.app is a Google-operated TLD aimed at application developers — mobile, web, and desktop. Launched in 2018, it was one of the first TLDs to ship with HSTS preloaded by default, which made it the early poster child for "secure by default" domains.
What makes .app different
Like .dev, every .app domain is on the HSTS preload list. Browsers refuse plain HTTP connections, so your server must serve TLS from the first request. The promise is that an .app URL is never silently downgraded — every visitor talks to your app over an encrypted channel.
Pricing and registration
- Registration is roughly $14–$20 per year depending on the registrar.
- Anyone can register; no proof of "being an app" is required.
- Domain privacy is widely available at no extra cost.
- Two-letter and three-letter names are scarce; expect to buy on the aftermarket.
Who should use .app
- Mobile apps that want a landing or download page distinct from the app store.
- Web apps and progressive web apps (PWAs).
- Desktop applications that ship a web companion or sync service.
- SaaS products whose primary interface is "an app" rather than a marketing site.
When to pick something else
- If you are building a developer tool or library,
.devreads more credibly to engineers. - If you want the startup / scale-up association, .io is still stronger in 2026.
- If the product is a CLI or shell tool, .sh is on the nose and shorter.
Availability checks for .app
namebox.dev queries the .app registry directly via RDAP (RFC 7483). A green "available" badge means the registry has no record for that name right now — so you can register it at any accredited registrar. See the guide on choosing a domain name for the checklist we recommend running before you commit.