.login

The mission of the .login gTLD is to provide a dedicated, trusted namespace where organizations can house their authentication and credential access points under a single, purpose-built domain extension -- eliminating the need for extended subdomain variations of existing domains that are easily confused with phishing attempts. Today, credential pages typically live at paths like login.example.com, accounts.example.com, or signin.brand.example.com. These extended URLs are trivially spoofable; attackers register lookalike variations (1ogin.example.com, login-example.com) to harvest credentials. A .login domain -- e.g., brand.login -- provides a short, unambiguous, and recognizable address that is inherently harder to impersonate and easier for consumers to verify before entering sensitive information. Intended registrants include businesses, technology companies, financial institutions, healthcare providers, educational institutions, and any organization that provides login portals or identity management services. The TLD will serve end users globally by providing an intuitive signal that a domain is associated with a legitimate authentication or account access point. This purpose is sustainable because login and authentication services are foundational to the internet economy and will remain critical as digital services expand. The registry operator will promote best practices in security and anti-phishing measures among registrants to foster trust in the namespace.