How to Get a .Gov Email Address: Eligibility, Domain, and Setup

To get a .gov email address, your organization registers a .gov domain for free through CISA’s registrar at get.gov, then connects that domain to a DNS host and an email provider you arrange separately. CISA does not run email or web hosting itself, so the domain is one piece and the mailbox is another. Plan on identity verification, roughly 10 business days of review, and some DNS configuration work after approval.¹

One caveat before you start: as of February 17, 2026, new domain requests are not being accepted because of a lapse in federal funding. Existing domains can still be managed. Check get.gov for current status before you begin an application.²

Check That Your Organization Qualifies

Only verified U.S.-based government organizations can register a .gov domain. CISA manages the top-level domain under the DOTGOV Act of 2020 and verifies every applicant’s identity and eligibility before approving anything.³

Eligible organization types include:

Federal agencies in the legislative, executive, or judicial branches
The 50 states, the District of Columbia, and the U.S. territories (American Samoa, Guam, Northern Mariana Islands, Puerto Rico, and the U.S. Virgin Islands)
Tribal governments recognized by the federal government or by a state government
Counties, parishes, and boroughs
Cities, towns, townships, villages, and similar municipal entities
Special districts that deliver specialized services, such as utility districts and transit authorities
School districts that operate independently from a local government
Interstate organizations formed by two or more states

The statute reaches “any Federal, State, local, or territorial government entity, or other publicly controlled entity,” which can include publicly controlled state colleges and universities.⁴ If your organization isn’t a government body, .gov isn’t available to you.

Gather What You Need Before Applying

Missing pieces are the usual reason applications stall. Line these up first.

A Login.gov Account With Identity Verification

Every applicant needs a Login.gov account, and first-time domain requesters must complete identity verification. You’ll need one accepted ID: a U.S. driver’s license, a non-driver state ID, or a U.S. passport book.⁵ You’ll also need your Social Security number and a U.S. phone number.⁶

An Authorized Senior Official

Your application must name a senior official inside the organization who authorizes the request. CISA contacts that person to confirm they approved the application, so make sure they know it’s coming. Qualifying titles depend on the type of government:

Cities: mayor, council president, city manager, township or village supervisor, select board chairperson, chief, or senior technology officer
Counties: commission chair, county judge, county mayor, parish or borough president, or senior technology officer
Tribal governments: the tribal leader recognized by the Bureau of Indian Affairs or by the relevant state government
School districts: board chair, superintendent, or senior technology officer
Special districts: CEO, chair, executive director, or senior technology officer

CISA will follow up directly with the senior official during review.³

Organization Details

Have the organization’s official name, mailing address, and type ready. For some entities, CISA may ask for supporting documents such as legislation, a charter, or bylaws to confirm the organization is a legitimate government body. Pulling those together before you apply keeps the review moving if CISA requests them.

Pick a Domain Name That Will Pass Review

CISA evaluates every requested name to make sure it won’t confuse the public about who runs the site or what it does. A name that clearly reflects your organization, service, or location has the best odds. The technical rules:

At least three characters, generally no more than 30; keeping it under 15 is easier to type and remember
Letters, numbers, and hyphens only, and the name cannot start or end with a hyphen
If a name could describe many different things in different contexts, pick something more specific
You cannot register alternate spellings, typos, or foreign-language equivalents just to keep others from claiming them

Submit the Request at get.gov

Applications go through the official registrar at get.gov, and you must be a government employee or working on behalf of a government entity to submit one.² The steps:

Sign in to get.gov with your Login.gov account, completing identity verification if you haven’t already
Start a new domain request and fill in your organization’s details, the domain name you want, and contact information for yourself and your senior official
Explain the purpose of the domain (website, email, or both)
Submit the request electronically

There is no fee. CISA eliminated registration and renewal fees in April 2021 to encourage adoption of .gov across all levels of government.⁷

Review usually takes about 10 business days, though more complex requests can take longer.¹ CISA may reach out for additional documentation during that window. If your application is approved, CISA asks for your Domain Name Server (DNS) information so the domain can go live. Denials commonly cite a misleading name, an ineligible organization, or missing authorization from a qualified senior official; you can fix the issues and reapply.

Set Up Email on the Domain

Registering the domain is only the first step. CISA does not offer DNS hosting or email hosting, so your organization arranges both separately.¹

Connect a DNS Host

Before email will flow, your .gov domain needs DNS hosting. Your DNS provider runs the name servers that route traffic for your domain, and you enter those name server addresses into the .gov registrar as NS records. Some DNS providers bundle email service, which can simplify setup for smaller agencies.

Choose an Email Provider

Most government agencies use a cloud platform built for federal compliance, such as Microsoft 365 Government (GCC) or Google Workspace for Government. Your email provider gives you MX (Mail Exchanger) records to add to your DNS configuration; those records tell incoming mail servers where to deliver messages sent to your .gov addresses.

If your agency already runs email on a non-.gov domain, like a .us or .org address, you can migrate to the new .gov domain. Plan carefully. A migration usually involves updating MX records, reconfiguring user accounts, and running both domains in parallel during the transition so nothing gets lost.

Turn On Email Authentication

Email authentication is not optional for government domains. Three protocols work together to keep attackers from sending mail that looks like it came from your agency:

SPF (Sender Policy Framework), a DNS record listing the IP addresses allowed to send email for your domain
DKIM (DomainKeys Identified Mail), a digital signature on outgoing headers that lets recipients confirm the message wasn’t altered
DMARC (Domain-based Message Authentication, Reporting, and Conformance), which ties SPF and DKIM together and tells receiving servers what to do with messages that fail

All three must be implemented together to be effective.⁸ Federal executive branch agencies are required under Binding Operational Directive 18-01 to enforce a DMARC policy of “reject” on all their domains. Non-federal government entities are not bound by that directive, but CISA strongly recommends the same policy for every .gov domain.

Keep the Domain Active

A .gov domain is registered for one year at a time, and there is no auto-renewal. Starting 60 days before expiration you can renew by signing into manage.get.gov, confirming your contact information and domain details, and re-acknowledging the requirements for operating a .gov domain.⁹ Renewal after expiration is possible, but even a brief lapse can disrupt email delivery and website access.

You’re also required to keep your registrar contact information accurate at all times. If your senior official changes roles or leaves, update the record promptly. CISA verifies this information at renewal and may reach out between cycles.¹⁰

1
get.gov. FAQs About Gov Domains
2
get.gov. Domain Requests
3
get.gov. Eligibility for Gov Domains
4
Congress.gov. Text – S.2749 – 116th Congress (2019-2020) DOTGOV Act of 2019
5
Login.gov. Accepted ID Types
6
Login.gov. Verify My Identity
7
get.gov. Gov Is Moving to CISA
8
Cybersecurity & Infrastructure Security Agency. Implement SPF, DKIM, and DMARC Email Authentication Methods
9
get.gov. Domain Management
10
get.gov. Requirements for Operating a Gov Domain