# Domains
Register and manage domain names from the kenari dashboard: search, register, edit DNS, renew and move a domain away. Domain purchases are paid from the same prepaid balance as the AI Gateway. Open **Domain** in the dashboard menu to start.
## Register a domain
1. Under **Search for a domain name**, type a name such as `mybusiness` and press **Search**. kenari checks every extension on sale and shows each result as **Available** or **Already registered**, with the price per year.
2. Press **Register** next to the extension you want. The **Register domain** dialog has three steps: **Configuration** (registration period and WHOIS protection), **Registrant** (your contact details) and **Confirmation**.
3. Read the consent line, then press **Register and pay**.
The total is taken from your balance at once. If your balance is too low, kenari sends you to top up first. If the price changed after you opened the dialog, kenari asks you to confirm again at the new price before anything is charged. The domain shows **Processing** until the registrar finishes, then **Active**. If the registrar rejects the registration, the charge is refunded.
Your registrant details are saved and filled in the next time. For an organization, also enter **Company name** and **Person in charge**. By confirming, you accept that registrant data is shown publicly in WHOIS under PANDI rules, and that a purchase cannot be refunded after registration succeeds.
**Protect WHOIS data** hides registrant data from the public. It is free, and only offered for extensions that support it. `.id` extensions do not.
## Extensions and documents
The search shows which extensions are on sale and their current prices, so the list is not repeated here. The `.id` family comes in several second-level forms, such as `.co.id`, `.or.id`, `.sch.id`, `.web.id` and `.my.id`.
Extensions for organizations and institutions, such as `.co.id`, `.or.id`, `.ac.id`, `.sch.id` and `.ponpes.id`, need a supporting document. The dashboard tells you when one is required: the registrant form asks for **Company name**, and the domain gets a **Verification** tab.
1. Open the domain from **My domains** with **Manage**, then open the **Verification** tab.
2. Upload the document as a PDF of up to 1 MB with **Submit document**.
3. Wait for **Verification status** to reach **Verified**. Verification usually takes 1 to 3 business days. The domain shows **Needs verification** until then.
## Manage DNS
Open the **DNS** tab on the domain page. Each record has a **Name**, **Type**, **Content** and **TTL**. Supported types:
| Type | Common use |
| --- | --- |
| `A` | Point a name to an IPv4 address |
| `AAAA` | Point a name to an IPv6 address |
| `CNAME` | Alias to another host name |
| `MX` | Incoming email server |
| `TXT` | Ownership verification, SPF, DKIM |
| `NS` | Delegate a subdomain to other nameservers |
| `SRV` | Service location for a protocol |
| `CAA` | Which certificate authorities may issue certificates |
Press **Add record**, fill in the **Type**, **Name** (`@` for the domain itself, or a subdomain), **Content** and **TTL (seconds)**, and save. TTL accepts 60 to 604,800 seconds. Resolvers around the internet can keep an old answer until the previous TTL runs out.
DNS records, nameservers, locks and the authorization code cannot be changed while a domain is held, suspended, deleted or transferred out, or when its registration did not complete. The dashboard shows a message, and for a held or suspended domain it tells you to contact support.
To use other nameservers, open the **Nameserver** tab, choose **Custom nameservers**, enter at least two and press **Save nameservers**. While custom nameservers are active, the kenari DNS editor is unavailable and you manage records at your nameserver provider. Choose **kenari nameservers** to switch back.
## Renew a domain
New domains have **Auto-renew** switched on, and you can switch it off on the domain page.
- **Auto-renew on.** kenari reminds you 30, 7 and 1 day before expiry. From 30 days before expiry it renews the domain for one year at the current renewal price, taken from your balance. If your balance is too short, the domain is not renewed and you get a notification. kenari tries again, so topping up before expiry is enough. Auto-renew does not run while your account is suspended.
- **Auto-renew off.** You get the same reminders, and you renew by hand.
To renew by hand, open the **Summary** tab, choose a number of years under **Renew domain** and press the button that shows the period, such as **Renew 2 years**. Confirm with **Renew and pay**. Renewal prices are shown per period and can differ from the registration price. Your payments are listed under **Balance & billing**.
If a domain is not renewed in time, it shows **Expired**. It then enters the **Redemption period**, when you can still get it back: open the **Summary** tab and press **Restore domain**. The restore fee is shown there. After that the domain is **Deleted**, and anyone can register the name again.
## Move a domain away
To transfer a domain to another registrar:
1. Open the **Security** tab. Under **Domain locks**, turn off **Transfer lock**.
2. Under **Authorization code (EPP)**, press **Show code**, and copy it. The code is not stored. Use **Reset code** to invalidate the old one and get a new one.
3. Give the code to the new registrar and start the transfer there.
**Registrar lock**, in the same section, is on by default and prevents a registrar change without authorization. Once the transfer completes, the domain shows **Transferred out**.
Transferring a domain in to kenari is not available from the dashboard. Open the **Help** menu and create a ticket if you need it.
## See also
- [How billing works](/en/docs/billing)
- [Pods](/en/docs/pods)