Are .io domains safe in 2026?

Last reviewed: June 2026. VOLATILE: re-verify .io and Chagos status against primary sources on each refresh.

By Dr Alex J Martin-Smith · Last updated 4 June 2026

How do .io domains work, and is .io safe in 2026?

.io is fully operational and safe as of June 2026. ISO 3166-1 still lists IO unchanged; no IANA or ICANN delegation change. The UK and Mauritius signed a Chagos treaty on 22 May 2025, but sovereignty transfer is not complete. Developing situation; last reviewed June 2026. (ICANN, 2024; House of Commons Library, 2026.)

.io is a country-code TLD for the British Indian Ocean Territory, widely used by tech and startups; anyone can register through accredited registrars. The registry is operated by Internet Computer Bureau (Identity Digital). Only if ISO 3166-1 were ever to remove the IO code would ICANN's policy begin a five-to-ten-year phased retirement, not a sudden shutdown. (ICANN, 2024.)

This is a developing situation. The answer above is a dated snapshot as of June 2026, not a permanent guarantee.

Chagos, ISO 3166-1 and what has actually changed

The UK and Mauritius signed a treaty on 22 May 2025 concerning the Chagos Archipelago, but sovereignty transfer has not completed. ISO 3166-1 still lists the IO code unchanged, and IANA and ICANN have taken no delegation action on .io. UK implementing legislation for the agreement stalled in April 2026 (House of Commons Library, 2026).

What would happen only if IO were removed from ISO 3166-1?

Only if the IO code were ever removed from ISO 3166-1 would ICANN's policy begin a phased retirement of the corresponding ccTLD: typically five years, extendable to ten, not an overnight shutdown (ICANN, 2024). As of June 2026 that standard has not changed and .io remains in normal operation.

Sources

1. ICANN. (2024, November 14). The Chagos Archipelago and the .io domain.
2. House of Commons Library. (2026). The UK to Mauritius agreement on the Chagos Archipelago.

Back to UK domains explained