must meet the Canadian Presence Requirements and accept the CIRA registrant agreement. Do this through your registrar as part of any business sale.

Keep a domain record

Write down the registrar, the account owner, the renewal date, the CPR category, where DNS is hosted, and who has access. Store it alongside your other business records. Most domain losses at small businesses happen because nobody knew which account the domain was in.

.ca domain renewal: what happens before and after expiry

.ca domain renewal works differently from what many people expect. On the expiry date, CIRA automatically renews the domain at the registry for one year and charges the registrar. That doesn’t mean you’ve renewed. If you haven’t paid your registrar, the domain enters a series of stages.

The .ca domain expiry and renewal lifecycle

Stage	How long	Can you recover it?	What to know
Registered	Your paid term (1–10 years)	—	Renew any time. Many registrars offer auto-renew
Auto-renew grace	Up to 45 days after expiry	Yes, by renewing with your registrar	Your registrar can delete the domain earlier in this period if it isn’t paid. Some registrars stop the domain resolving during this stage
Redemption grace	30 days	Yes, as a restore through your registrar	Your final chance. Registrars often charge a restore fee on top of renewal
Pending delete / To Be Released	Short, then released	No	The domain is placed on CIRA’s To Be Released list and becomes available to anyone

Two points follow from that table.

Your registrar’s policy matters as much as CIRA’s. CIRA sets the maximum lengths. Your registrar decides when it deletes an unpaid domain, whether your website and email keep working during grace, and what a restore costs. Read the expiry section of your registrar’s terms before you need it.

Don’t rely on the grace periods. Every day a .ca spends past expiry is a day when your email might bounce and your website might be offline. If the domain reaches the To Be Released list, it can be registered by someone else, including people who specifically look for expiring domains with existing traffic.

Renewal best practices

Turn on auto-renew, and keep the payment card on file current.
Register or renew for several years at a time for domains you know you’ll keep.
Send renewal notices to a role email address that will still be monitored in three years.
Put the expiry date in a shared calendar with a reminder 60 days ahead.
After any change of registrar or payment method, confirm the new expiry date in WHOIS.

Protecting your .ca domain

A domain is the root of your website, your email and every password reset tied to your business address. Protecting it is mostly a matter of closing obvious gaps.

Secure the registrar account. Use a unique password and multi-factor authentication. Make sure more than one trusted person can reach the account.
Keep the transfer lock on. Turn it off only when you are deliberately moving registrars. Where your registrar offers a registry-level lock, consider it for domains your business can’t afford to lose.
Enable DNSSEC if your DNS provider supports it. It helps resolvers detect forged DNS answers for your domain.
Publish SPF, DKIM and DMARC. Start DMARC at a monitoring setting, then tighten it once legitimate mail is passing.
Keep your eligibility current. Corporate changes, dissolutions and lapsed trademarks are the most common reasons a .ca becomes vulnerable to an audit.
Register the obvious variants. These include the accented version if you use French, common misspellings, and the matching .com if you trade internationally. Point them all to your main site.
Know the dispute route. If someone registers a .ca that imitates your brand, CIRA’s Domain Name Dispute Resolution Policy (CDRP) provides a remedy. The complainant must show three things: that the domain is confusingly similar to a mark in which it had rights before the domain was registered, that the registrant registered it in bad faith, and some evidence that the registrant has no legitimate interest in it. Cases are heard by CIRA-recognized providers such as the Canadian International Internet Dispute Resolution Centre. It’s faster and cheaper than court, and it suits phishing and impersonation domains.

.ca or .com?

For a business serving Canadians, .ca is usually the stronger primary choice. It signals clearly who the site is for, and because of the Canadian Presence Requirements the name you want is more likely to be available than its .com equivalent. A .com suits businesses that sell internationally from day one. Many Canadian businesses hold both and redirect one to the other.

On search engines, the effect of .ca is often overstated. Google treats a country-code domain as a signal that a site is meant for that country, which helps the site appear in Canadian results. It isn’t a ranking bonus on its own. Content, relevance and site quality still decide where you rank. Choose the extension that fits your audience, and don’t expect .ca by itself to change your rankings.

Common .ca mistakes

Registering a business domain in an employee’s or founder’s personal name.
Using a personal email address as the registrant contact.
Letting the payment card on file expire, then missing the renewal notices.
Choosing the wrong CPR category to get through checkout.
Forgetting that a dissolved company or lapsed trademark can put the domain at risk.
Assuming an expired domain stays yours. After the redemption period it’s released to anyone.
Moving registrars just before expiry without checking how the transfer affects the expiry date.

Your annual .ca checklist

Check	Why
Expiry date and auto-renew status	The most common way domains are lost
Payment method on file	Auto-renew fails silently on an expired card
Registrant name and CPR category	Must still be true for CIRA eligibility
Contact email is a monitored role address	Renewal and security notices need to reach someone
Registrar account access and MFA	Departed staff shouldn’t be the only way in
Transfer lock on	Blocks unauthorized moves
DNS records match your current hosting and email	Old records can be hijacked if they point at abandoned services
SPF, DKIM, DMARC published	Protects your domain from spoofed email
Variants and redirects still in place	Keeps lookalikes out of other hands

Frequently asked questions

Who can register a .ca domain?

Only individuals and organizations that meet CIRA’s Canadian Presence Requirements. These include Canadian citizens, permanent residents, legal representatives, Indigenous peoples, Canadian corporations, and owners of a trademark registered in Canada (for a domain containing the trademark’s exact words). There are eighteen categories in total, including partnerships, trusts, associations, educational institutions and governments.

What are CIRA’s rules for .ca domains?

The core CIRA rules are the Canadian Presence Requirements, which require every registrant to have a qualifying connection to Canada, and the registrant agreement, which every registrant must accept. CIRA can audit eligibility and suspend or cancel domains whose registrants no longer qualify. It also runs a dispute policy for domains registered in bad faith.

How long can I register a .ca domain for?

You can register or renew a .ca domain for 1 to 10 years. Longer terms reduce the risk of a missed renewal for domains your business depends on.

What happens when a .ca domain expires?

CIRA automatically renews the domain at the registry and charges your registrar, and the domain enters an auto-renew grace period of up to 45 days. If it isn’t renewed, it moves to a 30-day redemption grace period. After that, it goes to CIRA’s To Be Released list and becomes available to anyone. Your registrar decides when an unpaid domain is deleted and what any restore costs.

Is WHOIS privacy free for .ca domains?

For individuals, yes. CIRA automatically keeps personal contact details out of public WHOIS for registrants in individual categories such as Canadian citizens and permanent residents. Contact details for businesses and other non-individual registrants can be visible, so use a role email address rather than a personal one.

How do I manage a .ca domain’s DNS?

Either point the domain’s nameservers to your hosting provider, which then manages the records, or keep DNS at your registrar and add the records yourself: A records for the website, MX records for email, and TXT records for SPF, DKIM, DMARC and service verification. Changes are made in your registrar or hosting control panel, not with CIRA.

Can I transfer my .ca domain to another registrar?

Yes. Unlock the domain, get the authorization code from your current registrar, and start the transfer at the new one. Transfers are restricted for a period after a new registration or a recent transfer, roughly two months in practice. Changing the domain’s owner is a separate registrant transfer, and the new owner must meet CIRA’s eligibility rules.

Does a .ca domain help SEO in Canada?

A .ca tells search engines your site is aimed at Canada, which helps it appear in Canadian results. It doesn’t give a ranking boost on its own. Content quality, relevance and site performance still decide rankings, so choose .ca because it fits your audience.

Key takeaways

A .ca domain requires a qualifying connection to Canada under CIRA’s Canadian Presence Requirements, and that connection must stay true for as long as you hold the domain.
Register business domains to the business, in the correct category, using its full legal name.
You can register for 1 to 10 years, and must accept the CIRA registrant agreement to complete registration.
Individuals get WHOIS privacy automatically. Businesses should use a role email as the contact.
After expiry, a .ca passes through up to 45 days of auto-renew grace and 30 days of redemption before release. Registrar policies set fees and when service stops.
Auto-renew, multi-year terms, MFA, a transfer lock and SPF, DKIM and DMARC records prevent most domain losses and spoofing.
Changing ownership is a registrant transfer, not a contact edit, and the new owner must qualify.
CIRA’s dispute policy is the remedy for bad-faith lookalike .ca domains.
A .ca signals Canada to search engines but isn’t a ranking boost by itself.

Conclusion

A .ca domain is one of the few assets every Canadian business has in common, and one of the easiest to neglect. The rules covered in this .ca domain guide work in your favour once you know them. Eligibility keeps the namespace Canadian, built-in privacy protects individuals, and generous grace periods give you time to recover from a missed renewal. They only help if the domain is registered to the right entity, connected to a monitored inbox, renewed automatically and checked once a year.

Treat the domain like the business record it is. Know where it lives, who can reach it and when it renews, and keep your eligibility current. Do that, and your .ca will keep doing its job: pointing customers to your website and your email to the right inbox, under a name that says you’re Canadian.

Register or move your .ca with 4GoodHosting

4GoodHosting registers .ca domains with free DNS hosting, DNS record management and domain locking. We can also move an existing .ca from another registrar and set up your hosting and email in the same place.

Search for your .ca and register it with 4GoodHosting →