Don't lose your domain: renewals, auto-renew and registrar access
Short answer: When a domain expires, your website and your email on that domain stop working, usually within days, and if nobody renews it the name can eventually be released for anyone to register. For .com and other generic domains, ICANN's rules require reminders before expiry and a 30-day redemption period after deletion, but the recovery fees and gaps in between are painful. The fix is boring and reliable: auto-renew on, a card that won't expire, a shared admin email on the registrar account, a registrar lock, and a multi-year renewal.
Why this goes wrong in small businesses
Domains are bought once and forgotten. The person who registered it might have been a founder who has moved on, a web designer who used their own account, or an office manager whose email no longer exists. Renewal reminders go to that address. The card on file expired two years ago. Then one morning the website is down and nobody's email works.
Timeline of an expiring domain
The following applies to generic top-level domains such as .com, .net, .org and the newer gTLDs, under ICANN's Expired Registration Recovery Policy (ERRP) as described on ICANN's registrant pages (checked November 2026). Country-code domains (.us, .ca, .co.uk and so on) follow their own registry rules, so check yours.
| When | What happens |
|---|---|
| Registration period | You registered for a set term, typically one to ten years according to ICANN's FAQ |
| About one month before expiry | Registrar must send a renewal reminder to the registrant email address |
| About one week before expiry | Second reminder |
| Expiry day | If auto-renew works, nothing visible happens. If not, the registration has expired |
| Within 5 days after expiry | If the domain is deleted by the registrar, at least one more notice with restore instructions must be sent |
| After expiry, before deletion | Registrars handle this window differently. ICANN requires that DNS service is disrupted for up to 8 days before deletion, so your website and email stop working. Renewal is usually still possible at the normal price, but check your registrar's terms |
| Deletion → Redemption Grace Period (30 days) | The registry holds the name. It can't be transferred away, but you can restore it through your registrar, often for an extra redemption fee |
| After redemption | The domain goes to pending deletion for several days, then can be registered by anyone |
The EPP status codes ICANN publishes show where a domain sits in this process. A lookup that shows redemptionPeriod or pendingDelete means act today.
Prevention checklist
Spend 30 minutes on this once a year and the problem goes away.
- Find out where every domain is registered. Use ICANN's registration data lookup tool (lookup.icann.org): enter the domain and it shows the registrar, the expiry date and the domain's status codes. Contact details are often redacted for privacy, but the registrar and dates are visible.
- Make sure the business owns the registrar account. The account login should use a role address such as domains@ or admin@ that several people can read, not a personal or ex-employee address.
- Check the registrant contact email. ICANN's notices go to the registrant email in the registration record, which can differ from the account login email. Keep both current.
- Turn on auto-renew, and keep the payment card up to date. ICANN's FAQ itself flags this: most registrars offer auto-renewal, so keep payment information current.
- Renew for several years if you plan to keep the name. It reduces the number of renewal events that can fail.
- Turn on the registrar lock. Ask your registrar to set statuses such as
clientTransferProhibited; ICANN notes these restrictions help prevent unauthorized transfers, deletions or updates. - Enable two-factor sign-in on the registrar account.
- Add a second person to the account where the registrar supports it, or store the login in your business password manager.
- Put the expiry date in a shared calendar with a reminder 60 days ahead, in case everything else fails.
- Monitor it. An uptime or domain-expiry monitor can warn you if renewal fails; see uptime monitoring for small business websites.
"I can't log in to my registrar"
This is the common situation, and it's fixable if you start early.
- Identify the registrar with lookup.icann.org. If the result is a reseller or hosting company, that's who you deal with.
- Try the registrar's account recovery with every email address the business has used. Check old invoices or receipts for the account email.
- If a former employee or agency registered it, ask them to either hand over the account or transfer the domain into an account you control. Many registrars support "change of account" or "push" transfers between their own customers, and transfers to another registrar need an authorization code from the current one.
- If nobody can be reached, contact the registrar's support. Expect to prove you're the registrant, typically with business documents matching the registration details. This is why keeping registrant details accurate matters.
- If it has already expired, tell the registrar it's urgent. Renewal during the window after expiry is usually simplest; once in redemption, ask for the restore price and do it immediately.
- If renewal reminders never arrived, ICANN provides a complaint route for registrars that don't send them, but that won't bring the site back faster than renewing.
Once you're back in: change the account email to a role address, turn on auto-renew, set the lock, renew for longer.
What else breaks when a domain lapses
- Website and any subdomains (shop, booking, client portal).
- Email to and from the domain, including password reset emails for your other business accounts, which is how small problems become big ones.
- Payment provider, app store and ad account verifications tied to the domain.
- Your search visibility, if the outage lasts long.
FAQ
Can someone else buy my domain the day it expires?
Not usually for generic domains: there's an interval after expiry and then the 30-day redemption period before release. But don't rely on that; the site and email stop working well before.
Is "domain privacy" a problem for proving ownership?
It hides your details from public lookups, not from your registrar. Keep the underlying registrant details accurate so you can prove ownership if you ever need to.
Should the web designer register the domain for us?
They can help, but it should be in an account owned by your business, with your contact details. Give the designer access, not ownership.
How much does redemption cost?
It varies by registrar and is set in their terms, often well above a normal renewal. Check your registrar's fee page now, before you need it.
If your domain is tangled up with an old agency or an ex-staff email and you want it moved safely into your own account, tell us what you can still access.