Renewing and Protecting Your Domains (Don't Lose the Name)
By Thomas Lovas Lokoy — researched and drafted with AI assistance, then fact-checked and approved by Thomas before publishing · Editorial policy
To never lose a domain: turn on auto-renew, keep a card on file that expires after the domain does (plus a backup method), make sure the email address on your registrar account is one you read, answer the registrar's verification emails, and keep the transfer lock on. If a domain does lapse, for a .com you usually still have weeks to rescue it, first at the normal renewal price and then, for 30 days, at a restore fee that can be several times higher. After that it is released for anyone to register.
Why domains get lost
Rarely through attack, usually through admin:
- An expired card. Auto-renew was on, the charge failed, and the reminders went to an old inbox.
- An unread inbox. The registrar contact address is a former employee's, or an address at the very domain that is expiring.
- An ignored verification email. Under ICANN's 2013 Registrar Accreditation Agreement, if a registrar gets no affirmative response to a contact verification "within fifteen (15) calendar days" it must "either verify the applicable contact information manually or suspend the registration".
- A transfer that went wrong. Moving registrars without checking the expiry date, or with privacy hiding the approval email.
The expiry timeline, as ICANN's rules set it
For generic extensions such as .com, ICANN's Expired Registration Recovery Policy fixes the reminders and the minimum renewal window, and the EPP status definitions fix the end of the process:
- Before expiry: at least two reminders, one "approximately one month prior to expiration" and one "approximately one week prior to expiration".
- Just after expiry: if the domain is not renewed within five days, at least one more notice.
- The renewal window: set by your registrar. If the domain will be deleted eight or more days after expiry, its DNS must be interrupted for at least the last eight days in which you can still renew, so the website and email stop working before the name is lost. That is often the moment people notice.
- Redemption: after the registrar deletes the registration, a 30-day redemption period during which you can still restore it, usually for a fee.
- Pending delete: several days in which nothing can be done, then the name is released.
Country-code registries set their own timelines; check yours.
A worked example at one registrar. Dynadot's price table, read on 16 October 2026, listed a 30-day renewal grace period for .com, a renewal price of EUR 9.95 and a restore fee of EUR 92.25 (shown to us in euros). For a .com expiring on 1 March:
| Period | Approximate dates | Cost to keep the name |
|---|---|---|
| Before expiry | Up to 1 March | EUR 9.95 renewal |
| Renewal grace | 1 to 31 March | EUR 9.95 renewal, but the site and email may already be down |
| Redemption | Early April to early May | EUR 92.25 restore fee, plus the renewal |
| Pending delete, then release | Early to mid May | Not recoverable; anyone can register it |
Missing the first two windows turns a EUR 9.95 bill into more than EUR 100, which is more than nine years of renewals at the same price. Missing the third loses the name, often to a drop-catching service; how domain backorders work shows what happens next.
The habits that prevent it
- Auto-renew on every name you want to keep. Then check it once a year rather than assuming.
- A card that outlives the domain, plus a backup. Update the card the day a new one arrives.
- A contact email you read, on a different domain. If your registrar contact is an address at the domain that is expiring, the warnings go to a mailbox that stops working at the worst moment.
- Answer verification emails the day they arrive, including the one after you change contact details.
- Renew for longer when prices are about to rise. Verisign's .com wholesale price rises from USD 10.26 to USD 10.97 on 1 November 2026; registrars set their own retail timing, but renewing years ahead locks in the price you pay now.
- A quarterly look-up. Run each name through our WHOIS lookup: expiry date, registrar, and the status codes you expect.
Locks: what each one does
| Lock | Shown in a lookup as | Set by | What it stops |
|---|---|---|---|
| Transfer lock | clientTransferProhibited | Your registrar, at your request | Transfers to another registrar until you remove it |
| Update and delete locks | clientUpdateProhibited, clientDeleteProhibited | Your registrar | Changes to, or deletion of, the registration |
| Registry lock | serverTransferProhibited, serverUpdateProhibited, serverDeleteProhibited | The registry, through a registrar offering it | All of the above until an out-of-band verification, even if someone controls your account |
You can see a registry lock in practice: lookups of spaceship.com and namecheap.com on 16 October 2026 both showed server delete, transfer and update prohibited alongside the client transfer lock, which is how registrars protect their own names. For most domains the free transfer lock plus two-factor authentication on the registrar account is the right level; registry lock suits names whose loss would be serious. How to protect a domain from hijacking covers account security, and what WHOIS shows explains every status code.
Consolidating makes this easier
Domains spread across several registrars mean several cards, several inboxes and several renewal calendars. Moving them to one registrar reduces the number of things that can expire unnoticed; the domain transfer guide covers moving names, including the 60-day rules. If you choose a registrar for the job, best domain registrars 2026 compares renewal prices, and Spaceship and Namecheap both offer auto-renew and free WHOIS privacy according to our registrar data.
Frequently asked questions
What happens when a domain expires?
For a .com, the registrar keeps it renewable for a period it sets, and must interrupt its DNS for at least the last eight renewable days if it will be deleted eight or more days after expiry. Then comes a 30-day redemption period, restorable for a fee, then several days of pending delete before the name is released.
How long do I have to renew an expired domain?
It depends on your registrar's grace period for that extension; Dynadot listed 30 days for .com on 16 October 2026. After that you usually have 30 more days in redemption, at a restore fee.
How much does it cost to recover an expired domain?
During the grace period, usually the normal renewal price. In redemption, a restore fee on top: EUR 92.25 for a .com at Dynadot on 16 October 2026, against EUR 9.95 to renew on time. Registrars must make their fees available, so check yours.
What is a registry lock?
A lock applied at the registry, shown as serverTransferProhibited, serverUpdateProhibited and serverDeleteProhibited, that blocks changes until an extra out-of-band check. It protects a domain even if someone gets into the registrar account. Not every registrar or extension offers it.
Should I turn on auto-renew?
Yes, for every domain you want to keep, with a card that will not expire first. Auto-renew is the single habit that prevents most lost domains.
Sources
Last updated:
