The DNS token never reaches your browser
Every provider call runs inside a Cloudflare Worker. There is no API token in the bundle to extract — an end-to-end test asserts it.
2 free subdomains · GitHub verified
Connect your GitHub account, register up to 2 free subdomains, and manage your own DNS records. No hosting provider to pick, no IP address needed up front.
Lowercase letters, numbers and single hyphens.
Already have an account? Sign in
; records you control, from day one @ A 93.184.216.34 www CNAME myproject.itdev.eu.cc api A 93.184.216.34 _acme-challenge TXT "pQ4f…" @ CAA 0 issue "letsencrypt.org" ; MX, NS — not available, by design
01How it works
You are never asked to choose a provider, a connection type or an IP address to get a name. Register first, point it wherever you like afterwards.
Name, email, password. No confirmation link to chase — you land in the dashboard signed in.
Read-only identity verification. Ownership is anchored to your immutable GitHub id, so renaming your account changes nothing.
Search, review, accept the terms. The name is reserved atomically — two people racing for it cannot both win.
Your subdomain and anything beneath it: www, api, docs, underscore-prefixed challenges.
02DNS records
Up to 25 records per subdomain, at the apex or any name beneath it.
| Type | What it is for | Example value |
|---|---|---|
| A | Point at an IPv4 server | 93.184.216.34 |
| AAAA | Point at an IPv6 server | 2606:4700:4700::1111 |
| CNAME | Alias to a managed host | you.github.io |
| TXT | Verify ownership, ACME challenges | vc-domain-verify=… |
| CAA | Restrict who may issue TLS certs | 0 issue "letsencrypt.org" |
| SRV | Advertise a service and port | 10 5 5060 sip.example.com |
| MX | Unavailable — this platform does not host mail, and mail infrastructure on a shared free namespace attracts abuse that cannot be policed. | |
| NS | Unavailable — delegating a subtree to an external nameserver would place records outside every validation on this page. | |
You are never asked to pick one of these during registration — add whichever records your host needs, whenever you need them.
03Why GitHub
A free namespace only stays usable if every name has an accountable owner. GitHub verification is the cheapest way to get that without asking you for documents or payment details.
read:userPublic profile and account ageuser:emailPrimary verified addressrepoNever requestedwrite:orgNever requestedgistNever requesteddelete_repoNever requested04Security
Every provider call runs inside a Cloudflare Worker. There is no API token in the bundle to extract — an end-to-end test asserts it.
Record names are re-derived server-side from the subdomain you hold. Suffix confusion, embedded root domains and public-suffix names are all rejected.
Row Level Security means a valid session still cannot read another account or write DNS directly. The API is not the only boundary.
Names are reserved inside a transaction behind a unique index, then finalised. A failure rolls the reservation back and frees your slot.
Turnstile is verified server-side on signup, registration, search and abuse reports, with per-account and per-IP ceilings behind it.
Sign-ins, GitHub events, registrations, releases and DNS changes are all logged, and your own trail is visible to you.
05FAQ
Not here? Support covers the failures people actually hit, and the setup guides give exact records per host.
Ready when you are
Lowercase letters, numbers and single hyphens.
Already have an account? Sign in
Worth knowing first
Full detail in the Terms and Acceptable Use Policy.