No single company or government "owns" the domain name system. It is coordinated by ICANN, a non-profit that sets policy through a multi-stakeholder process; its IANA function maintains the authoritative root zone — the master list of every top-level domain. Each individual TLD is then run by a registry operator under contract, and you buy a name from a registrar. Control is layered and distributed by design.
"Who controls domain names?" is one of the most common questions about the internet, and the honest answer surprises people: nobody controls it alone. The system is deliberately split between a policy coordinator, a technical root authority, hundreds of registry operators, thousands of registrars, and the millions of registrants who hold individual names. This page is the map of that ecosystem — how the pieces fit, who answers to whom, and where to read more on each part.
The four layers of domain control
Every domain name you have ever typed passes through four distinct layers of authority. Understanding them removes almost all the confusion around who is "in charge."
| Layer | Who | Role |
|---|---|---|
| Coordination | ICANN | Sets global policy through a multi-stakeholder process; accredits registrars; contracts with registries. |
| Root authority | IANA (operated by ICANN) | Maintains the authoritative root zone — the official list of TLDs and their name servers. |
| Registry | Registry operators | Run one or more TLDs; hold the master database of every name under that extension. |
| Registrar | Registrars | The retailers that sell domains to the public and submit registrations to the registry. |
For the clean distinction between the three commercial roles — registry, registrar and registrant — see registrars vs registries vs registrants and the focused comparison registry vs registrar.
The governance approach ICANN uses, in which governments, businesses, technical experts and civil society develop policy together by consensus rather than any one party deciding unilaterally.
ICANN: the policy coordinator
ICANN — the Internet Corporation for Assigned Names and Numbers — is a California-based non-profit founded in 1998. It does not "run the internet," but it coordinates the unique identifiers that keep it interoperable: domain names, IP address allocation policy, and protocol parameters. Crucially, ICANN decides which new top-level domains can exist and accredits the registrars allowed to sell names. Read the full explainer at what is ICANN, and see who controls TLDs for how that authority maps onto each extension.
Since the 2016 IANA stewardship transition, ICANN's coordination role is no longer under direct U.S. government oversight; it operates under its multi-stakeholder community. That history matters because it is the reason no single nation can switch the system off.
IANA and the root zone
The IANA function — the Internet Assigned Numbers Authority, operated by ICANN — maintains the root zone: the single authoritative file that lists every TLD and the name servers responsible for it. When a new gTLD is approved, it is the IANA root-zone update that makes it real across the internet. The root zone is then published to the root servers and resolved through the DNS hierarchy. See what is IANA for the detail, and TLD name servers explained for how the next level down works.
The root is a list, not a switch
The root zone is essentially an authoritative directory of "which name servers answer for which TLD." It is small, heavily replicated through anycast root servers, and changes rarely — which is exactly why the naming system is so stable.
Registries: who runs each TLD
One layer below the root, each individual TLD is operated by a registry operator under contract with ICANN. The registry holds the master database for that extension and publishes its zone file. Verisign operates .com and .net; Public Interest Registry runs .org; country-code extensions are typically run by a national registry. To understand how brand-new extensions reach this stage, read how new gTLDs are created, and for the wider categories see gTLD vs ccTLD.
Registrars and registrants
You never buy directly from a registry. Instead, ICANN-accredited registrars retail domains to the public and relay your registration into the registry database. The person or organisation that holds the name is the registrant — you. When you "own" a domain you actually hold an exclusive, renewable right to use it, governed by the registry's rules. To act on this layer, see how to register a domain name and how to choose a domain registrar.
How control becomes resolution
This chain of authority is exactly what makes the Domain Name System resolve. A query walks down from the root (IANA's list) to the TLD's name servers (the registry's) to your domain's own name servers — the technical mirror of the governance hierarchy. See how the DNS hierarchy works and, for integrity, what is DNSSEC, which cryptographically protects answers at each level.
★ Key takeaways
- No single entity controls domain names; authority is split across coordination, root, registry and registrar layers.
- ICANN sets policy and accredits registrars; its IANA function maintains the authoritative root zone.
- Each TLD is run by a registry operator under contract; registrars sell names to the public.
- The same hierarchy that governs the system is what makes DNS resolve your queries.
Frequently asked questions
Who controls the internet's domain names?
No single entity does. Control is shared: ICANN coordinates global policy through a multi-stakeholder process, its IANA function maintains the authoritative root zone of TLDs, registry operators run individual extensions under contract, and ICANN-accredited registrars sell names to the public. The design deliberately prevents any one party from controlling the whole system.
Does ICANN own domain names?
No. ICANN coordinates and sets policy for the naming system and accredits registrars, but it does not own domains or sell them. Individual TLDs are operated by registry operators under contract, and you register names through registrars. You, as the registrant, hold the right to use your name.
What is the difference between ICANN and IANA?
ICANN is the non-profit that sets policy and runs the wider coordination of names and numbers. IANA (the Internet Assigned Numbers Authority) is a function operated by ICANN that maintains the technical root zone — the authoritative list of every TLD and the name servers responsible for it.
Can one government shut down the domain system?
Not unilaterally. Since the 2016 IANA stewardship transition, the root is coordinated through ICANN's global multi-stakeholder community rather than any single government, and the root zone is heavily replicated across anycast root servers worldwide, which makes the system resilient.
Who runs an individual TLD like .com or .org?
Each TLD is operated by a registry operator under contract with ICANN. For example, Verisign operates .com and .net, and Public Interest Registry operates .org. Country-code TLDs are usually run by a national or regional registry. See who controls TLDs for more detail.