The short answer
A domain is registered for a set term and must be renewed before it expires. After expiry it may enter a grace period, then a roughly 30-day redemption stage that costs extra, then it is deleted and becomes available to anyone. Keep auto-renew on, a valid card on file, and a monitored contact email, and ask your registrar to lock the domain.
What "owning" a domain really means
When you register a domain, you are the registrant: you hold the right to use that name for the term you paid for, usually one to ten years. You do not own it forever. Your registrar, the company you pay, records you as the holder. If the term ends without a renewal, the right lapses.
That is why the first question to answer is simple: who is the registrant, which registrar holds the domain, and which email address and card are attached? Many businesses cannot answer this, because the domain was registered years ago by a web designer, an IT contractor or a founder who has left. If that is you, read who owns your accounts and sort it out before anything else.
The lifecycle after the expiry date
The exact timing differs by registrar and by the top-level domain (.com, .se, .co.uk and so on), so always check your own registrar's policy. The general shape is the same, and ICANN, the body that coordinates domain names, describes the registry statuses a domain moves through.
| Stage | What happens | What you can do |
|---|---|---|
| Active | The domain works. Site and email resolve as normal. | Renew early. Nothing is lost. |
| Expired, renewal grace | The term has ended. The registrar may keep the domain working for a short period, or may take it offline or show a parking page. The length is set by the registrar and the extension. | Renew at the normal price, or sometimes with a small fee. Do this immediately. |
| Auto-renew period | ICANN describes this status as the registry automatically renewing the domain after it expired, as a time-limited grace period. | If you want to keep it, pay your registrar promptly. If you do not, tell them straight away. |
| Redemption | The registrar has asked the registry to delete the domain. ICANN says it is held for 30 days. The domain usually stops working. | Contact your registrar at once. Recovery is possible, normally with an extra restoration fee on top of the renewal. |
| Pending delete | The domain stayed in redemption for 30 days without being restored. It stays in this status for several days before being purged. | Very little. Restoration is typically no longer possible. |
| Available | ICANN notes the name becomes available for registration five calendar days after the redemption period ends. | Anyone can register it, including people who watch for expiring names. |
The 30-day redemption period, the five-day purge window and the "several days" in pending delete come from ICANN's own explanation of EPP status codes. Grace periods before redemption vary, so ask your registrar for theirs.
What you lose while it is expired
- Your website stops loading, or shows the registrar's parking page.
- Email to your domain bounces. Incoming messages from customers may be lost for good if senders give up.
- Any service that sends mail as your domain fails authentication.
- Search engines see an error or a different site. Rankings can suffer if it lasts long enough for your pages to be dropped.
- Logins that use your domain's email address (for password resets) become unreachable, which can lock you out of other accounts.
The settings that protect you
Auto-renew is the single best protection. With it on and a valid card saved, the registrar renews the domain before it expires. Cards expire and banks block charges, so check the card date as well, not only the switch.
The contact email on the domain matters just as much. Reminder notices go there. If it is an address at the domain itself, you will never see the warning that the domain is about to disappear, because the domain being down takes that mailbox with it. Use an address at a different provider that a real person reads, and add a second contact if your registrar allows one.
Your registrar may also ask you to verify your contact details by email from time to time. Treat those messages as important: open them and act, rather than assuming they are junk. Check the registrar's own notice for the deadline it sets.
A registrar lock stops the domain being transferred to another company without your say. ICANN describes the clientTransferProhibited status as the registrar asking the registry to block transfers, which helps prevent unauthorized transfers. Keep it on, and only ask for it to be removed when you plan a move (see move or transfer a domain).
A five-minute routine
- 1Log in to your registrar and write down the expiry date of every domain you own.
- 2Confirm auto-renew is on and the saved card has at least a year left.
- 3Check the registrant contact email. Is it monitored by a living person? Is it at a different provider from the domain?
- 4Check the registrar lock is on.
- 5Turn on two-factor sign-in for the registrar account, so nobody can take the domain over by guessing a password.
- 6Put a calendar reminder 60 days before the earliest expiry. Auto-renew can still fail, and a reminder gives you time to fix it.
Example: The card that expired
A landscaping company had auto-renew on at a registrar, so the owner felt safe. The card on file had expired a year earlier. Renewal attempts failed quietly, and the reminder emails went to an address on the domain itself, then to a former employee's old mailbox. On the expiry date the site and email stopped. The owner noticed when customers called to say the website was gone. Because they acted on the first day, renewal at the registrar fixed it. Had they waited into the redemption stage, they would have faced a restoration fee and a risk of losing the name entirely. A card check and a monitored contact address would have prevented all of it.
If you already lost access or it has expired
Do not wait to see if it fixes itself. Log in to the registrar and look at the status. If it is simply expired, renew it today. If you cannot log in because the account belongs to someone else, contact the registrar's support with proof that the business is the registrant, and use the steps in reset your password for the account itself.
Once the domain is back, check that DNS records are intact. Some registrars reset them to defaults when a domain lapses, which can leave the site or email still broken after renewal. Compare against what is DNS to review what each record should do.
When to ask us
Tell us if your domain is expiring or expired, if you do not know who your registrar is, or if the site is down and you suspect the domain. Use the support form and include: the domain name, the registrar's name if you know it, the expiry date shown (a screenshot link from Google Drive, Dropbox or Loom is ideal), and what you have already tried. Please do not send passwords. We can help you work out whether it is the domain, hosting or DNS, and can guide the recovery. Who may act on your account is covered in your proposal.
