distributed.domains

A domain no single person can take.

Your .com stays a normal .com. But every DNS change, transfer or renewal needs approval from enough of your signers, so one hacked login or one departing admin can't move it.

Try it: a change waiting on approval

Someone proposed pointing the site at a new server. It needs 3 of 5 signers. Tap signers to approve.

A  distributed.domains  203.0.113.10  198.51.100.24
0 of 3 approvals

Waiting for approvals. Nothing has changed yet.

How a change happens

Five hands around one sheet of paper: three are pressing red wax seals onto it, two are still holding their stamps.

  1. Someone proposes

    Any signer suggests a change: a DNS record, a renewal, unlocking for a transfer.

  2. Signers approve

    Each signer approves on their own device, with a passkey or a crypto wallet.

  3. The threshold applies it

    Once enough signers approve, the change goes live at the registrar. Before that, nothing moves.

  4. Everyone can check

    Every proposal and signature is written to a public log, with who approved and when.

Example log entry What anyone can look up
Proposal
#14, point distributed.domains to 198.51.100.24
Proposed by
Clerk, 14:02 UTC
Approved by
Chair (passkey) 14:03
Founder (wallet, signature 0x8f3a…c21b) 14:05
Member (Face ID) 14:07
Rule
3 of 5 signers
Result
Applied 14:07 UTC

Built for groups that share a name

Five people of different ages around a wooden table, each approving on their own phone or with a small security key.

Communities and councils

Tie the domain to the people your members elected, not to whoever happened to register it. When the council changes, the signers change with it.

DAOs and crypto teams

Your treasury is already in a multi-sig. Your website, which is where people go to find it, should be too.

Companies and partners

Co-founders, partners and boards approve together. No one leaves with the company's name in their personal account.

Anyone who's been hijacked once

A stolen password is no longer enough. Moving the domain takes several people, on several devices, at once.

Sign with what you already have

A hardware security key, a phone showing a face scan, a phone showing a wallet, and a wax seal stamp laid out on blue linen.

Passkeys

Face ID, Touch ID, Windows Hello or a hardware security key. Nothing to install and no password to steal.

Crypto wallets

MetaMask, Rabby and other wallets sign approvals as readable messages, which anyone can verify.

Signers can mix methods. A rule like "3 of 5" counts every approval the same way.

What this protects, honestly

Your domain is a real domain at an accredited registrar, which means some company is always at the top of the chain. We can't change that. What we change is everything below it.

No single signer, admin or password can change your domain. Our own access is limited to carrying out what your signers approve, every action is logged in public, and where the domain's registry offers a lock, we use it.

Questions

Is this a blockchain domain?

No. It's a normal domain, like a .com or .org, that works in every browser and email system. What changes is who can control it: a group instead of one account.

What happens if a signer loses their key?

The rest of the group approves replacing that signer, using the same rule as any other big change. No single lost key can lock the domain or unlock it.

Can I bring a domain I already own?

Yes. You transfer it in, and from then on every change goes through your group's approvals. Transfers are handled with you directly during the early pilot.

Who can see the approvals?

Every proposal and every signature goes into a public log, so your members, customers or citizens can check exactly who approved what and when.