Cloudflare logo

Cloudflare

Developer & Cloud

cloudflare.com

How to protect your Cloudflare domains while you are alive

There is no way to name a beneficiary or successor on a Cloudflare account. While the account holder is alive, Cloudflare allows transferring the account and transferring the domain to another registrant.

Cloudflare decides requests about Cloudflare domains after a death case by case, so nothing in its terms promises a survivor anything; what the account holder sets up in advance is what holds. There is no way to name a beneficiary or successor on a Cloudflare account. While the account holder is alive, Cloudflare allows transferring the account and transferring the domain to another registrant.

How to protect your Cloudflare domains

1
Add a trusted person as a Super Administrator on the account:
  • •In the dashboard, go to Manage Account > Members > Invite Members and enter the person's email.
  • •Assign the Super Administrator - All Privileges role.
  • •The invitee accepts by email and needs a verified email address; Enterprise accounts can use Direct Add instead.
  • •Keep more than one Super Administrator, as Cloudflare recommends, so management of the domains does not depend on one person.
2
Name a trusted administrative contact on each domain; the Domain Registration Agreement treats that contact as a designee of the registrant with authority to manage the domain.
3
Keep the registrant email current, verified and reachable by someone other than you, on an address not tied to the domain itself, and note in your estate documents which mailbox it is.
4
Generate a domain ownership certificate for each domain from Registrations > Manage > Contacts > Download ownership certificate, and keep it with your estate documents.
5
Create account-owned API tokens under Manage Account > Account API Tokens for integrations that must keep running after the person who set them up has left; Registrar does not yet support them.
6
Confirm the payment method and billing email are current, and tell your executor not to close that card before the domains are moved.
7
List your domains in your estate documents with the registrar, the renewal date, the registrant email and who should inherit each one.

Naming who acts after a death

Designation

Cloudflare offers no beneficiary designation. A trusted person can be added as a Super Administrator, and under Section 1.5 of the Domain Registration Agreement the administrative contact named when the account was secured is deemed a designee of the registrant.1, 2

What Cloudflare's terms say about sharing and transfers4

Workspace roles and admin access

The "Super Administrator - All Privileges" role can edit any Cloudflare setting, make purchases, update billing, manage members and create account-owned API tokens, and can revoke the access of other Super Administrators.3

Members are invited from Manage Account > Members > Invite Members; the invitee receives an email to accept and needs a verified email address, and Enterprise accounts can use Direct Add to skip the email confirmation.3

Cloudflare recommends having more than one Super Administrator, so that if one cannot sign in there is another who can manage the domains.1

Account API tokens act as service principals with their own permissions, so an integration keeps working after the user who configured it has left; creating one needs Super Administrator permission, and user tokens act on behalf of one user.4

A few products, Registrar among them, do not yet support account API tokens, and the legacy Global API Key is tied to the individual user's login.4

Transferring the account or registration

A Registrar domain moves between Cloudflare accounts when the source account submits a move request and the gaining account accepts within five days, or the request auto-cancels; the registration is then transfer-locked for 30 days and the target account renews it.5

The domain must have been registered more than 10 days earlier, with the registrant email verified, DNSSEC off, no pending Change of Registrant, no administrative or zone lock, and no pendingDelete, redemptionPeriod or pendingTransfer status.5

A domain transfers out to another registrar once it is unlocked and its authorization (EPP) code is given to the receiving registrar; Cloudflare auto-approves on the fifth day, and ICANN blocks a transfer within 60 days of registration, a transfer or a registrant change.6

Changing the registrant's name, organization or email sends a Change of Registrant approval to the current registrant's address, which auto-cancels after seven days; an email change also needs approval from the new address.7

An approved registrant change applies a 60-day transfer lock unless the current registrant selects "Do not apply 60 day transfer lock" before accepting; the new registrant's approval page has no such option. A further contact change during the lock extends it to 60 days from that update.7

The registrant authorizes Cloudflare to act as Designated Agent under the ICANN Transfer Policy to approve a Change of Registrant.2

Expiry and activity requirements

ICANN requires the registrant email on a Cloudflare Registrar domain to be verified. If it is unverified or the link expires, the domain is put on hold with parking nameservers and the site stops resolving until verification completes.8

Exporting and backing up data

A domain ownership certificate is a PDF certifying Cloudflare is registrar of record and listing the creation and expiry dates, the contacts and the nameservers, offered as proof of ownership to a bank, marketplace or legal entity.9

Sources9

Should you save your passwords for your family?

Some people store account passwords so a family member can sign in later. The practice has three practical limits:

  • Two-factor authentication often blocks it. Most accounts require a second factor — a code sent to a phone, an authenticator app, a passkey, or a physical key. A saved password alone frequently does not grant access, and the recovery codes that would are easy to lose or let go stale.
  • It usually conflicts with the platform's terms. Most operators prohibit account sharing and signing in as another person, including after a death. Stored credentials are not the operator's recognized access path, and using them can violate the terms of service.
  • Operators provide other paths. Where an operator offers a designation tool — Apple's Legacy Contact, Google's Inactive Account Manager, a beneficiary designation — that mechanism grants access the operator recognizes. A password manager's own emergency-access or legacy feature passes credentials through a controlled process. Digital assets named in a will or trust give a fiduciary authority under each state's Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA).
SimplyTrustSimplyTrust Editorial·

Sources

Data sourced from Cloudflare primary sources (15 pages reviewed). How we research.

Cloudflare customer support

Cloudflare Support

Mailing address

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107
Verified Sep 2026

Forms for Planning Your Estate

Free forms for planning your estate: a will, living trust, pour-over will, both powers of attorney, living will, and TOD deed.

Free

Pour-Over Will

Catch anything outside your trust. Pairs with your revocable trust.

Get Started
$12/month

Revocable Living Trust

Create a revocable living trust to avoid probate, protect privacy, and control asset distribution.

Get Started
Free

Last Will and Testament

Name your heirs, guardians, and final wishes. Free for every state.

Get Started
Free

Codicil to a Will

Add, revoke or replace provisions of your will and republish the rest, signed as your state requires for a will.

Get Started
Free

Healthcare Power of Attorney

Name someone to make medical decisions if you can't.

Get Started
Free

HIPAA Release

Name who may receive your medical records, in the authorization federal law requires, with your state's rules for sensitive records. Free for every state.

Get Started
Free

Financial Power of Attorney

Name someone to manage your finances if you can't.

Get Started
Free

Transfer on Death Deed

Transfer real property to a beneficiary upon your death without probate. Available in 34 states and the District of Columbia.

Get Started

All forms

Tools for Planning Your Estate

Free tools for planning your estate: what a will or trust costs, whether you need a trust or TOD deed, and how documents are signed.

How Much Does a Revocable Living Trust Cost?

Compare revocable living trust costs across providers including online services and attorneys.

Compare Costs

How Does SimplyTrust Compare to LegalZoom, Trust & Will, and Other Services?

Compare what it costs to make a trust official across SimplyTrust, LegalZoom, Trust & Will, Rocket Lawyer, and Quicken WillMaker.

Compare Services

Do I Need a Revocable Trust?

Find out if a revocable trust makes sense based on your state, estate value, and family situation.

Check Now

Trust or Will: Which Costs Less?

Compare the cost of probate vs a trust for your state and estate value.

Compare Options

How Much Is the Federal Gift Tax?

Whether a gift owes federal gift tax, how much of the annual exclusion and lifetime exemption it uses, and whether Form 709 is due.

Check a Gift

What Does Estate Planning Actually Cost?

Compare costs across estate planning providers including online services and attorneys.

Compare Costs

How Much Life Insurance Do I Need?

Calculate your life insurance needs based on income, debts, and family situation.

Use Calculator

Are My Beneficiary Designations Protected?

Check how divorce, creditors, and state laws affect your beneficiary designations.

Check Now

All tools