Registering and Managing .nz Domains

New Zealand's .nz namespace runs on its own registry rules, and several of them differ enough from .com that the KPanel controls you expect to see are deliberately absent on a .nz domain.

None of those differences are Kapsule limitations. They come from the .nz registry itself, and where a feature genuinely does not exist for .nz, KPanel says so rather than showing you a toggle that would fail. This guide covers what changes, what replaces it, and what to watch on renewals and transfers.

The .nz Namespace

.nz can be registered directly at the second level, or under one of its long-standing sub-domains:

.nz, .co.nz, .net.nz, .org.nz, .kiwi.nz, .geek.nz, .maori.nz, .iwi.nz, .gen.nz, .ac.nz, .school.nz, .cri.nz, .health.nz, .govt.nz, .mil.nz, .parliament.nz

Several of those are restricted to particular kinds of registrant. In everyday commercial use you are choosing between .co.nz and the shorter .nz.

If yourbrand.co.nz is available, check yourbrand.nz too and consider taking both. .co.nz is the address most New Zealanders still type by habit, while the bare .nz is shorter and has far fewer names taken. Owning both means nobody registers the twin of your brand. Search them together in Domains, then Bulk search.

Registrant Details Must Be Real

The .nz registry is the Domain Name Commission, and it takes registrant accuracy seriously.

Your name, address, email and phone must be genuine and current.
The registrant must be the actual owner of the domain, not your web developer, your agency, or your hosting provider.
The registry can cancel a registration for false or incomplete registrant data.

Kapsule collects these details at registration and passes them to the registry. Keep them current in KPanel from the domain's Overview tab, under Registrant Contact. Saving there queues a sync to the registry: KPanel confirms with "WHOIS contacts updated: registrar sync queued."

If your only contact email is one hosted on the domain itself, a DNS or mail problem can lock you out of the messages you need to fix it. Use an address on a different domain for your registrant contact.

WHOIS Privacy Is Not Available for .nz

This is the difference that surprises people most, and it is worth being blunt about.

WHOIS privacy does not exist for .nz domains. The WHOIS Privacy row on a .nz domain's Security tab is shown as Not available, with the note "WHOIS privacy is not available for .nz domains."

Assume your registrant details for a .nz domain are publicly queryable. If that is a problem, register the domain to a company or trading entity with a business address rather than to yourself at your home address.

.nz also does not publish RDAP, the modern machine-readable successor to WHOIS. Lookups go to the registry's own WHOIS service instead. KPanel handles that for you: Domains, then WHOIS Lookup, returns .nz results in the same format as any other TLD.

Privacy and Lock card on a .nz domain in KPanel

Registrar Lock Does Not Exist Either

On a .com or .net, a registrar lock is the switch that stops an unauthorised outbound transfer. The .nz registry has no such concept, so KPanel shows the Registrar Lock row as Not available with the explanation: "The .nz registry does not support registrar lock. Transfers are protected by the UDAI auth code instead."

The UDAI is .nz's transfer authorisation code, the equivalent of an EPP or auth code elsewhere. Whoever holds a valid UDAI can move the domain.

Because there is no lock to fall back on, the UDAI is the only thing standing between your .nz domain and someone else's registrar. Request one only when you actually intend to transfer, do not paste it into an email thread or a support chat, and keep the KPanel account that can request it protected with two-factor authentication. See Two-Factor Authentication.

Transfers Are Fast

.nz transfers are dramatically quicker than the gTLD norm, in both directions:

	.nz domains	Most other TLDs
Transfer time	Same day, often within hours	5 to 7 days
Minimum domain age before transfer	No 60-day rule	60 days (an ICANN rule for most gTLDs)
Authorisation	UDAI code	EPP or auth code
Registrar lock to release first	Not applicable	Yes

Your DNS keeps resolving throughout a transfer either way. The domain does not go offline while it moves.

To move a .nz domain away from Kapsule, follow Transferring Your Domain to Another Registrar: the steps are the same, minus the unlock step that does not apply.

Renewals and Auto-Renew

.nz registrations run in annual terms and auto-renew is on by default. Find it on the domain's Settings tab, under Renewal & Transfer:

Auto-renew on: "We renew this domain automatically before it expires. Price is locked at signup."
Auto-renew off: "You must renew manually before expiry, or the domain will be released."

Kapsule emails you before expiry at 60 days, 30 days and 7 days out, so a lapse should never come as a surprise.

The Settings tab also carries a Renew Domain add-on row showing your expiry date, with a button that adds another year to the registration whenever you want, without waiting for the renewal date.

Turning auto-renew off puts the entire responsibility for keeping the name on you. Once a domain is released back to the registry, recovering it is not a support ticket you can win: whoever registers it next owns it. Unless you deliberately want to drop a name, leave auto-renew on.

What happens between expiry and release is set by the registry, and the .nz rules are not the same as .com's. The safe operating assumption is that the window is shorter than you think. Do not plan around it: renew before the expiry date on your domain's Overview tab.

DNSSEC on .nz

.nz domains registered through Kapsule can be signed like any other. Enable it on the domain's Security tab, and if the domain is registered with us, we publish and renew the DS record at the registry for you. See Enabling DNSSEC for Your Domain.

Troubleshooting

The WHOIS Privacy toggle is missing on my .nz domain. It is not missing, it is shown as Not available. .nz has no WHOIS privacy. See above.

The Registrar Lock toggle will not turn on. Same reason. .nz has no registrar lock. The UDAI is what protects the domain.

A WHOIS lookup says my .nz domain is not registered. Public tools that only speak RDAP report .nz domains as available, because .nz does not publish RDAP. Use KPanel's own WHOIS Lookup under Domains, which queries the .nz registry directly.

My registrant details are wrong on the public record. Update them under Registrant Contact on the domain's Overview tab and save. The registry sync is queued straight away and the public record catches up shortly after.

I need to register a restricted .nz name such as .govt.nz or .ac.nz. Those have eligibility criteria set by the registry. Open a support ticket before you try, and tell us which entity is registering.