DNS and SSL are free at production quality: Cloudflare’s Free plan hosts DNS with a universal certificate, CDN and unmetered DDoS protection (200 records a zone for new zones), Let’s Encrypt issues 90-day certificates at no charge within rate limits, ZeroSSL adds a web interface, and deSEC, Hurricane Electric, Namecheap FreeDNS and Bunny host DNS free with different conditions. Domains are never free — Freenom is defunct, Google Domains no longer exists, EU.org gives subdomains by approval — but Cloudflare Registrar sells them at registry cost and Porkbun bundles WHOIS privacy, SSL and email forwarding. Route 53 is paid from the first zone and NS1’s free tier has become a 30-day trial. Prices are USD and were checked on 27 October 2026. How we score · All Kurums Free lists
TL;DR — the free DNS tool that fits
- DNS, SSL and CDN for a business site: Cloudflare Free — $0, Universal SSL, unmetered DDoS, 200 records a zone; Pro is $20.
- A certificate on a server you run: Let’s Encrypt via ACME — free 90-day certificates, wildcards by DNS-01, auto-renewed.
- A certificate without the command line: ZeroSSL — three 90-day certificates from the web UI free, unlimited via ACME.
- DNSSEC-by-default free DNS with an API: deSEC — a German non-profit, MIT stack, no record caps stated.
- Buying the domain: Cloudflare Registrar at registry cost, or Porkbun with WHOIS privacy, SSL and 20 email forwards included.
Which domain, dns & ssl tools tools have a free plan in 2026?
Everything below is free with no end date within its conditions. For DNS the conditions are record caps (Cloudflare 200 on new free zones), DNSSEC (not on Hurricane Electric or Namecheap FreeDNS; on by default at deSEC), a minimum account fee (Bunny $1 a month), or who may use it (Namecheap’s FreeDNS is only for domains registered elsewhere). For SSL the conditions are rate limits and 90-day validity, which automation makes irrelevant. For domains the condition is that there is no free one worth having: Freenom shut down 12.6 million domains in 2024 and lost its ICANN accreditation, Google Domains migrated to Squarespace, and EU.org hands out approved subdomains to those who cannot afford fees.
Cloudflare’s page labels the Free plan ‘for personal or hobby projects that aren’t business-critical’, which is Cloudflare’s framing of support and SLA rather than a prohibition; thousands of businesses run on it. Route 53 is $0.50 a zone from the first one; NS1’s old developer tier is now a 30-day trial at $99 after. GoDaddy’s free WHOIS privacy and DNS come with a $2.99 first-year .com whose renewal price is not on the page.
The table shows what is free, the key condition and the Free Score. Open a row for caps, DNSSEC, licence and the page we checked.
| Company | Free as | Key limit | Card | Free Score | |
|---|---|---|---|---|---|
| C |
Free forever | $0 · DNS, Universal SSL, CDN, DDoS · 200 records/zone | No | 92 | Scorecard ↓ |
| L |
Free forever | Free 90-day certs · 50/domain/week · wildcards | No | 90 | Scorecard ↓ |
| D |
Open source | Free secure DNS · DNSSEC · MIT stack · REST API | No | 80 | Scorecard ↓ |
| Z |
Free forever | 3 UI certs (90-day) · unlimited ACME · Basic $14.99 | No | 76 | Scorecard ↓ |
| C |
Startup program | Domains at registry cost · no markup · 430+ TLDs | Yes | 74 | Scorecard ↓ |
| P |
Startup program | .com from $11.08 · free WHOIS privacy, SSL, DNS, 20 forwards | Yes | 70 | Scorecard ↓ |
| H |
Free forever | Multiple domains · all record types · slave zones · no DNSSEC | No | 66 | Scorecard ↓ |
| N |
Free forever | Third-party domains only · no DNSSEC | No | 62 | Scorecard ↓ |
| B |
Free forever | 500 zones · unlimited queries · $1/month account minimum | No | 58 | Scorecard ↓ |
| N |
Free forever | 1 hostname · dynamic updates · no card | No | 54 | Scorecard ↓ |
| D |
Free forever | Free dynamic DNS · duckdns.org subdomains · donations | No | 50 | Scorecard ↓ |
| E |
Startup program | Free subdomains by approval · no support | No | 46 | Scorecard ↓ |
| N |
Trial d | 30-day trial · Essentials $99/month | No | 24 | Scorecard ↓ |
Free tiers verified 27 October 2026 on each vendor’s pricing page (third-party sources named in the Scorecard where the vendor page was silent). Order is by Free Score only; sponsorship never changes it.
What do the free DNS tool plans actually include?
Open any row for the eight-field Scorecard. The “Why it ranks here” note under each row explains the score in plain terms.
1C
Cloudflare FreeUS · $0 a month for fast DNS, a Universal SSL certificate, CDN and unmetered DDoS protection; free zones created since September 2024 hold 200 DNS records; Pro is $20 a month annualFree forever$0 · DNS, Universal SSL, CDN, DDoS · 200 records/zoneNo card92⌄
- What’s free
- $0: DNS, Universal SSL certificate, CDN, unmetered DDoS protection
- Hard limits
- 200 DNS records a zone for zones created on or after 1 Sep 2024 (1,000 older) · must move nameservers · labelled for personal or hobby projects
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- WAF rules, image optimisation or a 201st record
- Cheapest paid step
- Pro $20/month annual; $25 monthly
- Best free for
- The default for any small-business domain
- Verified
- Oct 2026 · cloudflare.com/plans and developers.cloudflare.com/dns
2L
Let’s EncryptUS · no fee for certificates; default validity 90 days (an opt-in 6-day short-lived option), wildcards via DNS-01, up to 100 names a certificate, 50 certificates a registered domain a weekFree foreverFree 90-day certs · 50/domain/week · wildcardsNo card90⌄
- What’s free
- Free DV certificates; 90-day default; wildcards; ACME automation
- Hard limits
- 50 certificates a registered domain every 7 days · 5 duplicate certificates every 7 days · 100 identifiers a certificate · no OV or EV
- Time limit
- 90 days, auto-renewed
- Card required
- No.
- Upgrade trigger
- None
- Cheapest paid step
- None
- Best free for
- Every server that terminates its own TLS
- Verified
- Oct 2026 · letsencrypt.org rate limits and FAQ
Why it ranks here. The certificate authority that made paid DV certificates pointless; the only friction is automating renewal, which every web server now does.
3D
deSECGermany · free DNS hosting run by the non-profit deSEC e.V. with an MIT-licensed stack, a REST API and dynamic DNS; no domain or record caps stated, with daily rate limits on expensive API callsOpen sourceFree secure DNS · DNSSEC · MIT stack · REST APINo card80⌄
- What’s free
- Free secure DNS; MIT-licensed stack; REST API; dynDNS
- Hard limits
- Rate limits: 300 expensive API calls a domain a day, 2,000 a user a day, dynDNS every 2 minutes · no SLA stated
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- None — donation-funded
- Cheapest paid step
- None
- Best free for
- A technical team that wants DNSSEC on by default and an API to script against
- Verified
- Oct 2026 · desec.readthedocs.io and github.com/desec-io/desec-stack (the homepage returned only a title)
Why it ranks here. The most principled free DNS host — non-profit, open source, DNSSEC — with a homepage that would not load for our check.
4Z
ZeroSSLAustria · three 90-day certificates issued from the web interface free, and unlimited free 90-day ACME certificates on every plan; one-year certificates and more UI certificates are Basic at $14.99 a month annualFree forever3 UI certs (90-day) · unlimited ACME · Basic $14.99No card76⌄
- What’s free
- 3 90-day certificates from the UI; unlimited free 90-day ACME certificates; multi-domain and wildcard listed
- Hard limits
- 3 UI certificates · free wildcard count ambiguous
- Time limit
- 90 days
- Card required
- Not stated.
- Upgrade trigger
- One-year certificates or a fourth UI certificate
- Cheapest paid step
- Basic $14.99/month annual
- Best free for
- Someone who wants a dashboard and a download button instead of certbot
- Verified
- Oct 2026 · zerossl.com/pricing
Why it ranks here. Let’s Encrypt with a UI for three sites, and the same thing without a cap if you use ACME anyway.
5CCloudflare RegistrarUS · domains sold at the price charged by registries and ICANN with no markup, across more than 430 TLDs; domains must use Cloudflare DNS and registry lock is Enterprise-onlyStartup programDomains at registry cost · no markup · 430+ TLDsCard required74⌄
- What’s free
- No markup on domain prices; wholesale registry cost
- Hard limits
- Must use Cloudflare DNS · prices not listed on the page · no registry lock below Enterprise
- Time limit
- None
- Card required
- Yes — a domain purchase.
- Upgrade trigger
- None
- Cheapest paid step
- At cost
- Best free for
- Anyone already on Cloudflare DNS who wants renewal prices that never surprise
- Verified
- Oct 2026 · cloudflare.com/products/registrar (no price schedule on the page)
Why it ranks here. Not free — nothing with a domain is — but the only registrar whose stated policy is zero margin.
6P
PorkbunUS · a registrar bundling free WHOIS privacy, Let’s Encrypt certificates, DNS management powered by Cloudflare and up to 20 email forwards with every domain; .com from $11.08Startup program.com from $11.08 · free WHOIS privacy, SSL, DNS, 20 forwardsCard required70⌄
- What’s free
- Free WHOIS privacy, SSL, DNS and up to 20 email forwards with a domain
- Hard limits
- Renewal price not stated on the home page
- Time limit
- None
- Card required
- Yes — a domain purchase.
- Upgrade trigger
- None
- Cheapest paid step
- .com from $11.08
- Best free for
- A small business that wants one bill and the extras included
- Verified
- Oct 2026 · porkbun.com (renewal price not stated on the home page)
Why it ranks here. The extras other registrars charge for, included; check the renewal before you buy.
7H
Hurricane Electric Free DNSUS · free DNS hosting for multiple domains with every common record type, dynamic DNS and slave zones; the page says DNSSEC is being explored, and the service is labelled open betaFree foreverMultiple domains · all record types · slave zones · no DNSSECNo card66⌄
- What’s free
- Multiple domains an account; A, AAAA, ALIAS, CNAME, CAA, MX, NS, TXT, SRV, SSHFP, NAPTR, LOC, PTR; dynamic DNS; slave zones
- Hard limits
- No DNSSEC · open beta · no numeric limits stated
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- None
- Cheapest paid step
- None
- Best free for
- Free secondary DNS for a domain hosted elsewhere
- Verified
- Oct 2026 · dns.he.net
Why it ranks here. The classic free secondary; no DNSSEC rules it out as a primary for anyone who needs it.
8N
Namecheap FreeDNSUS · free DNS hosting for domains registered elsewhere with the common record types; Namecheap-registered domains use Basic DNS instead, and DNSSEC needs PremiumDNSFree foreverThird-party domains only · no DNSSECNo card62⌄
- What’s free
- Free DNS for third-party domains; A, AAAA, CNAME, NS, MX, TXT, SRV
- Hard limits
- Third-party domains only · no DNSSEC · 10 days to switch nameservers · record caps not stated
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- DNSSEC (PremiumDNS)
- Cheapest paid step
- PremiumDNS — price not stated on the page
- Best free for
- A backup DNS host for a domain registered elsewhere
- Verified
- Oct 2026 · namecheap.com/domains/freedns
Why it ranks here. Fine, free and without the thing Cloudflare and deSEC give you.
9B
Bunny DNSSlovenia · unlimited DNS queries at no cost and up to 500 zones free, but a $1 a month minimum account fee applies if DNS is the only product you useFree forever500 zones · unlimited queries · $1/month account minimumNo card58⌄
- What’s free
- Unlimited DNS queries at no cost; up to 500 zones
- Hard limits
- $1 monthly minimum account fee if DNS is your only product · DNSSEC not mentioned
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- A 501st zone
- Cheapest paid step
- $1 a month minimum
- Best free for
- Anyone already paying Bunny for CDN or storage
- Verified
- Oct 2026 · bunny.net/pricing/dns
Why it ranks here. Free in the way a $1 minimum is free; scored accordingly.
10N
No-IP Free Dynamic DNSUS · one hostname with dynamic DNS updates, URL and port-80 redirects and email support, no card; Enhanced is $2.50 a month annual for three hostnames with no 30-day confirmationsFree forever1 hostname · dynamic updates · no cardNo card54⌄
- What’s free
- 1 hostname; dynamic DNS updates; redirects; email support
- Hard limits
- 1 hostname · periodic confirmation implied by the paid plan’s ‘no 30-day confirmations’
- Time limit
- None (confirmation implied)
- Card required
- No.
- Upgrade trigger
- More hostnames or your own domain
- Cheapest paid step
- Enhanced Dynamic DNS $2.50/month annual (3 hostnames)
- Best free for
- Remote access to one office device on a changing IP
- Verified
- Oct 2026 · noip.com/free and /pricing
Why it ranks here. Dynamic DNS for one thing; the confirmation nag is why people pay $2.50.
11D
Duck DNSNot stated · free dynamic DNS hosted on AWS giving subdomains of duckdns.org, run by two people and funded by PatreonFree foreverFree dynamic DNS · duckdns.org subdomains · donationsNo card50⌄
- What’s free
- Free dynamic DNS on duckdns.org subdomains
- Hard limits
- Subdomain cap not stated · a two-person project
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- None
- Cheapest paid step
- None
- Best free for
- A home lab or a device that needs a stable name
- Verified
- Oct 2026 · duckdns.org/about (the five-subdomain cap often cited is not on the fetched pages)
Why it ranks here. Charming and free; not a business dependency.
12E
EU.orgFrance · free subdomain registration under eu.org for users and non-profits who cannot afford fees, with no support and a manual approval processStartup programFree subdomains by approval · no supportNo card46⌄
- What’s free
- Free subdomain registration for those who cannot afford fees
- Hard limits
- A subdomain, not a TLD · no support · manual approval
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- None
- Cheapest paid step
- None
- Best free for
- A hobby or non-profit project that cannot pay $11
- Verified
- Oct 2026 · nic.eu.org
Why it ranks here. The only free domain name that still exists, and it is a subdomain.
13N
IBM NS1 ConnectUS · a 30-day trial with 50 million queries, 500 records and 20 health checks; the former free developer tier is not on the page, and Essentials starts at $99 a monthTriald30-day trial · Essentials $99/monthNo card24⌄
- What’s free
- 30-day free trial
- Hard limits
- 30 days
- Time limit
- 30 days
- Card required
- Not stated.
- Upgrade trigger
- The trial’s end
- Cheapest paid step
- Essentials from $99/month
- Best free for
- Evaluating traffic steering
- Verified
- Oct 2026 · ibm.com/products/ns1-connect/pricing
Why it ranks here. Listed because the free developer tier was well known; it is gone.
Which free DNS tool has no credit-card requirement?
Let’s Encrypt, deSEC, Hurricane Electric, No-IP, Duck DNS and EU.org take no card. Cloudflare’s Free plan does not state one. A registrar needs one by definition. Nothing converts on its own; Let’s Encrypt and ZeroSSL certificates expire at 90 days and are meant to be renewed by software.
The dead names: Freenom shut down 12.6 million domains in March 2024 and had lost its ICANN accreditation; Google Domains ‘no longer exists’ per Squarespace; Route 53 was never free for public zones; NS1’s free tier is a trial.
When does the free plan stop being enough?
Kurums Match: which free DNS tool fits your situation?
Business website
Cloudflare Free for DNS, SSL and CDN.
Own server, own TLS
Let’s Encrypt with certbot or Caddy.
Prefer a dashboard for certificates
ZeroSSL.
DNSSEC and an API, no vendor
deSEC.
Secondary DNS
Hurricane Electric.
Buying the domain
Cloudflare Registrar or Porkbun.
Office device on a dynamic IP
No-IP.
How we score free tiers
Duration (30): free forever scores 30, a 30-day-plus trial 15, a trial of 14 days or less 8, credit-based tiers 12. Capacity (30): whether the limits carry a team of three for twelve months. Core job (25): whether the free tier does the category’s main work — here, hosting a business domain’s DNS with SSL on the site and a registrar that does not surprise you at renewal. Friction (15): no card 15; card but no auto-charge 8; auto-charge 0; self-hosting deducts for setup and maintenance.
Each free tier was checked on the vendor’s pricing page on 27 October 2026; where the vendor page was silent, the Scorecard names the third-party source used. Free tiers change, so this list is re-verified every quarter and a discontinued free plan stays listed for one month with a notice. Order is by Free Score only. Kurums Free sells no placement; sponsorship, affiliate links and vendor requests never change a score, a rank or a label. Vendors can submit corrections through the Update your free tier form.
How did we verify these free tiers?
We opened each provider’s pricing, plans or documentation page and, for open-source projects, the repository, and recorded record and zone caps, DNSSEC availability, certificate validity and rate limits, and the paid step. Cloudflare’s DNS-record-limit page failed and an alternative documentation page was used; deSEC’s homepage returned only a title and its documentation and repository were used; Duck DNS’s subdomain cap could not be found on its pages. Freenom’s status is from Domain Incite, March 2024; Google Domains’ closure from Squarespace’s own page.
Prices are USD.
Frequently asked questions
Is Cloudflare DNS free for business?
The Free plan is $0 with DNS, a Universal SSL certificate, CDN and unmetered DDoS protection. Cloudflare labels it for personal or hobby projects that are not business-critical, which describes support and SLA; new free zones hold 200 records.
Is Let’s Encrypt free for commercial sites?
Let’s Encrypt states it does not charge for certificates and its FAQ places no commercial restriction; rate limits are 50 certificates a registered domain a week. Certificates are DV only — no OV or EV.
Can I get a free domain name?
Not a real one. Freenom shut down in 2024 and Google Domains has closed. EU.org gives approved subdomains to users and non-profits who cannot afford fees. Cloudflare Registrar sells domains at registry cost with no markup.
Which free DNS supports DNSSEC?
Cloudflare Free and deSEC. Hurricane Electric’s page says DNSSEC is being explored; Namecheap’s FreeDNS needs PremiumDNS for it.
Is Amazon Route 53 free?
No. Public hosted zones are $0.50 a month each from the first zone plus $0.40 per million queries; only private-zone and alias queries to AWS services are free.
Does ZeroSSL have a free plan?
Yes — three 90-day certificates from the web interface, and unlimited free 90-day certificates via ACME on every plan. One-year certificates need Basic at $14.99 a month annual.
Discover more from Kurums | Business Intelligence
Subscribe to get the latest posts sent to your email.